$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/03c84c89-3c1a-36ae-a842-1b2c34453006.roa File: 03c84c89-3c1a-36ae-a842-1b2c34453006.roa (raw, json) Hash identifier: N6cjvebO/HwM4jdK1bPIV0alJC46X5vEkplZxzrCUjw= Subject key identifier: D9:9A:10:06:D8:91:D8:EE:C4:1A:93:05:08:25:86:20:C2:0C:A5:C3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B233192ECF67135CCC7C4C900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/03c84c89-3c1a-36ae-a842-1b2c34453006.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:92:ec:f6:71:35:cc:c7:c4:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=884a38ad-ccee-4647-8e30-db1bc65dde10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0d:3e:01:d0:45:96:e9:ec:a1:82:b4:48:38: 82:79:a9:b6:cb:25:c5:5f:55:ad:7e:00:10:62:cd: 45:c9:4d:ed:df:c8:5d:36:fd:b6:ba:29:8d:97:7c: a9:36:9e:c1:d6:23:c2:a9:5f:2b:16:1f:21:dd:09: 37:9b:c6:77:20:d3:2f:6f:ff:81:d8:ca:a0:0f:c1: f1:c0:ff:f1:34:72:95:e8:6f:af:73:63:1c:ab:cd: 44:e0:35:f9:28:c4:7f:a8:20:19:c7:c4:f6:8c:7c: 25:be:5a:bf:1f:41:99:2b:b8:df:51:36:fd:02:57: f1:0d:bc:4b:80:2c:76:db:d8:57:04:aa:72:e9:09: 71:28:3b:de:01:db:12:8e:d3:ff:f4:79:8c:ec:07: ca:ea:87:d9:f7:60:17:f3:0d:e3:9f:24:1e:9d:79: ec:e5:90:17:c9:6c:db:45:1e:8b:f6:dc:cf:eb:fe: 0d:5a:90:30:7d:71:cd:3a:9b:46:a5:ed:88:56:f8: ce:a1:2f:05:4f:79:dc:04:f7:a3:6c:a5:8a:1e:26: 4d:4d:ad:dc:de:59:ec:b2:18:93:82:78:65:9a:ae: cd:25:99:34:f4:49:a3:4f:d3:7c:0c:a1:81:c5:de: 75:e0:8a:37:b6:1d:24:55:e9:05:5f:58:05:8e:36: 75:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9A:10:06:D8:91:D8:EE:C4:1A:93:05:08:25:86:20:C2:0C:A5:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/03c84c89-3c1a-36ae-a842-1b2c34453006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:d6:e2:aa:9f:f3:88:b7:b2:ee:34:8c:dc:23:6e:71:5d:71: e5:ea:3b:fe:4f:4c:0d:e5:df:62:a8:9a:38:3a:f7:20:7a:54: 9b:cf:38:9f:b2:53:0c:bd:f5:37:43:4b:51:be:50:69:cd:3a: 6a:e4:8d:e0:42:6e:a5:b7:7a:fb:48:c1:4b:7b:af:fd:ad:00: bd:1f:90:96:a0:61:34:78:f1:76:87:45:88:42:42:3a:e0:6b: e4:a5:75:a8:7b:71:ab:6b:32:06:50:3f:37:53:53:ac:38:bb: 5e:fa:6f:80:f5:6a:20:be:80:b7:95:8c:2b:a5:a4:10:67:ae: 5b:a0:af:67:f2:b9:01:eb:4b:e5:b3:68:90:60:ac:06:e9:c9: d9:4f:55:ed:f6:9d:b2:c6:82:4b:ae:4e:f5:12:39:b5:57:df: 06:47:0f:58:1e:84:ab:40:2b:2c:49:93:08:2d:6d:00:00:ac: 31:c1:8a:2c:51:30:5c:cc:c3:2f:e4:fb:70:04:63:ac:16:c2: 0d:d2:bd:c8:e6:9b:c4:91:ad:31:5a:12:45:a5:e4:31:1f:b4: 5d:1c:13:c8:e4:96:a5:a4:8b:95:72:32:59:37:22:6f:0e:3c: 21:9c:96:cf:fa:d0:4b:31:b0:45:d3:10:ea:54:45:c2:0c:85: 49:12:44:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZLs9nE1zMfEyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk ODg0YTM4YWQtY2NlZS00NjQ3LThlMzAtZGIxYmM2NWRkZTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw0+AdBFlunsoYK0SDiCeam2yyXFX1WtfgAQ Ys1FyU3t38hdNv22uimNl3ypNp7B1iPCqV8rFh8h3Qk3m8Z3INMvb/+B2MqgD8Hx wP/xNHKV6G+vc2Mcq81E4DX5KMR/qCAZx8T2jHwlvlq/H0GZK7jfUTb9AlfxDbxL gCx229hXBKpy6QlxKDveAdsSjtP/9HmM7AfK6ofZ92AX8w3jnyQenXns5ZAXyWzb RR6L9tzP6/4NWpAwfXHNOptGpe2IVvjOoS8FT3ncBPejbKWKHiZNTa3c3lnsshiT gnhlmq7NJZk09EmjT9N8DKGBxd514Io3th0kVekFX1gFjjZ1IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmaEAbYkdjuxBqTBQglhiDCDKXDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDNjODRjODktM2MxYS0z NmFlLWE4NDItMWIyYzM0NDUzMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/W4qqf84i3su40jNwjbnFdceXqO/5PTA3l32Komjg69yB6VJvPOJ+y Uwy99TdDS1G+UGnNOmrkjeBCbqW3evtIwUt7r/2tAL0fkJagYTR48XaHRYhCQjrg a+Sldah7catrMgZQPzdTU6w4u176b4D1aiC+gLeVjCulpBBnrlugr2fyuQHrS+Wz aJBgrAbpydlPVe32nbLGgkuuTvUSObVX3wZHD1gehKtAKyxJkwgtbQAArDHBiixR MFzMwy/k+3AEY6wWwg3Svcjmm8SRrTFaEkWl5DEftF0cE8jklqWki5VyMlk3Im8O PCGcls/60EsxsEXTEOpURcIMhUkSRB4= -----END CERTIFICATE-----Generated at Sun Oct 19 23:41:58 2025 by rpki-client