$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e494ac6-a5cb-3ecc-8b76-ee867313e2f6.roa File: 5e494ac6-a5cb-3ecc-8b76-ee867313e2f6.roa (raw, json) Hash identifier: cU8QdbTc2LjoT27I/9zPVRu2HVrlerYGFThhMbHDfCk= Subject key identifier: F7:AC:31:5D:4F:C3:5A:C8:85:81:4E:9F:1D:56:5C:B2:EE:89:FF:EC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B56D7354B90EFBFCC5E1B2340 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e494ac6-a5cb-3ecc-8b76-ee867313e2f6.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 15169 IP address blocks: 192.178.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:35:4b:90:ef:bf:cc:5e:1b:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=d4d15fb0-9d5e-4b26-b1f5-41f40961a513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:44:23:0e:8b:99:4c:ae:34:33:17:ac:ff:c7: 29:d6:32:ec:a0:af:98:9a:b0:61:3b:c6:fe:35:88: b9:d3:ff:2a:94:7c:af:4b:bc:dd:84:3a:27:d0:af: 65:54:87:16:b5:0a:0e:1d:54:c9:37:ec:e9:da:da: c1:16:82:9e:af:8e:30:09:76:3a:a0:26:61:5d:aa: 68:96:61:32:50:35:05:e0:f9:96:ff:6f:11:f2:76: 8c:c9:52:85:b5:d6:cd:02:81:58:ce:d2:37:43:f9: 4d:8f:08:98:03:3b:97:f1:a1:d5:04:3f:86:67:33: 5d:dd:a9:e9:8f:07:a3:1a:6d:f6:32:dc:08:2e:d1: 27:96:f7:5c:3f:a3:e9:97:d3:00:a4:6c:61:25:09: c8:31:38:24:98:d7:66:92:08:13:30:3c:a5:88:c2: 82:2f:12:c6:c2:c4:91:9f:f7:d9:27:3c:c8:de:a1: a5:bc:92:15:36:f8:81:a6:8b:cc:6a:d0:21:79:51: a9:7b:30:0c:c9:22:6c:68:6f:bc:a6:6d:83:97:71: cc:06:6c:29:7e:a3:0d:80:7d:53:5d:5d:ac:19:06: 16:2d:06:c1:61:b1:9f:c7:28:87:85:e7:86:e1:85: 70:06:b0:8a:60:3f:57:c7:45:c5:4c:f9:55:ab:4a: 53:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AC:31:5D:4F:C3:5A:C8:85:81:4E:9F:1D:56:5C:B2:EE:89:FF:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e494ac6-a5cb-3ecc-8b76-ee867313e2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:18:95:bb:26:bd:d7:0e:cd:85:ef:81:0d:da:8a:9e:af:70: d0:03:5a:84:61:e2:f9:ac:de:9a:44:15:f9:f7:15:86:31:ed: 33:56:72:39:f5:66:d8:97:e3:42:50:3f:c0:a6:e4:06:97:13: a3:75:0b:5d:9a:9f:06:49:bd:11:46:32:e7:c4:75:45:7a:ed: 73:0e:24:a9:41:eb:58:ed:8c:fc:dd:16:b5:7c:b1:76:78:28: e9:8c:7f:2a:d0:df:e5:e5:2f:ba:f0:b8:ac:2b:b5:b7:85:4f: 97:a3:1e:fb:38:37:44:ed:82:f7:72:c9:38:bc:07:44:38:e1: fa:27:07:11:74:47:b3:c4:ac:dd:76:7b:e7:fd:3d:d6:52:a8: db:af:bc:9e:82:bc:57:3c:47:0c:9c:ef:0f:ad:26:7a:74:71: 72:01:00:4e:e1:a2:e2:09:d2:04:74:8d:7b:47:03:4f:74:22: 0c:b8:bb:34:db:1b:76:54:85:da:9a:52:2e:fc:d7:8c:ff:3d: 02:50:db:6c:a3:0a:54:d2:18:56:05:7f:fd:5c:ba:e4:ca:64: 51:0b:d9:f8:fc:a6:c6:44:25:17:a7:5a:92:e1:61:80:e1:a0: 56:5a:55:db:96:e0:89:60:6d:ad:01:01:1a:08:41:15:d8:73: d4:da:df:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1zVLkO+/zF4bI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk ZDRkMTVmYjAtOWQ1ZS00YjI2LWIxZjUtNDFmNDA5NjFhNTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUQjDouZTK40Mxes/8cp1jLsoK+YmrBhO8b+ NYi50/8qlHyvS7zdhDon0K9lVIcWtQoOHVTJN+zp2trBFoKer44wCXY6oCZhXapo lmEyUDUF4PmW/28R8naMyVKFtdbNAoFYztI3Q/lNjwiYAzuX8aHVBD+GZzNd3anp jwejGm32MtwILtEnlvdcP6Ppl9MApGxhJQnIMTgkmNdmkggTMDyliMKCLxLGwsSR n/fZJzzI3qGlvJIVNviBpovMatAheVGpezAMySJsaG+8pm2Dl3HMBmwpfqMNgH1T XV2sGQYWLQbBYbGfxyiHheeG4YVwBrCKYD9Xx0XFTPlVq0pTQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPesMV1Pw1rIhYFOnx1WXLLuif/sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWU0OTRhYzYtYTVjYi0z ZWNjLThiNzYtZWU4NjczMTNlMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAYlbsmvdcOzYXvgQ3aip6vcNADWoRh4vms3ppEFfn3FYYx7TNWcjn1 ZtiX40JQP8Cm5AaXE6N1C12anwZJvRFGMufEdUV67XMOJKlB61jtjPzdFrV8sXZ4 KOmMfyrQ3+XlL7rwuKwrtbeFT5ejHvs4N0TtgvdyyTi8B0Q44fonBxF0R7PErN12 e+f9PdZSqNuvvJ6CvFc8Rwyc7w+tJnp0cXIBAE7houIJ0gR0jXtHA090Igy4uzTb G3ZUhdqaUi7814z/PQJQ22yjClTSGFYFf/1cuuTKZFEL2fj8psZEJRenWpLhYYDh oFZaVduW4Ilgba0BARoIQRXYc9Ta32A= -----END CERTIFICATE-----Generated at Sun Oct 19 23:42:08 2025 by rpki-client