$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b7c6a24e-a7d0-34d3-aa47-b31f4b498c4f.roa File: b7c6a24e-a7d0-34d3-aa47-b31f4b498c4f.roa (raw, json) Hash identifier: nT5z7Vv2v6u4FuGrvRCLSCd7Fjy2o/qFhxEvLIzLScY= Subject key identifier: 74:E5:AC:B6:4A:6A:8A:0B:6B:1A:61:28:32:67:94:2E:F5:8D:11:B9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F23C257936A9056B6F401B440 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b7c6a24e-a7d0-34d3-aa47-b31f4b498c4f.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 15169 IP address blocks: 192.178.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:57:93:6a:90:56:b6:f4:01:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=50d5159a-aaa3-4b9a-a287-b23a91b5079d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:90:f1:44:84:c6:23:c7:56:fe:32:31:59: 51:64:05:c8:83:a6:87:75:a9:5a:ec:c2:b6:f9:2d: 28:b5:98:08:e9:e3:94:9c:a5:a2:39:de:80:11:98: 6d:06:30:6e:ad:37:05:74:4d:33:0c:32:b2:32:dc: 34:a2:c7:bf:e2:49:4c:59:e0:41:52:de:81:3e:13: e1:d3:bb:64:cb:b9:9d:b8:fc:f0:98:bb:62:a0:16: 41:12:b1:e5:f0:31:b8:72:7e:55:5c:a9:bf:74:c4: f3:c5:8c:ca:ab:3f:43:bf:9c:64:10:e5:23:66:03: 98:25:49:8e:b9:69:65:5a:2d:56:0c:b2:4f:26:8a: ed:98:96:fd:d4:b8:04:b9:d5:fa:6e:57:30:6a:01: f7:7d:99:25:44:4a:5f:32:a5:f3:4b:56:4d:f1:31: 62:47:cc:22:05:11:c6:df:f4:a1:5f:56:3b:be:58: 69:23:43:e6:96:ed:26:e4:4a:74:a0:76:ee:98:5b: 6e:71:0f:d2:26:9e:6f:d7:cf:04:e3:30:60:8d:a1: 4f:60:51:cd:b5:83:cc:b7:9b:1d:bb:3a:90:22:37: 84:99:af:b3:9e:d6:0a:db:39:4f:1c:2a:89:04:5d: 92:d9:29:de:f3:ac:a7:15:74:79:cc:b9:34:1d:ea: 11:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E5:AC:B6:4A:6A:8A:0B:6B:1A:61:28:32:67:94:2E:F5:8D:11:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b7c6a24e-a7d0-34d3-aa47-b31f4b498c4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:e0:2d:ab:f6:ad:c0:0f:d0:1f:f7:93:0e:6c:c7:65:3e:c4: ac:30:85:78:79:76:07:85:e3:bc:15:21:75:63:f0:2c:32:76: c0:f5:d4:67:ce:3f:09:17:c1:98:e7:92:f7:81:a2:fb:db:c7: 26:1c:69:83:ee:f0:73:3b:2c:72:cd:55:05:30:24:a3:17:67: e0:bf:44:df:ed:37:5b:89:f2:db:75:4e:bd:15:76:b3:46:1b: 84:c4:e5:e6:94:3a:8c:c6:cd:1b:e1:36:23:ff:92:b1:43:46: 8b:ac:75:50:42:60:dc:22:e4:7a:a1:17:05:53:72:cc:89:c3: 9a:38:18:0a:65:1c:93:3b:22:cc:50:0d:f3:da:f9:11:b9:16: fc:fe:fc:e2:3e:c9:2c:53:54:96:6a:7c:90:36:9e:92:da:f3: 5d:a8:ef:1d:1c:52:ce:55:4e:6e:35:7b:a5:89:2a:10:6c:8f: 33:ea:06:90:fa:45:0f:89:f0:e0:95:61:d6:be:71:4a:ea:d2: 65:65:42:05:34:25:a0:ed:c5:9b:7a:02:cf:40:f5:f8:c5:09: 53:31:b2:bb:17:fc:42:b3:75:1c:20:ed:ce:84:6d:f8:ae:8a: bd:86:cb:6a:1a:dd:00:72:71:96:95:16:6d:e7:0e:8b:d4:b2: 05:92:69:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwleTapBWtvQBtEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk NTBkNTE1OWEtYWFhMy00YjlhLWEyODctYjIzYTkxYjUwNzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ6Q8USExiPHVv4yMVlRZAXIg6aHdala7MK2 +S0otZgI6eOUnKWiOd6AEZhtBjBurTcFdE0zDDKyMtw0ose/4klMWeBBUt6BPhPh 07tky7mduPzwmLtioBZBErHl8DG4cn5VXKm/dMTzxYzKqz9Dv5xkEOUjZgOYJUmO uWllWi1WDLJPJortmJb91LgEudX6blcwagH3fZklREpfMqXzS1ZN8TFiR8wiBRHG 3/ShX1Y7vlhpI0Pmlu0m5Ep0oHbumFtucQ/SJp5v188E4zBgjaFPYFHNtYPMt5sd uzqQIjeEma+zntYK2zlPHCqJBF2S2Sne86ynFXR5zLk0HeoR6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTlrLZKaooLaxphKDJnlC71jRG5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjdjNmEyNGUtYTdkMC0z NGQzLWFhNDctYjMxZjRiNDk4YzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvgLav2rcAP0B/3kw5sx2U+xKwwhXh5dgeF47wVIXVj8CwydsD11GfO PwkXwZjnkveBovvbxyYcaYPu8HM7LHLNVQUwJKMXZ+C/RN/tN1uJ8tt1Tr0VdrNG G4TE5eaUOozGzRvhNiP/krFDRousdVBCYNwi5HqhFwVTcsyJw5o4GAplHJM7IsxQ DfPa+RG5Fvz+/OI+ySxTVJZqfJA2npLa812o7x0cUs5VTm41e6WJKhBsjzPqBpD6 RQ+J8OCVYda+cUrq0mVlQgU0JaDtxZt6As9A9fjFCVMxsrsX/EKzdRwg7c6Ebfiu ir2Gy2oa3QBycZaVFm3nDovUsgWSaQo= -----END CERTIFICATE-----Generated at Mon Sep 21 22:16:43 2026 by rpki-client