$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1408a967-bb22-3aa5-9b7d-7054fef10f1b.roa File: 1408a967-bb22-3aa5-9b7d-7054fef10f1b.roa (raw, json) Hash identifier: vK0O/E8kNgYYTtdKJJJhAUCCGDnAz3iW+imIO3k2STc= Subject key identifier: C9:8F:2B:CA:08:F5:94:57:A9:C5:D6:1A:76:73:67:A0:56:2A:BD:E7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A4275917EAEFFFF4551174CC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1408a967-bb22-3aa5-9b7d-7054fef10f1b.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 15169 IP address blocks: 192.178.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:91:7e:ae:ff:ff:45:51:17:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=7bd9a921-7f1a-465b-ae8f-3e2d1c7bdfe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1b:80:a6:5d:e5:36:7a:3f:bb:a5:57:71:7c: b6:33:af:56:b4:af:6a:f1:86:73:4d:7c:08:b8:d2: 59:c3:d8:50:a1:1c:19:b8:d3:fd:3b:0b:93:65:52: c6:b6:22:44:ac:d4:26:86:fb:d9:a5:ca:b6:45:1d: 64:ed:61:8d:7d:9d:93:b1:ef:98:b6:1b:82:fc:de: 58:2b:9b:bd:43:74:0b:9b:96:25:f5:c6:7e:eb:d8: 41:94:99:0d:0d:72:50:b5:fc:da:e1:52:34:41:2e: 9d:7d:c6:68:65:70:58:2d:4b:6d:f4:01:8c:b2:be: 6a:26:96:e5:3a:84:2e:01:e1:d5:14:9a:ab:42:11: b2:9e:d0:02:6a:fc:c7:bf:6d:97:f2:30:61:a2:0b: e2:77:5d:0d:ef:62:67:5d:e0:81:a8:41:7a:3b:8b: a1:d7:fb:76:e6:80:97:d2:2b:65:79:e2:90:63:2c: 31:7c:d2:12:1e:23:2a:42:cc:b4:37:96:b7:b8:a4: 4a:ce:fb:90:39:c0:65:36:0d:43:4a:1c:bb:ab:d3: 0b:4b:9a:58:4c:df:01:04:5a:a7:b9:f6:7b:ae:0e: 2f:f5:72:1b:71:f2:04:91:a8:b6:10:98:13:e4:1e: 34:de:be:3e:d4:e0:27:ae:4c:94:30:a5:ee:6a:94: 0e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8F:2B:CA:08:F5:94:57:A9:C5:D6:1A:76:73:67:A0:56:2A:BD:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1408a967-bb22-3aa5-9b7d-7054fef10f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ab:98:19:5b:e8:aa:ae:1a:5e:00:54:f4:8e:36:a3:30:84: d1:ce:ef:23:80:8c:24:3d:b1:68:29:91:37:ba:3b:31:ec:35: 42:0e:a9:d0:91:15:b5:2e:3a:89:fc:d9:b5:87:fd:6a:0e:88: 63:db:8f:6d:bc:28:12:cf:95:2d:01:ce:62:2b:35:d7:c7:ad: 82:98:d0:1d:7f:1c:f3:1b:b9:9f:5a:fb:39:c5:7e:ba:a3:c4: 74:8e:7a:6c:05:eb:a1:2e:4c:3d:1a:5b:ef:e2:16:e8:6a:b3: 36:37:75:a1:40:25:93:4e:36:de:6b:55:df:1e:7e:46:d9:5b: 49:18:68:32:ce:51:43:13:f8:01:c9:b3:d6:55:5d:ef:13:84: 42:6f:a4:7c:b5:8b:31:93:21:24:0e:a6:1a:34:34:4e:5e:3e: 04:c8:7c:89:ec:7f:fa:12:81:ba:f2:65:b9:5f:c1:cc:49:39: 26:64:31:51:ad:37:35:33:4f:45:aa:36:71:af:68:63:39:f4: 64:44:21:89:4f:4d:e0:72:e4:5b:0e:8c:f3:e7:f2:5d:82:24: 47:cf:d5:b3:28:e5:96:41:06:ba:0c:84:ab:98:f1:6f:48:97: e7:f5:ac:d8:3a:79:3e:32:3a:fd:ef:49:b5:b2:26:cb:74:c9: b3:dd:42:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdZF+rv//RVEXTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk N2JkOWE5MjEtN2YxYS00NjViLWFlOGYtM2UyZDFjN2JkZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRuApl3lNno/u6VXcXy2M69WtK9q8YZzTXwI uNJZw9hQoRwZuNP9OwuTZVLGtiJErNQmhvvZpcq2RR1k7WGNfZ2Tse+YthuC/N5Y K5u9Q3QLm5Yl9cZ+69hBlJkNDXJQtfza4VI0QS6dfcZoZXBYLUtt9AGMsr5qJpbl OoQuAeHVFJqrQhGyntACavzHv22X8jBhogvid10N72JnXeCBqEF6O4uh1/t25oCX 0itleeKQYywxfNISHiMqQsy0N5a3uKRKzvuQOcBlNg1DShy7q9MLS5pYTN8BBFqn ufZ7rg4v9XIbcfIEkai2EJgT5B403r4+1OAnrkyUMKXuapQOvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmPK8oI9ZRXqcXWGnZzZ6BWKr3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTQwOGE5NjctYmIyMi0z YWE1LTliN2QtNzA1NGZlZjEwZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADirmBlb6KquGl4AVPSONqMwhNHO7yOAjCQ9sWgpkTe6OzHsNUIOqdCR FbUuOon82bWH/WoOiGPbj228KBLPlS0BzmIrNdfHrYKY0B1/HPMbuZ9a+znFfrqj xHSOemwF66EuTD0aW+/iFuhqszY3daFAJZNONt5rVd8efkbZW0kYaDLOUUMT+AHJ s9ZVXe8ThEJvpHy1izGTISQOpho0NE5ePgTIfInsf/oSgbryZblfwcxJOSZkMVGt NzUzT0WqNnGvaGM59GREIYlPTeBy5FsOjPPn8l2CJEfP1bMo5ZZBBroMhKuY8W9I l+f1rNg6eT4yOv3vSbWyJst0ybPdQpA= -----END CERTIFICATE-----Generated at Mon Jun 30 10:30:19 2025 by rpki-client