$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a579b58-4e3a-3d6e-9c2a-84f047c547d1.roa File: 3a579b58-4e3a-3d6e-9c2a-84f047c547d1.roa (raw, json) Hash identifier: I+LxyimZ545ClOji11XVuHkxnFWrtT4I9NmV0tDcg8I= Subject key identifier: CF:B5:41:9B:0D:59:4B:B1:64:FC:E9:44:BE:59:DF:BE:BF:E5:F2:91 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584CB551F9612D4303C0CF14CF40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a579b58-4e3a-3d6e-9c2a-84f047c547d1.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 15169 IP address blocks: 192.178.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:f9:61:2d:43:03:c0:cf:14:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=3d653796-4225-4957-b844-9b1d7c0f11ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:92:b3:ec:c7:ee:86:65:b1:16:d7:a3:03:6d: f3:1c:5d:1c:92:a0:f3:a4:fd:71:0d:16:26:bb:95: c3:ec:19:9f:30:f1:c2:c9:ca:50:f1:5c:81:60:ad: bc:b1:fd:d0:cf:ee:b9:b3:0f:f7:2d:22:4c:b8:ae: 08:9a:88:d8:6c:dc:3f:43:62:a3:12:e0:b2:3f:68: 60:49:3e:55:79:5e:0d:89:36:3d:cf:60:5c:09:58: d8:23:dd:d8:d8:63:d9:10:ae:a4:52:ff:b7:88:ee: 40:e3:ed:ea:3d:92:b5:7f:1c:78:2e:77:df:37:4b: 31:e2:4b:3b:e3:2c:4f:33:18:ce:5f:3c:fa:ed:d7: 6a:f6:7c:47:ea:b0:3c:1d:62:4b:89:45:8b:54:03: e3:92:1e:4a:84:ce:ad:ef:dc:9e:84:18:bb:2e:1c: 10:15:8b:cd:46:fc:16:dc:2d:55:f4:53:f0:9b:50: 76:89:39:3b:21:cf:4c:96:eb:6c:44:db:e2:32:98: f5:fe:b6:0d:10:96:12:6e:94:da:b4:4a:b4:18:ec: 41:ea:57:25:64:47:8e:67:03:87:e0:32:45:15:49: 97:3b:a0:2a:08:4b:54:89:a9:e1:70:64:eb:cd:9f: ca:c4:7e:92:77:24:65:8c:fe:04:b7:1c:ba:53:5e: ff:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B5:41:9B:0D:59:4B:B1:64:FC:E9:44:BE:59:DF:BE:BF:E5:F2:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a579b58-4e3a-3d6e-9c2a-84f047c547d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b3:f2:6d:59:4a:bd:02:9c:23:e5:ee:c9:53:5e:67:28:1e: e4:90:8f:e4:8b:7e:a6:f0:4e:7b:ae:14:eb:2d:ce:f2:6a:52: 59:e2:ba:99:3a:2c:12:0d:6b:d6:3b:6e:24:59:bd:8f:07:f5: 70:92:fd:89:c3:e8:53:59:e7:8c:f5:14:20:98:0e:bc:e5:da: 6e:a5:15:8c:17:fe:6b:36:73:84:15:04:78:f0:73:11:6b:d9: 7d:b4:05:31:b9:5c:de:2a:4d:82:54:02:e9:b0:c4:79:98:f8: 9b:74:62:a0:98:d6:01:b7:e1:27:c8:c2:f8:25:f7:8d:f9:12: 7a:d4:53:fc:5a:e1:cd:94:2c:91:55:12:c1:b7:81:5b:cb:32: ad:0c:54:53:e9:f3:61:aa:cd:74:9c:3b:73:3f:51:ec:1e:6a: b9:b5:bc:06:41:9d:1c:7b:8a:1a:10:91:35:53:db:9e:6d:44: 14:49:b3:e7:4b:76:a4:6c:2c:c9:e2:e4:21:89:9a:9b:6f:a5: 89:4b:c5:e1:23:9e:cb:95:7b:b0:99:b8:ad:ef:64:7a:78:96: 9d:01:bc:b0:1b:6c:ef:6e:f6:6d:61:af:24:8b:9c:5a:9a:47: 81:de:9f:fb:d4:ea:33:7a:8f:b0:e7:15:48:af:20:c5:5f:07: 2d:6b:96:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UflhLUMDwM8Uz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk M2Q2NTM3OTYtNDIyNS00OTU3LWI4NDQtOWIxZDdjMGYxMWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpKz7MfuhmWxFtejA23zHF0ckqDzpP1xDRYm u5XD7BmfMPHCycpQ8VyBYK28sf3Qz+65sw/3LSJMuK4ImojYbNw/Q2KjEuCyP2hg ST5VeV4NiTY9z2BcCVjYI93Y2GPZEK6kUv+3iO5A4+3qPZK1fxx4LnffN0sx4ks7 4yxPMxjOXzz67ddq9nxH6rA8HWJLiUWLVAPjkh5KhM6t79yehBi7LhwQFYvNRvwW 3C1V9FPwm1B2iTk7Ic9MlutsRNviMpj1/rYNEJYSbpTatEq0GOxB6lclZEeOZwOH 4DJFFUmXO6AqCEtUianhcGTrzZ/KxH6SdyRljP4Etxy6U17/swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+1QZsNWUuxZPzpRL5Z376/5fKRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2E1NzliNTgtNGUzYS0z ZDZlLTljMmEtODRmMDQ3YzU0N2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOz8m1ZSr0CnCPl7slTXmcoHuSQj+SLfqbwTnuuFOstzvJqUlniupk6 LBINa9Y7biRZvY8H9XCS/YnD6FNZ54z1FCCYDrzl2m6lFYwX/ms2c4QVBHjwcxFr 2X20BTG5XN4qTYJUAumwxHmY+Jt0YqCY1gG34SfIwvgl9435EnrUU/xa4c2ULJFV EsG3gVvLMq0MVFPp82GqzXScO3M/Uewearm1vAZBnRx7ihoQkTVT255tRBRJs+dL dqRsLMni5CGJmptvpYlLxeEjnsuVe7CZuK3vZHp4lp0BvLAbbO9u9m1hrySLnFqa R4Hen/vU6jN6j7DnFUivIMVfBy1rljc= -----END CERTIFICATE-----Generated at Sun Mar 1 23:23:57 2026 by rpki-client