$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa File: 70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa (raw, json) Hash identifier: bzHq6v6CZHon1ExryAS3xEILvLPE0kXT86a34i/ULZo= Subject key identifier: B3:02:04:0A:65:70:E6:F1:52:E4:3D:DC:EB:7C:24:23:D1:9D:21:33 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA788A067A80EA08900C9B780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 192.178.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:a0:67:a8:0e:a0:89:00:c9:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2858af57-981c-4404-8b79-0946a2378d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2e:81:77:8f:2d:4f:cd:44:d3:43:fd:95:35: 30:da:ae:b4:89:6c:32:30:13:a2:7d:b0:b9:ec:88: 68:a3:3b:1f:f9:aa:a5:00:9c:c7:d0:58:cb:ce:94: a1:cb:06:24:ac:a3:29:e1:e2:1d:37:3d:3d:82:53: 34:0f:2e:8a:6f:c0:aa:bf:db:55:ee:1f:50:08:f0: 44:f2:5f:7b:eb:03:a3:ce:71:ee:03:85:24:8a:4b: 4c:a2:45:8c:d6:0a:92:9e:9f:a0:ad:4f:fe:e5:70: 0a:30:66:80:97:dd:7d:08:ae:bd:cc:72:ec:6f:82: 8f:a0:d7:ea:ae:4b:89:71:89:75:bd:72:5a:17:0f: 7b:13:63:69:30:a3:fe:99:c0:05:d8:d8:eb:79:de: bd:ed:d7:6b:32:ce:4b:b6:90:dc:3d:6a:74:d2:62: 7e:50:e5:45:f8:c2:6b:d1:01:5b:76:b4:61:c6:76: 84:e7:1f:e1:ac:6e:70:da:27:48:cf:2f:40:69:c2: 3d:11:47:3d:8b:69:77:f9:0e:8b:00:57:3b:7e:22: 7d:c2:f6:7d:a2:9f:67:fd:d0:2d:08:e6:47:7e:d4: 61:27:0f:30:2b:e6:c3:4e:64:c4:eb:53:16:bd:93: cc:9a:21:eb:3d:eb:98:91:3c:61:f2:42:06:d6:55: c3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:02:04:0A:65:70:E6:F1:52:E4:3D:DC:EB:7C:24:23:D1:9D:21:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:2d:64:e3:0c:c7:af:83:51:e0:1a:4c:15:39:8f:85:7f:f3: 4f:f2:dc:3a:c8:22:63:ce:28:af:7a:61:b2:3f:bf:64:9e:af: 63:29:10:9d:e3:ea:59:ce:b4:30:0c:a4:b6:6d:0b:06:47:dc: bc:37:61:88:6c:e3:3d:e0:38:de:2d:15:8a:b8:02:ed:87:e2: 8c:2a:72:17:5d:a0:4b:50:64:b1:29:13:66:d4:88:9b:63:cb: 8e:e5:6a:a2:1e:e3:1e:06:8a:05:11:f0:fc:2a:22:f2:b9:fa: c5:47:5c:65:59:39:1e:17:28:b4:76:98:9d:75:08:11:68:bd: 5b:cb:96:d7:95:d8:fa:18:40:28:02:55:3b:10:88:76:0f:8e: 66:00:db:41:23:c0:d6:f0:5f:74:a4:0b:e2:30:04:78:d9:44: b4:b5:30:a4:74:ba:2f:57:06:8c:21:a2:f0:37:6c:90:8a:d9: f9:0c:ac:22:c2:dd:67:20:da:e3:64:00:d5:8e:09:6d:7b:2d: 2c:51:a0:b3:13:66:55:01:15:eb:25:ac:71:7a:08:7d:5d:fd: fd:3d:0a:1e:e1:5b:ca:81:31:f5:d7:a2:07:dc:fc:31:a1:26: b6:99:c3:76:e2:dc:22:4a:f3:04:6b:b3:d4:4c:5f:0d:a2:52: a6:40:9f:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niKBnqA6giQDJt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Mjg1OGFmNTctOTgxYy00NDA0LThiNzktMDk0NmEyMzc4ZDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4S6Bd48tT81E00P9lTUw2q60iWwyMBOifbC5 7Ihoozsf+aqlAJzH0FjLzpShywYkrKMp4eIdNz09glM0Dy6Kb8Cqv9tV7h9QCPBE 8l976wOjznHuA4UkiktMokWM1gqSnp+grU/+5XAKMGaAl919CK69zHLsb4KPoNfq rkuJcYl1vXJaFw97E2NpMKP+mcAF2Njred697ddrMs5LtpDcPWp00mJ+UOVF+MJr 0QFbdrRhxnaE5x/hrG5w2idIzy9AacI9EUc9i2l3+Q6LAFc7fiJ9wvZ9op9n/dAt COZHftRhJw8wK+bDTmTE61MWvZPMmiHrPeuYkTxh8kIG1lXDsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMCBAplcObxUuQ93Ot8JCPRnSEzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzBiNmViM2ItM2EwNC0z ZjVhLWJjZjEtMTI5MDRlNDI2Mzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMtZOMMx6+DUeAaTBU5j4V/80/y3DrIImPOKK96YbI/v2Ser2MpEJ3j 6lnOtDAMpLZtCwZH3Lw3YYhs4z3gON4tFYq4Au2H4owqchddoEtQZLEpE2bUiJtj y47laqIe4x4GigUR8PwqIvK5+sVHXGVZOR4XKLR2mJ11CBFovVvLlteV2PoYQCgC VTsQiHYPjmYA20EjwNbwX3SkC+IwBHjZRLS1MKR0ui9XBowhovA3bJCK2fkMrCLC 3Wcg2uNkANWOCW17LSxRoLMTZlUBFeslrHF6CH1d/f09Ch7hW8qBMfXXogfc/DGh JraZw3bi3CJK8wRrs9RMXw2iUqZAnzw= -----END CERTIFICATE-----Generated at Wed Jul 29 04:10:19 2026 by rpki-client