$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8a28810-00a3-3777-9ee5-fcb9b672c4d3.roa File: b8a28810-00a3-3777-9ee5-fcb9b672c4d3.roa (raw, json) Hash identifier: Teo3P4quYiMp7z6AMnUz+GmRy4Od6pxrpBtlZnVMnsk= Subject key identifier: 17:FB:E1:4C:BA:E5:36:1D:85:5D:54:3A:3C:72:6F:13:C9:10:3C:0D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA4451E93F519CBFFCD3AC900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8a28810-00a3-3777-9ee5-fcb9b672c4d3.roa Signing time: Mon 27 Jul 2026 21:00:11 +0000 ROA not before: Mon 27 Jul 2026 21:00:11 +0000 ROA not after: Sun 25 Oct 2026 21:00:11 +0000 asID: 15169 IP address blocks: 192.178.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:45:1e:93:f5:19:cb:ff:cd:3a:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 27 21:00:11 2026 GMT Not After : Oct 25 21:00:11 2026 GMT Subject: CN=dd4cf5f6-f6db-497b-aa83-fbee4f43d3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:68:f7:b2:b6:f6:3e:ff:7c:ea:3f:b5:8d:c7: b7:ee:ec:22:d8:18:c7:7b:02:10:b6:fd:5e:93:b6: 22:6b:22:ec:7d:a9:62:01:a8:09:84:55:7e:dd:24: d8:9a:51:4e:64:bb:9a:22:e3:9d:1e:12:03:c3:3f: 01:40:b5:16:3c:ef:4c:ab:34:a2:aa:af:e7:b3:de: 0c:8f:0f:2f:7b:ab:b2:4b:bd:de:1a:fc:99:3c:b5: 5a:61:bc:d6:be:99:1c:de:e6:84:d2:52:63:3b:0b: 51:e9:ae:e2:ea:4b:67:b5:72:97:2b:38:59:82:21: 5b:9c:d8:42:48:73:04:ae:35:6b:a9:0f:aa:4c:46: 05:4f:9a:d9:6a:3c:7f:6d:66:65:a7:a1:69:e1:b6: a6:a3:f1:72:57:91:49:87:9a:c1:57:d2:04:5a:df: f6:02:b6:f9:8b:29:6e:fa:c0:91:6b:9e:26:71:9d: d6:82:bb:49:86:f1:fa:9e:54:22:a4:d6:1e:28:4f: 83:e4:9f:b4:43:23:f0:de:58:12:cc:07:03:6b:f1: 37:29:08:22:74:07:1d:49:55:15:d1:ec:c4:df:9e: 59:4c:a2:15:f9:57:93:6c:72:d0:75:b9:1e:51:4e: d9:42:0e:26:4e:64:14:ff:84:a7:bd:11:0b:e2:ee: a3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FB:E1:4C:BA:E5:36:1D:85:5D:54:3A:3C:72:6F:13:C9:10:3C:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8a28810-00a3-3777-9ee5-fcb9b672c4d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:2a:7b:48:2c:df:b4:3a:7f:13:9f:be:17:80:94:99:99:69: 87:c1:5c:44:39:8d:9f:18:47:8d:93:bb:74:1f:5b:4e:b7:32: fa:32:22:a7:14:12:91:bb:5a:e0:e6:69:eb:a7:ac:cd:06:8a: e3:1b:2d:a7:54:7a:cb:33:63:fc:cf:63:a6:9a:a0:55:fe:69: 88:e7:cd:c3:f9:8d:58:40:56:2a:7c:da:57:50:b2:15:5f:78: ed:4f:73:32:76:17:9a:43:e5:07:98:73:e9:97:31:ca:09:85: 49:3b:7d:7d:80:3b:9f:b6:64:e5:63:a2:33:09:56:79:ee:d3: 02:07:93:35:82:97:d7:e5:f1:e4:d2:19:7d:7c:71:ac:44:2f: 14:1c:34:63:0f:90:db:a8:3f:ef:ff:ce:f0:7d:a6:bd:25:6c: 09:50:6c:0d:bd:c8:51:21:5f:94:8a:d0:32:aa:58:6d:0a:5e: d5:7d:7e:0a:fe:ee:80:e2:f0:6b:72:e6:83:ce:ab:37:ba:c2: e3:7c:c4:e8:5e:cb:e3:ae:67:f2:37:05:c0:e2:c3:2a:13:87: 7e:e5:44:3e:e5:fb:3f:6c:e8:81:5d:b8:f3:77:23:ba:54:02: 47:ed:98:24:71:4e:48:81:ed:a1:af:59:77:28:ba:d0:35:9f: 0a:8c:69:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6kRR6T9RnL/806yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyNzIxMDAxMVoXDTI2MTAyNTIxMDAxMVowLzEtMCsGA1UEAxMk ZGQ0Y2Y1ZjYtZjZkYi00OTdiLWFhODMtZmJlZTRmNDNkM2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWj3srb2Pv986j+1jce37uwi2BjHewIQtv1e k7YiayLsfaliAagJhFV+3STYmlFOZLuaIuOdHhIDwz8BQLUWPO9MqzSiqq/ns94M jw8ve6uyS73eGvyZPLVaYbzWvpkc3uaE0lJjOwtR6a7i6ktntXKXKzhZgiFbnNhC SHMErjVrqQ+qTEYFT5rZajx/bWZlp6Fp4bamo/FyV5FJh5rBV9IEWt/2Arb5iylu +sCRa54mcZ3WgrtJhvH6nlQipNYeKE+D5J+0QyPw3lgSzAcDa/E3KQgidAcdSVUV 0ezE355ZTKIV+VeTbHLQdbkeUU7ZQg4mTmQU/4SnvREL4u6jQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBf74Uy65TYdhV1UOjxybxPJEDwNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjhhMjg4MTAtMDBhMy0z Nzc3LTllZTUtZmNiOWI2NzJjNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMqe0gs37Q6fxOfvheAlJmZaYfBXEQ5jZ8YR42Tu3QfW063MvoyIqcU EpG7WuDmaeunrM0GiuMbLadUesszY/zPY6aaoFX+aYjnzcP5jVhAVip82ldQshVf eO1PczJ2F5pD5QeYc+mXMcoJhUk7fX2AO5+2ZOVjojMJVnnu0wIHkzWCl9fl8eTS GX18caxELxQcNGMPkNuoP+//zvB9pr0lbAlQbA29yFEhX5SK0DKqWG0KXtV9fgr+ 7oDi8Gty5oPOqze6wuN8xOhey+OuZ/I3BcDiwyoTh37lRD7l+z9s6IFduPN3I7pU AkftmCRxTkiB7aGvWXcoutA1nwqMab0= -----END CERTIFICATE-----Generated at Wed Jul 29 06:05:26 2026 by rpki-client