$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86a68893-fe5c-3cda-b2d6-45eeb48d4ed3.roa File: 86a68893-fe5c-3cda-b2d6-45eeb48d4ed3.roa (raw, json) Hash identifier: d8uzOAn4EKu5kzkojc6It2ciNN921bxaJ/Quwz8p6ws= Subject key identifier: D5:28:36:CD:9B:E2:FA:A7:EC:1B:3D:FF:EF:CE:68:31:B2:37:F5:35 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584CF2BD04462F064A51FB311B40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86a68893-fe5c-3cda-b2d6-45eeb48d4ed3.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 15169 IP address blocks: 192.178.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bd:04:46:2f:06:4a:51:fb:31:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=b5019fa2-61f9-4dc2-b934-cc610b846bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8b:cf:a9:29:b5:87:e8:b8:f7:30:2d:25:04: 12:4c:8d:e0:0c:3a:c3:67:09:b1:88:45:0d:bf:b6: c2:19:76:7f:87:19:37:e3:c9:4a:ed:5e:03:4b:dc: 56:2e:61:6f:15:49:2a:74:96:e8:7b:35:df:08:a0: 72:8f:20:c2:0d:6d:8f:cf:c4:86:e8:2f:bb:56:44: 86:dc:01:95:f7:2e:bf:e4:6d:89:f6:86:33:73:d0: 6a:9c:ac:3e:ba:82:9e:6e:97:1d:45:70:5c:ae:53: 38:86:4d:c1:98:1e:00:20:fc:82:6a:e7:a4:dd:8d: 72:c0:27:56:40:1f:eb:56:a9:73:43:46:ee:40:43: 89:4b:fb:fd:cb:4b:cf:f7:22:e8:31:ce:87:a9:52: a2:81:57:8a:8a:48:d1:a2:0e:26:60:9d:8b:71:c1: 56:5e:44:07:3a:65:c1:fc:f8:20:db:84:0c:03:62: b4:31:b4:35:23:01:e6:37:43:54:3e:63:41:95:63: 9e:49:5f:11:d0:83:5e:37:d2:7f:01:ba:03:e3:9d: a0:f3:64:b4:43:53:a0:7a:22:d3:68:8c:99:91:0a: 29:e0:21:df:3f:ed:9c:a5:44:86:e0:75:a4:7b:fb: c4:a1:9c:f4:da:6e:d1:dc:f1:5e:ab:86:13:f0:5b: 05:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:28:36:CD:9B:E2:FA:A7:EC:1B:3D:FF:EF:CE:68:31:B2:37:F5:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86a68893-fe5c-3cda-b2d6-45eeb48d4ed3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:e8:6c:2d:09:ac:85:0b:56:97:86:b2:a8:d5:7e:34:49:6d: 83:9f:fa:ba:87:8a:2d:b5:97:b3:1e:8d:e1:9f:fc:c7:d7:43: 91:d5:d1:c7:5f:16:8b:09:74:04:d3:85:9c:fb:e1:4f:81:eb: f3:09:db:34:74:e2:7c:ac:fe:00:87:5d:e1:f3:32:ec:4d:34: df:a6:29:d0:f4:23:72:23:39:df:32:80:d9:eb:69:28:fb:f7: 21:80:8f:ad:98:b0:e2:7e:84:24:25:c7:fa:a2:d9:67:5e:a5: 6c:0c:8e:d5:94:c7:dd:50:4b:66:8c:cb:22:04:dd:d7:5e:49: e2:e3:cc:15:e0:d1:23:12:13:64:c0:d5:15:8d:21:03:76:91: c4:66:44:14:a8:7c:75:27:37:87:cc:89:a6:7e:f0:28:cb:3d: 37:43:50:53:ae:b8:5c:e9:c0:a0:1c:fc:c4:fa:9f:f0:ac:53: f3:dd:49:89:a3:39:25:f8:e4:73:90:29:05:98:de:57:d8:20: 7a:19:a5:a4:c0:f1:71:bd:08:e1:c4:ca:1f:e3:08:a2:03:c9: 21:7d:84:f2:33:fe:2d:d5:24:9d:66:4e:41:ae:1a:b1:15:4d: e0:a5:8d:85:e2:43:fc:71:83:9c:8d:6c:23:65:98:c7:1c:37: f9:86:8e:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvQRGLwZKUfsxG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk YjUwMTlmYTItNjFmOS00ZGMyLWI5MzQtY2M2MTBiODQ2YmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYvPqSm1h+i49zAtJQQSTI3gDDrDZwmxiEUN v7bCGXZ/hxk348lK7V4DS9xWLmFvFUkqdJboezXfCKByjyDCDW2Pz8SG6C+7VkSG 3AGV9y6/5G2J9oYzc9BqnKw+uoKebpcdRXBcrlM4hk3BmB4AIPyCauek3Y1ywCdW QB/rVqlzQ0buQEOJS/v9y0vP9yLoMc6HqVKigVeKikjRog4mYJ2LccFWXkQHOmXB /Pgg24QMA2K0MbQ1IwHmN0NUPmNBlWOeSV8R0INeN9J/AboD452g82S0Q1OgeiLT aIyZkQop4CHfP+2cpUSG4HWke/vEoZz02m7R3PFeq4YT8FsFawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUoNs2b4vqn7Bs9/+/OaDGyN/U1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODZhNjg4OTMtZmU1Yy0z Y2RhLWIyZDYtNDVlZWI0OGQ0ZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnobC0JrIULVpeGsqjVfjRJbYOf+rqHii21l7MejeGf/MfXQ5HV0cdf FosJdATThZz74U+B6/MJ2zR04nys/gCHXeHzMuxNNN+mKdD0I3IjOd8ygNnraSj7 9yGAj62YsOJ+hCQlx/qi2WdepWwMjtWUx91QS2aMyyIE3ddeSeLjzBXg0SMSE2TA 1RWNIQN2kcRmRBSofHUnN4fMiaZ+8CjLPTdDUFOuuFzpwKAc/MT6n/CsU/PdSYmj OSX45HOQKQWY3lfYIHoZpaTA8XG9COHEyh/jCKIDySF9hPIz/i3VJJ1mTkGuGrEV TeCljYXiQ/xxg5yNbCNlmMccN/mGjlo= -----END CERTIFICATE-----Generated at Sun Mar 1 23:22:06 2026 by rpki-client