$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/858dd476-52d3-3d06-87f5-46c030ed18b9.roa File: 858dd476-52d3-3d06-87f5-46c030ed18b9.roa (raw, json) Hash identifier: nHqI9h0DuVQI6U/0+FetUcUquT9f/lTpJdYLn/tyWNE= Subject key identifier: 30:95:2B:A9:7E:DC:DF:77:F3:5F:47:8C:70:D9:F9:19:EB:C9:6E:37 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B64CD54D4060C1A0CA0F800C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/858dd476-52d3-3d06-87f5-46c030ed18b9.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 15169 IP address blocks: 192.178.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:54:d4:06:0c:1a:0c:a0:f8:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=090a74fa-fbd2-4cd0-a4b4-8bb29a925676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9a:0e:89:04:bf:90:87:38:44:dc:1e:c1:42: 6a:c5:53:a2:29:90:28:51:eb:35:9f:15:83:c1:bd: bf:8d:c3:95:5f:fd:2a:c5:38:04:fd:57:59:d9:c2: 45:3a:4a:30:92:58:bb:c0:e6:9a:a0:f9:7e:04:ef: 87:e2:cc:77:03:b9:2f:6c:8b:6f:f9:65:5e:07:e3: 3a:43:4d:46:e8:e7:86:98:de:22:80:e1:64:9f:e2: 02:51:56:92:07:08:3d:0c:46:70:71:2b:3d:e4:3e: 90:d7:50:3b:c0:97:1c:35:4d:5e:cb:67:91:c7:23: 78:aa:c6:d6:74:ed:3c:48:24:e9:1d:3c:50:3a:2a: 26:7a:1e:3b:37:48:eb:6b:db:6a:0b:0b:f0:db:8e: ad:78:18:16:7d:7a:25:6a:9b:59:1a:dc:4a:77:96: d7:96:11:bf:ee:e0:54:d1:48:bb:38:43:7f:4c:ed: af:b1:e5:ea:3e:46:43:5d:92:3f:2d:40:e1:9f:24: 4f:ae:98:91:70:fd:0a:2f:92:89:97:e7:5d:db:16: 5e:84:d8:c6:b5:c1:db:7d:1f:1f:24:60:d6:c9:62: e0:9a:79:d2:ea:0a:8c:60:83:9f:8d:ab:7c:79:cf: 24:dc:0f:09:3e:5c:7a:e0:bf:6a:a1:24:93:3f:55: ab:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:95:2B:A9:7E:DC:DF:77:F3:5F:47:8C:70:D9:F9:19:EB:C9:6E:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/858dd476-52d3-3d06-87f5-46c030ed18b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:a5:70:f6:29:d8:d5:3c:d2:c3:b0:c4:73:9a:16:15:70:a7: a3:51:68:f5:b3:83:01:9b:76:33:e0:84:2d:85:6f:ec:77:07: c2:47:87:8b:9c:39:fc:aa:dd:a9:f8:2f:ee:7f:d7:43:00:dd: a7:96:35:e9:5d:c8:6a:13:5f:38:a2:ec:33:27:70:95:80:7a: 90:44:c3:de:6b:22:8a:37:c1:39:62:c3:d7:7a:ea:64:89:71: 83:48:82:2e:be:51:07:2f:40:cc:93:41:98:00:60:bb:2a:ba: 29:0e:c3:d5:ac:b7:7b:55:61:23:1d:d4:11:d1:9d:47:f1:99: c9:e1:a1:73:6b:de:cb:09:41:ec:80:7e:fa:d6:03:c5:05:1d: cf:b9:52:6a:54:f3:9e:3d:39:d7:20:00:47:38:fb:11:85:68: 42:ba:89:c4:ae:48:67:6f:3c:09:63:b2:21:fb:6d:05:7b:14: 17:5d:73:54:0f:c8:b7:fb:93:5a:8f:52:d4:c8:f2:23:46:10: 9c:4d:a3:10:32:82:b5:f1:3a:a7:11:77:be:36:29:44:23:63: 77:40:71:a7:a5:b5:d8:31:63:5f:5a:6e:ca:ef:3d:c0:b5:e9: e5:ce:cd:5e:35:9c:06:e7:a3:2d:c2:84:95:83:5d:f6:a7:aa: 4b:3f:75:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzVTUBgwaDKD4AMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MDkwYTc0ZmEtZmJkMi00Y2QwLWE0YjQtOGJiMjlhOTI1Njc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJoOiQS/kIc4RNwewUJqxVOiKZAoUes1nxWD wb2/jcOVX/0qxTgE/VdZ2cJFOkowkli7wOaaoPl+BO+H4sx3A7kvbItv+WVeB+M6 Q01G6OeGmN4igOFkn+ICUVaSBwg9DEZwcSs95D6Q11A7wJccNU1ey2eRxyN4qsbW dO08SCTpHTxQOiomeh47N0jra9tqCwvw246teBgWfXolaptZGtxKd5bXlhG/7uBU 0Ui7OEN/TO2vseXqPkZDXZI/LUDhnyRPrpiRcP0KL5KJl+dd2xZehNjGtcHbfR8f JGDWyWLgmnnS6gqMYIOfjat8ec8k3A8JPlx64L9qoSSTP1WrUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCVK6l+3N93819HjHDZ+RnryW43MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODU4ZGQ0NzYtNTJkMy0z ZDA2LTg3ZjUtNDZjMDMwZWQxOGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLIoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqlcPYp2NU80sOwxHOaFhVwp6NRaPWzgwGbdjPghC2Fb+x3B8JHh4uc Ofyq3an4L+5/10MA3aeWNeldyGoTXzii7DMncJWAepBEw95rIoo3wTliw9d66mSJ cYNIgi6+UQcvQMyTQZgAYLsquikOw9Wst3tVYSMd1BHRnUfxmcnhoXNr3ssJQeyA fvrWA8UFHc+5UmpU8549OdcgAEc4+xGFaEK6icSuSGdvPAljsiH7bQV7FBddc1QP yLf7k1qPUtTI8iNGEJxNoxAygrXxOqcRd742KUQjY3dAcaeltdgxY19absrvPcC1 6eXOzV41nAbnoy3ChJWDXfanqks/de8= -----END CERTIFICATE-----Generated at Sun Oct 19 23:41:31 2025 by rpki-client