$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1485a090-a264-3084-95ac-92a5276c6692.roa File: 1485a090-a264-3084-95ac-92a5276c6692.roa (raw, json) Hash identifier: SltEaT75/6lsmyYk/O+lWjLPhuyel00r7dFQvEbtn44= Subject key identifier: B4:04:F5:C5:49:41:2C:66:39:50:BF:05:6F:B9:21:B9:9B:EA:7B:07 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A42759375C9716191DA97E700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1485a090-a264-3084-95ac-92a5276c6692.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 15169 IP address blocks: 192.178.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:93:75:c9:71:61:91:da:97:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=350b928a-5d60-48fd-af58-09165aa2fe28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:75:63:1f:a4:f6:e6:80:a0:14:53:0b:60:b8: 4c:29:90:23:d7:fc:ed:61:c8:47:c1:13:cb:81:25: 07:17:21:5b:82:f1:d3:36:86:26:69:25:da:d8:f2: c4:e0:a5:35:19:1f:75:7e:b2:44:2a:86:53:23:c8: c8:67:05:fa:eb:16:e0:09:23:34:29:0d:7c:d3:aa: ee:64:a3:40:f4:b3:bf:e8:76:a9:96:4e:31:1b:ce: a5:a7:40:45:26:d2:7e:f5:71:bd:19:47:53:3b:a1: 79:20:92:00:18:cd:c6:e1:a5:79:36:9e:96:73:05: 7b:d4:b6:57:35:e1:07:3b:da:2a:4f:e5:26:aa:37: 49:c7:b6:c4:a1:53:7d:dd:6c:8b:35:23:32:e3:95: 8e:cf:5a:d2:f0:86:f2:f8:e7:15:56:ff:ad:ab:ac: 14:2c:b6:1d:ec:ca:04:ad:53:52:9c:ac:c5:94:40: 9b:36:14:55:9c:58:97:b5:b3:a9:93:d6:05:eb:e3: 7c:02:07:d1:99:25:03:c6:6b:c0:33:cc:33:1b:68: 72:8c:59:01:31:6a:78:b5:59:e9:ec:aa:e1:d3:e3: a8:ea:f1:52:7a:d2:a1:ae:a3:cf:35:76:a7:6e:4a: e0:ea:04:a7:54:1c:da:74:5c:b1:09:dc:c5:c5:df: 61:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:04:F5:C5:49:41:2C:66:39:50:BF:05:6F:B9:21:B9:9B:EA:7B:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1485a090-a264-3084-95ac-92a5276c6692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a7:c2:87:38:d8:92:63:6d:70:11:f4:6d:b7:a6:4a:4e:48: 83:95:c0:06:79:5c:c4:4c:32:01:7f:97:f5:34:8f:78:52:9f: 50:d4:2a:4d:d3:ab:dd:d2:ae:e5:41:93:9c:ec:24:7d:8b:f0: ae:72:22:2d:3e:a3:af:c0:ed:2f:c7:6b:36:1e:18:31:9a:a7: e0:98:2a:d9:98:c4:47:7f:0a:93:98:30:20:b4:07:7e:7c:59: 8f:ba:e4:65:43:71:76:f4:7c:1c:a6:b7:c2:8a:1e:d0:a1:d9: e8:93:b2:f4:c9:51:4e:4a:41:33:79:7c:71:d9:b8:a3:f4:10: 17:65:3d:93:5f:cb:b5:8f:ef:5f:21:8f:a3:19:c2:52:fb:bb: 43:13:e3:64:53:00:65:c3:3c:3c:04:d0:73:30:8b:59:3d:06: d3:1c:8e:99:0b:b9:36:61:4e:0f:25:a7:ba:50:73:02:85:ff: d0:76:60:94:fe:04:1a:f4:1d:22:90:8c:d5:f6:d8:e6:51:7f: 08:d0:77:a1:74:a3:d0:4e:3e:8d:0a:2e:48:66:ec:45:de:19: a2:e1:b3:47:40:e5:59:87:49:6b:36:04:c5:61:d5:b4:5f:fb: bc:01:a1:44:ae:bd:fc:1c:40:38:12:fa:86:42:e2:ca:a9:99: 5a:ee:70:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdZN1yXFhkdqX5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk MzUwYjkyOGEtNWQ2MC00OGZkLWFmNTgtMDkxNjVhYTJmZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXVjH6T25oCgFFMLYLhMKZAj1/ztYchHwRPL gSUHFyFbgvHTNoYmaSXa2PLE4KU1GR91frJEKoZTI8jIZwX66xbgCSM0KQ1806ru ZKNA9LO/6Haplk4xG86lp0BFJtJ+9XG9GUdTO6F5IJIAGM3G4aV5Np6WcwV71LZX NeEHO9oqT+UmqjdJx7bEoVN93WyLNSMy45WOz1rS8Iby+OcVVv+tq6wULLYd7MoE rVNSnKzFlECbNhRVnFiXtbOpk9YF6+N8AgfRmSUDxmvAM8wzG2hyjFkBMWp4tVnp 7Krh0+Oo6vFSetKhrqPPNXanbkrg6gSnVBzadFyxCdzFxd9hiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQE9cVJQSxmOVC/BW+5Ibmb6nsHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTQ4NWEwOTAtYTI2NC0z MDg0LTk1YWMtOTJhNTI3NmM2NjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLK7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGnwoc42JJjbXAR9G23pkpOSIOVwAZ5XMRMMgF/l/U0j3hSn1DUKk3T q93SruVBk5zsJH2L8K5yIi0+o6/A7S/HazYeGDGap+CYKtmYxEd/CpOYMCC0B358 WY+65GVDcXb0fBymt8KKHtCh2eiTsvTJUU5KQTN5fHHZuKP0EBdlPZNfy7WP718h j6MZwlL7u0MT42RTAGXDPDwE0HMwi1k9BtMcjpkLuTZhTg8lp7pQcwKF/9B2YJT+ BBr0HSKQjNX22OZRfwjQd6F0o9BOPo0KLkhm7EXeGaLhs0dA5VmHSWs2BMVh1bRf +7wBoUSuvfwcQDgS+oZC4sqpmVrucAQ= -----END CERTIFICATE-----Generated at Tue Jul 1 00:54:03 2025 by rpki-client