$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d08f403e-ed94-3b66-9997-e619f6160283.roa File: d08f403e-ed94-3b66-9997-e619f6160283.roa (raw, json) Hash identifier: k1qT+XrXOV4Ef0E0dyzerYBc5Q3vr11+W4SzjdCrQcA= Subject key identifier: D4:12:04:F3:11:DC:ED:68:10:45:3A:B4:E0:0C:48:A9:17:C5:2A:A5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584DE2B5ED7C4D0CF5B8F919E040 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d08f403e-ed94-3b66-9997-e619f6160283.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 15169 IP address blocks: 192.178.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:ed:7c:4d:0c:f5:b8:f9:19:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=c4a37ff0-ef35-4e70-b8c2-b3845575fc1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:91:c9:c5:fa:f2:d6:7d:28:76:62:fa:90:de: 40:fe:29:d8:f3:1b:b1:27:af:fd:81:68:e2:28:1d: 39:69:5f:35:8b:96:4d:de:a0:8b:0b:c8:fb:36:69: 14:4f:49:44:d2:1d:54:d7:5c:1b:57:6c:dd:ee:b1: 7f:16:3c:2e:cb:28:e1:a6:1c:69:21:b3:c2:ec:b5: c9:3d:dc:29:cc:56:00:cc:61:b1:62:d2:d4:9d:50: 5c:05:39:76:b6:23:ba:86:f8:6c:1b:6e:00:eb:8e: 68:cd:3c:db:99:bb:f3:cb:d0:1c:9f:83:a9:a2:69: 61:bb:54:6e:c9:17:95:53:d1:6b:6f:28:94:0b:bd: 3f:c7:75:1c:01:c7:e5:0d:3f:63:9c:69:69:7f:c8: 3c:2f:a1:f9:23:0e:2c:9f:2d:7e:5f:70:f7:62:fb: 97:95:7d:4f:86:44:e6:52:ca:98:0b:43:ce:2c:92: a5:8c:13:b9:e3:71:c9:32:39:21:33:56:3a:c9:4d: 88:0f:24:c3:eb:5c:29:4e:a1:93:05:bb:09:38:6d: 59:93:7e:f5:df:04:ba:46:c1:db:e3:d1:4a:ba:4c: 75:ce:de:76:49:98:75:4a:db:34:64:57:14:b3:24: 43:e3:93:8f:a2:80:55:ad:cd:78:15:9f:10:2a:a6: da:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:12:04:F3:11:DC:ED:68:10:45:3A:B4:E0:0C:48:A9:17:C5:2A:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d08f403e-ed94-3b66-9997-e619f6160283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:d2:12:52:d3:4d:f1:63:b7:9d:ef:ef:79:9c:79:7a:e7:6f: e0:e7:03:d1:75:66:e4:13:fd:32:bb:8a:c8:6a:56:fb:fa:e1: 31:02:0a:8e:e5:e8:33:0b:32:2c:39:1f:9e:1c:74:11:18:2c: e1:62:52:d7:13:c3:25:29:50:4e:1f:f2:fe:8b:1e:1d:c3:ed: 58:12:56:67:a3:04:92:18:bb:54:5d:30:ba:c6:95:44:c8:08: 8e:e7:c6:fb:79:96:d1:c0:8b:3f:4e:04:d2:3d:32:4b:f3:98: 42:62:ba:74:2c:f3:c6:85:bb:a2:f7:fd:5b:50:8a:ca:ea:79: 03:a3:10:b1:f9:ec:0e:60:59:57:e8:ca:28:32:c5:fa:10:39: 96:f5:b7:17:f4:f5:94:70:aa:01:39:11:6a:30:1a:2e:91:86: 75:a3:c7:3a:91:4e:55:57:02:05:0b:08:41:54:30:4a:97:4e: bd:51:09:8a:6d:3c:79:6d:2f:38:97:0d:e0:e5:4b:58:5d:f7: be:96:7a:0c:97:4e:c4:0d:6b:37:af:8f:a6:36:98:f9:ad:4a: 80:e9:36:2b:4e:16:74:75:96:e6:69:44:06:3a:70:92:b6:04: 8d:84:05:16:35:ae:10:bb:9e:38:0a:43:78:a3:5f:ff:90:a1: 74:8c:6a:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ite18TQz1uPkZ4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk YzRhMzdmZjAtZWYzNS00ZTcwLWI4YzItYjM4NDU1NzVmYzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55HJxfry1n0odmL6kN5A/inY8xuxJ6/9gWji KB05aV81i5ZN3qCLC8j7NmkUT0lE0h1U11wbV2zd7rF/FjwuyyjhphxpIbPC7LXJ PdwpzFYAzGGxYtLUnVBcBTl2tiO6hvhsG24A645ozTzbmbvzy9Acn4Opomlhu1Ru yReVU9FrbyiUC70/x3UcAcflDT9jnGlpf8g8L6H5Iw4sny1+X3D3YvuXlX1PhkTm UsqYC0POLJKljBO543HJMjkhM1Y6yU2IDyTD61wpTqGTBbsJOG1Zk3713wS6RsHb 49FKukx1zt52SZh1Sts0ZFcUsyRD45OPooBVrc14FZ8QKqba4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQSBPMR3O1oEEU6tOAMSKkXxSqlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDA4ZjQwM2UtZWQ5NC0z YjY2LTk5OTctZTYxOWY2MTYwMjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7SElLTTfFjt53v73mceXrnb+DnA9F1ZuQT/TK7ishqVvv64TECCo7l 6DMLMiw5H54cdBEYLOFiUtcTwyUpUE4f8v6LHh3D7VgSVmejBJIYu1RdMLrGlUTI CI7nxvt5ltHAiz9OBNI9MkvzmEJiunQs88aFu6L3/VtQisrqeQOjELH57A5gWVfo yigyxfoQOZb1txf09ZRwqgE5EWowGi6RhnWjxzqRTlVXAgULCEFUMEqXTr1RCYpt PHltLziXDeDlS1hd976WegyXTsQNazevj6Y2mPmtSoDpNitOFnR1luZpRAY6cJK2 BI2EBRY1rhC7njgKQ3ijX/+QoXSMasc= -----END CERTIFICATE-----Generated at Sat Jun 13 13:16:09 2026 by rpki-client