$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81c65fe0-e4d2-35d2-8761-159457e81fc3.roa File: 81c65fe0-e4d2-35d2-8761-159457e81fc3.roa (raw, json) Hash identifier: CXjCSgxZhwSeZeh5uTwYyLdg7x1AJG51wJmR2gS7/5s= Subject key identifier: 42:D1:E4:59:68:5B:37:D7:AB:ED:E4:CD:66:C2:EA:E0:7B:70:1D:D2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A4275925F1EFB3B1262AC0480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81c65fe0-e4d2-35d2-8761-159457e81fc3.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 15169 IP address blocks: 192.178.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:92:5f:1e:fb:3b:12:62:ac:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=b38704bc-1015-4650-97c7-6a11496c3c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:49:8b:e8:50:88:ab:6e:ce:96:74:f2:e7:96: e3:71:fb:03:de:39:3a:1a:7b:2a:e9:7b:42:c3:7b: f2:f4:3d:e1:a7:a9:67:5c:5c:c9:0f:92:4b:58:88: e0:08:73:62:81:bb:fe:48:0f:64:81:05:a9:47:50: 46:05:c0:66:87:fc:41:bb:a0:b1:a1:03:08:88:d7: c8:91:a6:25:00:db:a0:f5:80:a7:dd:8f:f6:5e:b3: 33:dc:93:85:88:b1:69:c3:7b:64:8a:6e:7c:25:f6: 31:e8:da:32:b7:5e:14:54:ed:4f:b3:1e:c3:e7:17: c2:c5:05:fe:11:8b:11:a0:f6:ae:38:b2:40:be:53: 6b:aa:5e:c5:9b:ad:ca:b8:e5:e0:52:6f:86:2d:90: b6:52:e6:b0:a7:7b:18:b2:62:ab:44:8a:0c:38:0d: 35:a8:32:83:a0:fa:05:da:8b:41:f4:65:02:2f:05: e7:95:02:07:ee:ed:4f:f5:38:9c:e2:1b:ee:ba:10: 5c:ce:19:5b:39:f3:52:f5:05:eb:2a:d4:b7:80:d8: 13:b5:b3:85:1c:60:bd:dc:34:ef:be:90:9c:63:c1: 22:25:66:20:4a:da:66:bc:29:21:0e:43:fb:b6:ee: 7d:49:4c:c7:8b:97:38:4a:bc:1a:8b:57:08:0a:a7: 92:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D1:E4:59:68:5B:37:D7:AB:ED:E4:CD:66:C2:EA:E0:7B:70:1D:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81c65fe0-e4d2-35d2-8761-159457e81fc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:36:cb:21:ca:f4:1c:ca:03:5a:ec:5b:c4:d6:65:a3:32:55: 92:33:d2:1c:94:78:73:86:f6:e6:40:59:fa:32:29:01:20:89: ed:65:47:41:ae:e2:d2:35:2a:f8:97:9f:df:30:a9:57:f2:21: c1:cc:4a:b4:92:90:c8:94:f6:6f:3c:10:39:14:18:a7:ac:20: 90:42:d5:bd:ef:7d:d4:3b:e8:2d:73:99:aa:96:d5:67:40:2e: 4a:59:02:76:fe:38:2d:42:c3:be:a3:b6:64:35:87:1d:5e:a4: 1c:9b:b6:8a:80:e9:ec:e9:a8:21:9a:de:31:47:98:b0:18:79: b7:ae:40:24:e4:94:62:57:65:5e:16:f2:57:bc:5a:99:17:4a: c3:0e:3d:42:52:f6:e0:a9:b8:e6:5d:80:33:a7:49:85:9d:a8: 38:d8:54:4c:2f:44:44:f4:53:18:e1:a8:fe:8d:39:00:e1:63: c0:8a:e4:b1:e1:b6:f9:38:85:2d:d8:2f:76:ba:93:d8:75:d5: a3:8c:11:7e:0c:46:54:4a:06:38:2d:be:da:5a:7a:2e:b4:09: 7c:a1:30:a7:6e:81:eb:69:18:75:9c:a7:e8:ac:9d:c9:b5:bf: b1:5d:80:44:22:27:43:05:49:c5:f2:2a:06:b1:8c:57:45:c6: 34:e6:69:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdZJfHvs7EmKsBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk YjM4NzA0YmMtMTAxNS00NjUwLTk3YzctNmExMTQ5NmMzYzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40mL6FCIq27OlnTy55bjcfsD3jk6Gnsq6XtC w3vy9D3hp6lnXFzJD5JLWIjgCHNigbv+SA9kgQWpR1BGBcBmh/xBu6CxoQMIiNfI kaYlANug9YCn3Y/2XrMz3JOFiLFpw3tkim58JfYx6Noyt14UVO1Psx7D5xfCxQX+ EYsRoPauOLJAvlNrql7Fm63KuOXgUm+GLZC2Uuawp3sYsmKrRIoMOA01qDKDoPoF 2otB9GUCLwXnlQIH7u1P9Tic4hvuuhBczhlbOfNS9QXrKtS3gNgTtbOFHGC93DTv vpCcY8EiJWYgStpmvCkhDkP7tu59SUzHi5c4Srwai1cICqeSKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELR5FloWzfXq+3kzWbC6uB7cB3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODFjNjVmZTAtZTRkMi0z NWQyLTg3NjEtMTU5NDU3ZTgxZmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHE2yyHK9BzKA1rsW8TWZaMyVZIz0hyUeHOG9uZAWfoyKQEgie1lR0Gu 4tI1KviXn98wqVfyIcHMSrSSkMiU9m88EDkUGKesIJBC1b3vfdQ76C1zmaqW1WdA LkpZAnb+OC1Cw76jtmQ1hx1epBybtoqA6ezpqCGa3jFHmLAYebeuQCTklGJXZV4W 8le8WpkXSsMOPUJS9uCpuOZdgDOnSYWdqDjYVEwvRET0UxjhqP6NOQDhY8CK5LHh tvk4hS3YL3a6k9h11aOMEX4MRlRKBjgtvtpaei60CXyhMKdugetpGHWcp+isncm1 v7FdgEQiJ0MFScXyKgaxjFdFxjTmaa8= -----END CERTIFICATE-----Generated at Mon Jun 30 10:33:45 2025 by rpki-client