$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85a6cf21-2056-3a41-b8bd-d016042a8028.roa File: 85a6cf21-2056-3a41-b8bd-d016042a8028.roa (raw, json) Hash identifier: STJZx3r4/DpJzJ8IEdVMltTXRMewFyyal/Hkm7DUnD8= Subject key identifier: 8D:B8:B1:19:73:BC:89:0D:9A:E4:69:F2:1A:8B:A7:CA:1B:75:68:5A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A427592A0345CE95521A11A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85a6cf21-2056-3a41-b8bd-d016042a8028.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 15169 IP address blocks: 192.178.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:92:a0:34:5c:e9:55:21:a1:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=9710f7a2-bcda-43d1-9d09-4c50f3a7ad04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bc:a4:1c:b4:b4:61:5d:28:ba:37:20:be:f2: fa:b8:06:ce:9b:00:e9:79:3e:a9:d3:1f:a2:56:29: 4d:61:bc:18:b2:54:22:69:f4:5a:f4:94:f3:11:85: 9a:34:d8:9c:9e:2a:f9:bc:fe:db:c1:05:35:06:16: aa:db:4d:70:8b:46:d5:b2:79:0b:ca:38:1a:39:a4: 39:76:fa:63:13:a8:95:59:7e:a0:16:68:fb:0c:11: 13:e8:9a:f7:61:25:bd:af:ae:76:d1:36:af:00:40: 28:7b:05:fd:1f:57:ca:00:8a:34:d7:a1:66:a5:04: 86:8f:8c:d2:20:65:03:fe:62:0a:d0:df:84:03:f0: 26:83:c8:44:c4:ff:df:a8:56:6a:f2:bc:c4:97:bd: a9:0c:6a:21:c2:13:58:c9:f4:4d:fd:78:f5:68:c8: f0:18:4a:64:37:8a:4c:01:43:05:69:8d:88:57:8b: df:44:71:08:32:cd:27:62:0e:ea:c9:85:a2:8e:2a: ae:d0:95:d4:5b:8e:d4:38:ec:3b:4b:bb:2d:df:95: a6:1a:d0:b4:2a:10:5d:85:23:1f:aa:38:f6:fc:00: c4:49:94:b7:a3:7c:b9:59:bd:97:2d:f5:b9:4a:f8: 36:e3:9d:0c:bc:c4:b3:9f:16:b2:ef:b9:93:78:d0: 86:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B8:B1:19:73:BC:89:0D:9A:E4:69:F2:1A:8B:A7:CA:1B:75:68:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85a6cf21-2056-3a41-b8bd-d016042a8028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b0:25:de:e7:47:62:11:83:45:33:bd:06:e9:d1:63:07:1b: 55:38:c3:b2:68:14:b8:df:d1:46:7c:02:37:4d:e4:db:2c:48: e8:f2:62:df:cd:d6:b5:4f:ae:53:23:7b:5a:69:0c:4f:a2:4d: 91:59:15:72:37:33:fc:53:33:b6:83:c6:23:b1:3e:cb:a2:93: 7f:d1:90:8b:a8:98:72:2c:1e:7a:50:5a:ea:3f:52:a9:f0:a2: 58:5a:87:24:10:36:35:33:87:78:fa:2c:cd:a1:4c:b4:9c:5f: 03:fb:35:8c:74:de:32:c4:69:12:a8:8b:8b:4a:57:8b:a1:0c: ea:eb:f5:b4:88:ba:5f:78:9d:9e:6f:47:49:0e:53:30:32:2c: ed:28:03:10:8c:c8:01:a7:2a:f3:3f:11:eb:27:80:b2:de:32: 40:a6:e5:16:d0:b1:9d:a4:f6:ca:46:dc:4c:75:bb:81:30:59: 20:4a:cc:e5:34:06:74:5f:10:21:4b:bd:f6:f5:46:24:12:47: f6:27:34:ab:8b:d4:bf:5c:0b:92:8a:21:33:e3:92:3e:14:b3: 50:0a:c4:43:f5:05:94:b5:55:9c:a9:f0:45:60:e1:b1:ed:02: 69:9d:8b:1a:39:64:eb:18:d7:1e:33:12:27:72:df:ea:23:e6: 0f:b4:4e:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdZKgNFzpVSGhGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk OTcxMGY3YTItYmNkYS00M2QxLTlkMDktNGM1MGYzYTdhZDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbykHLS0YV0oujcgvvL6uAbOmwDpeT6p0x+i VilNYbwYslQiafRa9JTzEYWaNNicnir5vP7bwQU1Bhaq201wi0bVsnkLyjgaOaQ5 dvpjE6iVWX6gFmj7DBET6Jr3YSW9r6520TavAEAoewX9H1fKAIo016FmpQSGj4zS IGUD/mIK0N+EA/Amg8hExP/fqFZq8rzEl72pDGohwhNYyfRN/Xj1aMjwGEpkN4pM AUMFaY2IV4vfRHEIMs0nYg7qyYWijiqu0JXUW47UOOw7S7st35WmGtC0KhBdhSMf qjj2/ADESZS3o3y5Wb2XLfW5Svg2450MvMSznxay77mTeNCGdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI24sRlzvIkNmuRp8hqLp8obdWhaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODVhNmNmMjEtMjA1Ni0z YTQxLWI4YmQtZDAxNjA0MmE4MDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLK/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmwJd7nR2IRg0UzvQbp0WMHG1U4w7JoFLjf0UZ8AjdN5NssSOjyYt/N 1rVPrlMje1ppDE+iTZFZFXI3M/xTM7aDxiOxPsuik3/RkIuomHIsHnpQWuo/Uqnw olhahyQQNjUzh3j6LM2hTLScXwP7NYx03jLEaRKoi4tKV4uhDOrr9bSIul94nZ5v R0kOUzAyLO0oAxCMyAGnKvM/EesngLLeMkCm5RbQsZ2k9spG3Ex1u4EwWSBKzOU0 BnRfECFLvfb1RiQSR/YnNKuL1L9cC5KKITPjkj4Us1AKxEP1BZS1VZyp8EVg4bHt Ammdixo5ZOsY1x4zEidy3+oj5g+0TrY= -----END CERTIFICATE-----Generated at Mon Jun 30 11:53:29 2025 by rpki-client