$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/858dd476-52d3-3d06-87f5-46c030ed18b9.roa File: 858dd476-52d3-3d06-87f5-46c030ed18b9.roa (raw, json) Hash identifier: 3nUn0YYZTU7nGuQL6dIcGmcITtuzgf8/ZLUkzrll4M4= Subject key identifier: DC:53:C1:07:AE:EF:98:6B:24:6F:06:A8:58:42:A3:BE:BD:76:14:87 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BBF8CE43051BF87722180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/858dd476-52d3-3d06-87f5-46c030ed18b9.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 192.178.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:bf:8c:e4:30:51:bf:87:72:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=aee9e4eb-0955-4b31-8b95-67bbd5f0addd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:61:1f:86:60:08:3b:1b:e0:f5:c3:38:72:04: c0:94:21:24:28:65:9c:c8:a8:50:fa:86:7c:29:b5: 32:0a:91:39:6b:4a:fe:6a:97:39:65:3a:e9:b2:cc: 4f:f7:15:5b:e9:9e:71:56:43:26:f7:f7:5d:df:d6: 77:28:df:83:84:98:b4:29:84:ec:0d:ae:12:58:4b: 70:de:6c:6d:5f:06:c7:16:0c:6b:04:8e:f2:e1:a0: 83:32:c5:1d:9d:98:d0:d9:fe:66:2e:d0:57:9e:f8: c0:98:3f:45:d2:b7:d5:20:ca:43:11:6a:a7:dc:46: f6:e0:a1:5e:69:9b:35:f9:03:63:12:bc:66:d4:92: 87:67:f0:bf:bf:5f:03:f5:4e:66:24:06:4b:73:31: 36:d7:04:ac:40:c2:a7:e1:e7:8e:b7:cb:ac:09:de: 6f:20:1a:70:f6:82:1d:04:f8:97:e8:df:b3:10:08: 2c:48:5b:61:87:cd:12:67:df:d3:22:29:c2:7c:9f: 58:a8:15:e8:c6:ba:65:fe:45:21:53:fd:ce:aa:35: 5e:58:7c:33:4c:7b:0a:c6:cf:52:c5:12:4f:f9:f8: c7:f4:14:79:b1:77:4f:82:3b:d9:2f:4b:96:84:bc: 73:d5:a4:6a:38:a0:ea:46:0c:4b:8d:53:e0:77:25: f6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:53:C1:07:AE:EF:98:6B:24:6F:06:A8:58:42:A3:BE:BD:76:14:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/858dd476-52d3-3d06-87f5-46c030ed18b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:71:96:88:fd:f0:38:16:4b:6a:80:c5:d4:70:5a:56:aa:60: f5:d8:10:66:fb:a4:1f:a7:f7:c0:01:ce:99:7c:be:1c:b7:7d: c3:62:e1:08:71:67:63:55:c4:f8:0b:0b:3f:6a:c5:27:97:8f: 40:ab:d0:35:b9:96:a8:35:87:74:2d:8f:45:6f:f9:e2:a5:9f: 32:f9:11:84:00:ed:ed:ca:10:f8:c3:30:dd:4f:7c:a0:85:78: ce:13:ba:f5:8a:f6:25:77:97:c8:7c:56:7a:5e:b5:91:2f:eb: c6:dd:62:31:2a:58:b0:2c:eb:d0:d6:c4:da:bf:5a:00:97:25: dc:82:7f:9c:0e:57:57:e3:99:f0:cb:d1:e9:51:b5:94:24:8a: 3a:49:54:56:bc:17:90:5f:95:42:e9:d3:fd:58:1b:d5:3b:d6: 5d:82:fc:f4:c7:e1:b0:44:e1:c5:ba:53:69:8d:bf:04:af:bb: 34:c5:a7:d4:41:2e:50:7b:66:0e:33:bf:bf:29:2b:04:84:50: a2:e2:2d:5f:2b:a4:6d:3a:61:4e:81:76:f3:9c:6c:57:c7:9c: fd:f0:a8:5c:c2:15:c5:b1:a7:88:e3:2d:c6:86:51:0e:b3:2e: 14:d8:0d:ed:56:e5:ce:ae:e3:8d:36:0b:af:c6:26:6e:d5:55: 25:9c:6a:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm7+M5DBRv4dyIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YWVlOWU0ZWItMDk1NS00YjMxLThiOTUtNjdiYmQ1ZjBhZGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WEfhmAIOxvg9cM4cgTAlCEkKGWcyKhQ+oZ8 KbUyCpE5a0r+apc5ZTrpssxP9xVb6Z5xVkMm9/dd39Z3KN+DhJi0KYTsDa4SWEtw 3mxtXwbHFgxrBI7y4aCDMsUdnZjQ2f5mLtBXnvjAmD9F0rfVIMpDEWqn3Eb24KFe aZs1+QNjErxm1JKHZ/C/v18D9U5mJAZLczE21wSsQMKn4eeOt8usCd5vIBpw9oId BPiX6N+zEAgsSFthh80SZ9/TIinCfJ9YqBXoxrpl/kUhU/3OqjVeWHwzTHsKxs9S xRJP+fjH9BR5sXdPgjvZL0uWhLxz1aRqOKDqRgxLjVPgdyX2HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxTwQeu75hrJG8GqFhCo769dhSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODU4ZGQ0NzYtNTJkMy0z ZDA2LTg3ZjUtNDZjMDMwZWQxOGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLIoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1xloj98DgWS2qAxdRwWlaqYPXYEGb7pB+n98ABzpl8vhy3fcNi4Qhx Z2NVxPgLCz9qxSeXj0Cr0DW5lqg1h3Qtj0Vv+eKlnzL5EYQA7e3KEPjDMN1PfKCF eM4TuvWK9iV3l8h8VnpetZEv68bdYjEqWLAs69DWxNq/WgCXJdyCf5wOV1fjmfDL 0elRtZQkijpJVFa8F5BflULp0/1YG9U71l2C/PTH4bBE4cW6U2mNvwSvuzTFp9RB LlB7Zg4zv78pKwSEUKLiLV8rpG06YU6BdvOcbFfHnP3wqFzCFcWxp4jjLcaGUQ6z LhTYDe1W5c6u4402C6/GJm7VVSWcalk= -----END CERTIFICATE-----Generated at Sat Jun 13 13:26:08 2026 by rpki-client