$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65be1300-5864-33b5-89df-a80493ab0f31.roa File: 65be1300-5864-33b5-89df-a80493ab0f31.roa (raw, json) Hash identifier: hU9RK0tmNVGwcMDtYQNhbj1G5LXVVMjzTEjiI7HwMt8= Subject key identifier: 59:DA:13:B6:BA:FF:B1:65:01:69:1B:58:E8:4D:EA:9F:16:7F:CE:0C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F20F7C3B3B419F322AFE9A200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65be1300-5864-33b5-89df-a80493ab0f31.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 15169 IP address blocks: 192.178.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c3:b3:b4:19:f3:22:af:e9:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=84a3c861-2d85-4df8-a014-eef1cf576aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:be:d8:18:9f:43:61:b7:06:94:ec:f3:b9:b8: fe:56:00:7c:23:36:78:8b:23:85:f4:f2:1d:5e:2c: 06:6d:e3:92:35:72:4b:82:0b:2f:e9:b0:a4:e6:aa: 23:96:c5:f8:6a:8f:28:f8:55:de:ba:ed:cd:a3:8e: 76:20:dc:7a:dc:b6:db:64:b8:b7:1e:14:0b:96:d9: e5:60:f5:2f:9a:2e:90:c7:17:db:43:57:fe:6d:82: cc:1a:7b:17:18:8b:40:60:0b:c8:3c:97:ec:40:58: b7:35:c8:ec:ca:d0:2f:0e:24:9f:b7:71:8f:9a:d4: c5:47:73:e3:b0:96:71:68:84:c4:87:92:bd:f3:aa: d1:3e:08:1e:8a:a6:71:4a:02:d2:55:f5:72:b1:a9: 6a:c0:11:cc:f4:ec:86:f0:00:e0:c6:ca:0f:df:7d: 29:a2:06:f2:ad:da:04:a7:22:61:4c:10:03:2a:9a: 66:c0:e3:af:dc:cf:d6:f2:fd:1c:60:f1:5a:9b:bb: f0:74:da:f8:ce:03:62:e9:13:11:86:f8:36:9e:20: c8:19:2f:c5:67:2a:54:34:62:e9:5c:65:ba:aa:62: 20:0c:2e:34:dc:48:a9:a9:a7:66:cd:93:55:c9:6d: 26:db:dc:91:13:09:50:50:56:de:76:f2:60:9a:c7: be:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DA:13:B6:BA:FF:B1:65:01:69:1B:58:E8:4D:EA:9F:16:7F:CE:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/65be1300-5864-33b5-89df-a80493ab0f31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d2:b7:a3:32:85:e6:06:29:24:c5:63:10:66:ad:f1:95:be: 75:a4:23:1a:56:47:ce:36:08:f7:9c:81:70:9c:cc:e8:cf:c1: cf:a5:e6:fa:b1:73:7f:81:2b:db:f3:2c:43:6f:6d:7d:b3:f5: dd:f4:3c:30:21:a1:ae:c9:ec:59:33:34:ec:02:f0:df:2c:16: 53:ef:71:64:80:b8:6c:01:7b:89:d5:17:66:28:9b:a7:51:0f: 30:ab:39:30:6c:82:2c:3e:22:74:ad:97:6d:c0:2a:21:f4:26: 87:e9:a6:75:1c:43:b0:22:9a:f1:ce:a6:24:69:12:17:b9:a7: 8f:29:ed:2b:40:db:73:ea:67:0a:30:6b:07:bc:78:71:65:d7: 40:2c:b3:79:72:ab:26:00:6b:1a:99:d3:45:cf:10:8c:5e:b5: b8:fb:c1:5f:c6:0a:4d:e7:fc:54:af:46:a0:5e:7d:d1:6f:25: 60:99:e8:fc:5f:ae:d7:79:47:9d:ac:8e:63:80:fb:ef:60:4a: 5a:8e:7d:8e:88:fd:85:e8:12:3f:90:44:64:25:c9:14:62:49: 27:c3:43:a3:67:3e:40:92:d4:9e:e4:76:aa:c7:6d:61:28:1a: ee:cb:b2:10:ff:45:af:4a:67:7a:19:f5:cc:b8:ed:d5:77:8d: da:58:64:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98OztBnzIq/pogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ODRhM2M4NjEtMmQ4NS00ZGY4LWEwMTQtZWVmMWNmNTc2YWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b7YGJ9DYbcGlOzzubj+VgB8IzZ4iyOF9PId XiwGbeOSNXJLggsv6bCk5qojlsX4ao8o+FXeuu3No452INx63LbbZLi3HhQLltnl YPUvmi6QxxfbQ1f+bYLMGnsXGItAYAvIPJfsQFi3NcjsytAvDiSft3GPmtTFR3Pj sJZxaITEh5K986rRPggeiqZxSgLSVfVysalqwBHM9OyG8ADgxsoP330pogbyrdoE pyJhTBADKppmwOOv3M/W8v0cYPFam7vwdNr4zgNi6RMRhvg2niDIGS/FZypUNGLp XGW6qmIgDC403EipqadmzZNVyW0m29yREwlQUFbedvJgmse+IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnaE7a6/7FlAWkbWOhN6p8Wf84MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjViZTEzMDAtNTg2NC0z M2I1LTg5ZGYtYTgwNDkzYWIwZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjSt6MyheYGKSTFYxBmrfGVvnWkIxpWR842CPecgXCczOjPwc+l5vqx c3+BK9vzLENvbX2z9d30PDAhoa7J7FkzNOwC8N8sFlPvcWSAuGwBe4nVF2Yom6dR DzCrOTBsgiw+InStl23AKiH0JofppnUcQ7AimvHOpiRpEhe5p48p7StA23PqZwow awe8eHFl10Ass3lyqyYAaxqZ00XPEIxetbj7wV/GCk3n/FSvRqBefdFvJWCZ6Pxf rtd5R52sjmOA++9gSlqOfY6I/YXoEj+QRGQlyRRiSSfDQ6NnPkCS1J7kdqrHbWEo Gu7LshD/Ra9KZ3oZ9cy47dV3jdpYZJ4= -----END CERTIFICATE-----Generated at Mon Sep 21 03:42:16 2026 by rpki-client