$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9dd1dca-95f5-36cf-aa78-4e2150f2b174.roa File: d9dd1dca-95f5-36cf-aa78-4e2150f2b174.roa (raw, json) Hash identifier: TOtH4oGEu5QjGJGMxnwAr+yA2+2fcCwwRRlNrdHkCRA= Subject key identifier: 63:CB:FA:10:F5:AB:CE:B8:FA:B2:AC:EF:30:DC:67:AE:B0:A4:FC:08 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA4451D727921A85B14BA1900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9dd1dca-95f5-36cf-aa78-4e2150f2b174.roa Signing time: Mon 27 Jul 2026 21:00:11 +0000 ROA not before: Mon 27 Jul 2026 21:00:11 +0000 ROA not after: Sun 25 Oct 2026 21:00:11 +0000 asID: 15169 IP address blocks: 192.178.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:45:1d:72:79:21:a8:5b:14:ba:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 27 21:00:11 2026 GMT Not After : Oct 25 21:00:11 2026 GMT Subject: CN=5a441f09-674d-44a3-b126-3f3ece797bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d4:5a:fe:8e:d5:e1:c4:dc:0c:72:63:a3:59: c4:61:3c:15:81:dd:f3:df:e7:4a:a1:77:bf:9b:5b: f0:bd:e7:f8:4c:ed:d8:f8:46:d9:a2:02:ae:fd:90: bc:b8:dc:9c:ac:2a:22:a7:de:f4:dd:a8:8c:39:09: 7d:ef:d9:fd:fb:b7:aa:85:ab:cd:47:f3:47:48:3d: 27:d5:32:8a:d5:09:a2:66:86:bc:ee:62:b7:64:bc: 94:07:8e:45:8f:51:4a:5f:a6:3f:1f:4e:07:35:57: d1:86:dc:52:d7:1c:2e:f5:d1:42:a1:cb:92:31:0f: 19:d4:d9:c1:c4:aa:54:9b:9f:9a:51:45:b0:b1:58: a1:fc:1e:7f:f9:79:69:c2:06:4e:86:ac:09:79:06: 93:a9:a8:df:fc:af:ae:94:6a:9a:e8:e5:a4:5c:9e: 2e:df:bb:aa:83:6b:36:31:37:6c:48:9d:d2:12:dd: fb:0a:9a:53:87:61:07:e2:73:46:c3:5e:7d:7a:e7: c4:6e:88:fe:af:42:6a:15:08:3f:6b:14:54:1a:46: b0:4c:f3:33:ad:88:21:82:24:b7:da:a7:00:a2:b8: 3f:8a:2d:43:79:db:97:cc:f4:dd:2f:87:c6:27:c3: b2:a6:9b:6f:a9:63:5a:96:c7:20:eb:d0:44:dd:7c: f0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CB:FA:10:F5:AB:CE:B8:FA:B2:AC:EF:30:DC:67:AE:B0:A4:FC:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9dd1dca-95f5-36cf-aa78-4e2150f2b174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:90:a5:bc:f8:56:f0:79:6b:d6:39:dd:c6:0f:b7:52:73:c6: bb:08:df:d9:e0:d2:f4:31:76:18:c8:09:61:98:23:48:11:96: 60:97:a2:44:97:17:1e:81:4f:65:9e:6d:a4:21:5c:91:b9:88: 39:a2:f5:df:dd:2a:f5:93:d5:0b:42:3f:99:1a:90:f4:4d:12: 54:ca:64:71:08:f9:51:ed:9d:35:61:70:79:6c:b3:73:0c:4e: 18:03:73:0e:a3:be:a5:94:cb:7b:00:ad:ce:83:c8:bc:df:8c: 7c:f8:ae:c4:d6:29:6b:af:ac:9e:bf:6d:7c:d6:d8:13:9d:e5: 7b:f0:49:45:25:19:4f:ad:fb:22:a4:1f:d6:96:0d:62:3c:49: 8f:60:3e:ed:ab:bb:bd:5e:b0:15:85:fb:21:2d:ba:89:86:59: e5:55:ff:7d:0d:c8:83:a3:98:30:47:1b:8f:37:4b:86:97:4c: 54:df:4d:2d:3e:29:7e:98:b8:ec:7c:53:62:6e:7c:e8:fa:3e: 42:3f:d2:f6:f0:93:e9:08:af:dc:1b:75:87:79:a9:c3:59:ee: 7b:b8:40:14:46:e3:d4:41:53:d9:ea:25:66:a7:e1:b2:51:e6: f0:9d:20:3d:6f:f3:bc:75:04:37:34:7c:c5:68:dd:5b:42:a4: 40:26:6c:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6kRR1yeSGoWxS6GQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyNzIxMDAxMVoXDTI2MTAyNTIxMDAxMVowLzEtMCsGA1UEAxMk NWE0NDFmMDktNjc0ZC00NGEzLWIxMjYtM2YzZWNlNzk3YmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdRa/o7V4cTcDHJjo1nEYTwVgd3z3+dKoXe/ m1vwvef4TO3Y+EbZogKu/ZC8uNycrCoip9703aiMOQl979n9+7eqhavNR/NHSD0n 1TKK1QmiZoa87mK3ZLyUB45Fj1FKX6Y/H04HNVfRhtxS1xwu9dFCocuSMQ8Z1NnB xKpUm5+aUUWwsVih/B5/+XlpwgZOhqwJeQaTqajf/K+ulGqa6OWkXJ4u37uqg2s2 MTdsSJ3SEt37CppTh2EH4nNGw159eufEboj+r0JqFQg/axRUGkawTPMzrYghgiS3 2qcAorg/ii1DeduXzPTdL4fGJ8OypptvqWNalscg69BE3XzwdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPL+hD1q864+rKs7zDcZ66wpPwIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDlkZDFkY2EtOTVmNS0z NmNmLWFhNzgtNGUyMTUwZjJiMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWQpbz4VvB5a9Y53cYPt1JzxrsI39ng0vQxdhjICWGYI0gRlmCXokSX Fx6BT2WebaQhXJG5iDmi9d/dKvWT1QtCP5kakPRNElTKZHEI+VHtnTVhcHlss3MM ThgDcw6jvqWUy3sArc6DyLzfjHz4rsTWKWuvrJ6/bXzW2BOd5XvwSUUlGU+t+yKk H9aWDWI8SY9gPu2ru71esBWF+yEtuomGWeVV/30NyIOjmDBHG483S4aXTFTfTS0+ KX6YuOx8U2JufOj6PkI/0vbwk+kIr9wbdYd5qcNZ7nu4QBRG49RBU9nqJWan4bJR 5vCdID1v87x1BDc0fMVo3VtCpEAmbA8= -----END CERTIFICATE-----Generated at Wed Jul 29 02:51:55 2026 by rpki-client