$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa File: 70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa (raw, json) Hash identifier: L+96OXHMcU0Kv6nSHJSWL4MkwRkOR0+N0IeXs0kCCpU= Subject key identifier: 5B:9C:20:FB:5B:DD:7C:8A:41:3D:AD:53:41:4F:A3:81:19:1E:5C:86 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A58CB14135A830E0ACCBBCC80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 15169 IP address blocks: 192.178.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:14:13:5a:83:0e:0a:cc:bb:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=05f124e4-a73e-41fa-b2bc-2d98e986962f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cd:31:52:14:ed:b2:2d:d2:79:66:57:81:b2: 0e:62:39:d6:77:03:f0:c8:9d:69:3d:c4:15:f2:c2: d3:c8:89:39:9d:29:d2:13:85:62:69:6b:ca:c4:59: d8:4c:ae:9c:81:19:03:e9:37:06:67:89:4d:04:e9: 10:d4:69:8d:be:07:a2:32:25:d7:32:32:ba:88:8b: b9:63:c9:25:74:b6:0c:c7:71:d4:ff:e3:8c:8d:f3: be:38:fd:a8:14:a9:db:8c:98:67:ad:dd:02:cb:d0: 3f:3f:eb:41:b6:ed:f8:b7:67:2d:63:d9:ab:7e:74: 01:a6:55:7b:d5:ea:fd:de:bb:fd:7c:5b:45:76:12: 74:96:ad:06:c9:cc:03:46:4a:f8:82:15:8c:a8:f4: cf:f2:01:9d:f5:76:bd:6a:0a:2a:0c:f8:d3:cf:74: 8d:41:6a:1a:99:1e:45:0a:79:80:c7:31:7b:b4:56: 53:33:74:03:0e:38:78:1f:8d:af:2c:1b:5d:20:ad: e1:8b:38:88:c5:af:55:7c:e7:a7:c4:1e:c0:94:8c: be:55:3a:e5:ed:c5:f1:80:f9:5e:65:dc:7f:38:f1: ce:63:82:b5:d2:82:04:b5:06:03:73:70:1e:57:c0: 47:2b:7a:94:0e:9f:d2:a4:d3:71:90:c8:92:20:c4: d2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9C:20:FB:5B:DD:7C:8A:41:3D:AD:53:41:4F:A3:81:19:1E:5C:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:db:29:8d:67:f3:2f:25:08:c8:fc:36:e8:a6:47:e9:19:de: 2f:4c:e6:db:14:18:74:78:52:1c:c1:76:0c:77:ac:d5:2e:77: dc:ff:73:71:5c:78:57:6b:e1:90:00:d0:11:9e:b9:d7:9c:6a: bc:aa:9a:6b:a5:96:3c:7f:6e:3a:02:d5:e4:f6:9f:f1:95:3f: f8:80:d3:f5:b0:e9:c6:d2:08:85:a6:78:95:84:bc:0c:72:66: 73:1d:a6:8a:2f:31:24:87:00:c5:60:f7:fb:34:21:97:a6:96: ab:98:7c:9e:ba:06:e4:12:1e:88:19:0d:20:26:88:48:68:00: 15:8c:8c:d1:58:f5:60:76:a9:75:f1:b6:ce:9a:91:9a:2f:11: d8:5f:47:94:c5:81:71:c1:cc:b3:69:a9:42:95:1a:36:a8:7c: 92:36:79:67:f7:c2:93:11:49:12:45:f6:97:45:77:46:d8:bc: 2a:e9:9e:a4:1d:d6:4f:c6:eb:71:9f:ef:13:35:67:e6:f0:e0: e3:1e:5a:3d:c3:a2:4f:58:70:c4:2b:77:2d:5c:3f:05:a8:eb: f1:b0:43:59:ff:fe:82:a2:da:d8:b3:94:6a:3f:d3:5a:83:4d: 90:b1:44:27:d8:7b:a2:90:71:b9:e2:09:22:45:fd:0e:b1:df: 2f:e6:7c:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYyxQTWoMOCsy7zIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk MDVmMTI0ZTQtYTczZS00MWZhLWIyYmMtMmQ5OGU5ODY5NjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M0xUhTtsi3SeWZXgbIOYjnWdwPwyJ1pPcQV 8sLTyIk5nSnSE4ViaWvKxFnYTK6cgRkD6TcGZ4lNBOkQ1GmNvgeiMiXXMjK6iIu5 Y8kldLYMx3HU/+OMjfO+OP2oFKnbjJhnrd0Cy9A/P+tBtu34t2ctY9mrfnQBplV7 1er93rv9fFtFdhJ0lq0GycwDRkr4ghWMqPTP8gGd9Xa9agoqDPjTz3SNQWoamR5F CnmAxzF7tFZTM3QDDjh4H42vLBtdIK3hiziIxa9VfOenxB7AlIy+VTrl7cXxgPle Zdx/OPHOY4K10oIEtQYDc3AeV8BHK3qUDp/SpNNxkMiSIMTSxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFucIPtb3XyKQT2tU0FPo4EZHlyGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzBiNmViM2ItM2EwNC0z ZjVhLWJjZjEtMTI5MDRlNDI2Mzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfbKY1n8y8lCMj8NuimR+kZ3i9M5tsUGHR4UhzBdgx3rNUud9z/c3Fc eFdr4ZAA0BGeudecaryqmmulljx/bjoC1eT2n/GVP/iA0/Ww6cbSCIWmeJWEvAxy ZnMdpoovMSSHAMVg9/s0IZemlquYfJ66BuQSHogZDSAmiEhoABWMjNFY9WB2qXXx ts6akZovEdhfR5TFgXHBzLNpqUKVGjaofJI2eWf3wpMRSRJF9pdFd0bYvCrpnqQd 1k/G63Gf7xM1Z+bw4OMeWj3Dok9YcMQrdy1cPwWo6/GwQ1n//oKi2tizlGo/01qD TZCxRCfYe6KQcbniCSJF/Q6x3y/mfK4= -----END CERTIFICATE-----Generated at Mon Jun 30 10:40:01 2025 by rpki-client