$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2aaffdd-9e59-3b29-b45a-19a78fa36ea9.roa File: b2aaffdd-9e59-3b29-b45a-19a78fa36ea9.roa (raw, json) Hash identifier: M95pmOHUTfVlDPu6rmVe+6gCbexyLsJ0G+mobCOhoBk= Subject key identifier: 15:6D:62:D0:29:D8:6A:AB:53:35:2C:5B:F8:4C:13:C2:41:49:AE:88 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584CF2BD04626291340D53968880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2aaffdd-9e59-3b29-b45a-19a78fa36ea9.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 15169 IP address blocks: 192.178.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bd:04:62:62:91:34:0d:53:96:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=aaed92f2-3718-43a2-aaf4-f47c3dd5c0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:39:bd:b4:90:4c:53:b5:20:e7:81:95:c7:5b: e0:73:71:41:6e:4b:ca:b4:ac:43:83:92:8c:1c:02: 0b:b8:fe:0d:e4:13:bd:54:af:e1:21:ee:51:49:ec: 99:26:6c:42:b5:d7:b4:37:d2:49:17:a7:12:a8:70: 8b:09:f9:7d:f0:30:08:65:fa:64:9d:4e:32:cd:5d: db:98:0e:70:b2:d3:51:eb:17:74:22:67:68:fb:2e: 39:f7:e8:93:6c:db:f2:ad:17:6b:cb:7b:72:0b:b0: 4d:87:2c:c4:a1:95:33:76:fe:1c:da:b2:87:d3:16: 8a:14:63:23:30:4b:07:99:31:fd:2f:78:c3:d0:88: 3c:73:07:9c:eb:5d:b3:f6:8e:91:a1:cb:e1:f1:1c: 43:22:99:69:51:7d:21:fc:3c:2e:bf:1c:70:f3:2d: 04:a9:48:09:37:a6:33:98:0d:a3:64:86:ef:64:6c: fd:7d:c0:3b:d4:b7:17:c6:f1:35:71:b7:de:1f:52: 91:6c:37:f2:01:1b:de:3a:b1:6c:97:53:dd:54:82: 79:e7:eb:b2:ad:b3:1e:c0:95:9e:ba:6c:2e:e7:a4: 57:7e:6e:c1:f2:fe:e9:0f:e8:e3:fb:ff:a1:d7:e4: 64:34:02:80:1e:57:f5:83:e0:0e:79:27:4b:b2:c4: 16:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6D:62:D0:29:D8:6A:AB:53:35:2C:5B:F8:4C:13:C2:41:49:AE:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2aaffdd-9e59-3b29-b45a-19a78fa36ea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:06:7f:24:59:06:75:2a:71:26:d0:99:ce:83:ef:e4:48:77: 5f:8f:8f:9e:70:6c:a6:8b:75:ff:60:06:f1:70:61:27:0f:d8: 89:60:b7:50:0b:81:b5:26:15:36:b8:37:09:45:7f:2d:18:4f: ba:50:f9:ee:39:f2:fa:a8:b7:38:f1:af:6d:88:55:07:67:7a: 9f:21:2c:bb:85:d8:c5:eb:71:05:da:2f:e3:c4:20:33:8d:d4: 7c:85:89:f9:43:ac:02:87:98:c6:8e:d8:5f:46:2f:61:b5:47: 45:b5:23:25:b6:a9:55:5c:8d:ac:19:ae:f3:23:34:53:89:3c: 6a:d9:fc:30:3a:33:cf:4c:1a:cd:07:bc:90:77:1e:89:43:25: 3a:6e:ad:36:fb:d8:06:7a:20:74:9b:33:12:1a:a2:70:37:32: 5f:d0:ba:ed:d7:d9:73:f2:ff:15:2c:be:93:60:57:ce:da:e5: ea:a2:ba:47:06:b6:ac:03:c5:79:82:61:47:c1:a3:4c:18:2d: 08:50:1b:db:6e:dc:70:aa:c0:14:4d:d0:a4:08:5e:8e:3f:f2: 60:6d:9b:96:5d:4f:51:43:4e:aa:95:d5:24:fc:e1:75:e4:0b: 38:48:f5:3a:e3:5e:65:24:bf:3c:b5:86:14:fc:87:31:78:2e: b6:9c:dd:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvQRiYpE0DVOWiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk YWFlZDkyZjItMzcxOC00M2EyLWFhZjQtZjQ3YzNkZDVjMGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjm9tJBMU7Ug54GVx1vgc3FBbkvKtKxDg5KM HAILuP4N5BO9VK/hIe5RSeyZJmxCtde0N9JJF6cSqHCLCfl98DAIZfpknU4yzV3b mA5wstNR6xd0Imdo+y459+iTbNvyrRdry3tyC7BNhyzEoZUzdv4c2rKH0xaKFGMj MEsHmTH9L3jD0Ig8cwec612z9o6Rocvh8RxDIplpUX0h/Dwuvxxw8y0EqUgJN6Yz mA2jZIbvZGz9fcA71LcXxvE1cbfeH1KRbDfyARveOrFsl1PdVIJ55+uyrbMewJWe umwu56RXfm7B8v7pD+jj+/+h1+RkNAKAHlf1g+AOeSdLssQW1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVtYtAp2GqrUzUsW/hME8JBSa6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjJhYWZmZGQtOWU1OS0z YjI5LWI0NWEtMTlhNzhmYTM2ZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIGfyRZBnUqcSbQmc6D7+RId1+Pj55wbKaLdf9gBvFwYScP2Ilgt1AL gbUmFTa4NwlFfy0YT7pQ+e458vqotzjxr22IVQdnep8hLLuF2MXrcQXaL+PEIDON 1HyFiflDrAKHmMaO2F9GL2G1R0W1IyW2qVVcjawZrvMjNFOJPGrZ/DA6M89MGs0H vJB3HolDJTpurTb72AZ6IHSbMxIaonA3Ml/Quu3X2XPy/xUsvpNgV87a5eqiukcG tqwDxXmCYUfBo0wYLQhQG9tu3HCqwBRN0KQIXo4/8mBtm5ZdT1FDTqqV1ST84XXk CzhI9TrjXmUkvzy1hhT8hzF4Lrac3Zo= -----END CERTIFICATE-----Generated at Sun Mar 1 23:22:09 2026 by rpki-client