$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7989e3c-b727-32b3-a17e-85c7c99d3b60.roa File: a7989e3c-b727-32b3-a17e-85c7c99d3b60.roa (raw, json) Hash identifier: yVJ5QOg3Xa6Poz3QY9/1wFOUPbssDw3Gk30vWygOOtk= Subject key identifier: 9B:00:27:EC:DC:6D:9D:36:97:7A:83:CA:C8:32:44:9C:03:27:A4:F2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584CE36216773517ABCE93B07CC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7989e3c-b727-32b3-a17e-85c7c99d3b60.roa Signing time: Tue 17 Feb 2026 02:00:31 +0000 ROA not before: Tue 17 Feb 2026 02:00:31 +0000 ROA not after: Mon 18 May 2026 01:00:31 +0000 asID: 15169 IP address blocks: 192.178.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e3:62:16:77:35:17:ab:ce:93:b0:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 17 02:00:31 2026 GMT Not After : May 18 01:00:31 2026 GMT Subject: CN=6eb5f630-c499-4c4f-bfd1-618c156b793e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:79:b1:77:17:ef:77:f3:a1:cb:42:6a:41:d2: cf:a4:a0:1a:3e:99:35:68:72:df:d2:10:c4:1c:99: ea:2c:7f:cc:80:5f:3e:33:7c:5b:e1:bc:b6:a3:7c: 39:5d:37:89:9a:da:18:f2:e3:34:64:d7:23:ab:ba: e4:ad:47:25:33:2d:f3:df:b3:e0:2b:ee:07:26:d6: c9:5f:35:bd:e3:59:97:f6:da:fa:fe:21:a8:68:66: 68:76:3b:47:16:00:35:2f:48:cb:3a:67:23:09:0d: c1:67:28:b3:4f:20:e9:9a:de:94:d1:dc:59:0e:e0: c5:62:0f:5e:1e:93:76:a4:25:e5:9f:f4:92:4f:a9: b9:2c:5b:70:79:08:f0:f4:85:58:85:28:ee:52:73: 13:45:d1:fd:57:71:f4:e2:b7:01:a7:35:1f:86:ce: 7f:12:c2:3c:e9:f1:59:99:43:21:ac:32:0c:bf:32: 32:e1:4f:90:c7:1f:97:00:2a:6d:c9:84:b0:5b:21: 65:6a:60:d3:9e:22:b5:81:50:a3:50:cc:b9:ec:6c: ba:4f:d2:ec:14:8c:55:83:13:e7:ac:d3:8b:8c:3a: 5c:3c:a5:09:bf:ef:a2:e1:d6:8b:98:26:b9:5d:d6: e5:60:17:ea:d2:df:2b:0d:67:ea:30:79:10:00:34: 13:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:00:27:EC:DC:6D:9D:36:97:7A:83:CA:C8:32:44:9C:03:27:A4:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7989e3c-b727-32b3-a17e-85c7c99d3b60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c4:87:49:b0:68:52:f2:51:49:84:65:2e:30:9a:b7:be:1a: 09:b7:82:ff:82:1c:a9:c3:6b:7e:3c:00:d6:b7:a2:80:a3:5e: 61:42:2f:17:e2:ba:fb:c9:da:25:de:14:54:99:76:82:9e:82: f9:15:04:f9:ab:0b:19:af:39:1d:bb:89:43:d6:54:21:d1:6c: 70:55:bd:c5:d9:f7:43:6e:42:64:07:8c:64:2b:e4:c1:58:26: e2:b4:c0:6f:17:f5:1e:af:83:92:0c:df:f1:50:fd:5d:7f:40: 20:d5:4b:0f:66:0e:89:a6:f5:39:a9:25:a7:43:d6:06:35:41: f1:40:eb:03:cb:72:43:48:ce:dc:1d:9a:14:f2:3b:0e:46:75: d4:5d:36:85:44:31:0f:5e:bb:78:98:8f:9b:8f:81:b1:8f:2e: 00:6f:ff:88:78:fe:11:d1:ce:ef:46:6f:3b:a2:5b:17:6f:89: c7:32:89:21:d6:f0:34:3a:96:a8:79:5d:da:3b:94:19:12:84: ff:26:91:97:62:4a:11:0c:2b:08:ab:5a:a2:d3:2a:f4:7b:60: 46:ff:08:95:06:2b:34:62:ea:a6:41:2d:0f:17:2c:ed:cd:c6: 84:17:3d:f7:72:09:1f:5d:0b:4e:b8:ff:2d:bc:e8:fb:d6:4a: 1c:59:70:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzjYhZ3NRerzpOwfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDIxNzAyMDAzMVoXDTI2MDUxODAxMDAzMVowLzEtMCsGA1UEAxMk NmViNWY2MzAtYzQ5OS00YzRmLWJmZDEtNjE4YzE1NmI3OTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03mxdxfvd/Ohy0JqQdLPpKAaPpk1aHLf0hDE HJnqLH/MgF8+M3xb4by2o3w5XTeJmtoY8uM0ZNcjq7rkrUclMy3z37PgK+4HJtbJ XzW941mX9tr6/iGoaGZodjtHFgA1L0jLOmcjCQ3BZyizTyDpmt6U0dxZDuDFYg9e HpN2pCXln/SST6m5LFtweQjw9IVYhSjuUnMTRdH9V3H04rcBpzUfhs5/EsI86fFZ mUMhrDIMvzIy4U+Qxx+XACptyYSwWyFlamDTniK1gVCjUMy57Gy6T9LsFIxVgxPn rNOLjDpcPKUJv++i4daLmCa5XdblYBfq0t8rDWfqMHkQADQTJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsAJ+zcbZ02l3qDysgyRJwDJ6TyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTc5ODllM2MtYjcyNy0z MmIzLWExN2UtODVjN2M5OWQzYjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLEh0mwaFLyUUmEZS4wmre+Ggm3gv+CHKnDa348ANa3ooCjXmFCLxfi uvvJ2iXeFFSZdoKegvkVBPmrCxmvOR27iUPWVCHRbHBVvcXZ90NuQmQHjGQr5MFY JuK0wG8X9R6vg5IM3/FQ/V1/QCDVSw9mDomm9TmpJadD1gY1QfFA6wPLckNIztwd mhTyOw5GddRdNoVEMQ9eu3iYj5uPgbGPLgBv/4h4/hHRzu9GbzuiWxdviccyiSHW 8DQ6lqh5Xdo7lBkShP8mkZdiShEMKwirWqLTKvR7YEb/CJUGKzRi6qZBLQ8XLO3N xoQXPfdyCR9dC064/y286PvWShxZcFg= -----END CERTIFICATE-----Generated at Sun Mar 1 23:23:36 2026 by rpki-client