$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86c33ef2-c12e-3c30-8177-f2e56b567ee7.roa File: 86c33ef2-c12e-3c30-8177-f2e56b567ee7.roa (raw, json) Hash identifier: cpXqjRAPGmyrwcwLdkfHa5x6ZP5imMdX5Nl0CJDY3ic= Subject key identifier: E6:90:40:CC:FB:BA:48:5A:C7:BF:32:22:BC:9F:E1:18:40:0B:1E:03 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A4275912207EDFF4430118C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86c33ef2-c12e-3c30-8177-f2e56b567ee7.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 15169 IP address blocks: 192.178.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:91:22:07:ed:ff:44:30:11:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=2bd9f5d7-7848-44f5-a602-0d15f945a038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5f:64:da:db:23:30:82:c7:c1:dd:ea:41:53: 18:e9:86:ab:bd:f4:b1:1d:0b:c0:f0:52:f3:81:92: 9e:1c:16:0d:c1:a7:70:f6:e2:1a:e4:03:70:e6:e5: bf:cd:3b:7a:a2:6a:f7:1e:38:ea:f4:32:50:5c:fe: 8a:73:a7:b2:fd:50:1b:65:4f:b0:0c:61:aa:d4:c1: 38:88:db:bc:14:b1:51:ad:ca:48:c5:ff:04:51:1b: 80:0e:95:a0:f1:70:50:87:6a:f0:c6:5d:98:e2:b6: d7:88:5a:fe:7b:54:18:0e:2f:4d:06:e5:13:35:65: b2:c3:66:b3:44:5e:8f:8a:de:b4:54:ba:4d:98:79: 2c:2b:f8:b6:6c:4f:bc:63:ad:f6:f9:2f:b7:08:a1: e4:d9:f3:14:24:eb:fb:45:ba:bc:b0:84:c8:32:54: 4c:95:3f:5e:07:3b:1d:6e:ac:dc:d1:0e:47:8e:76: 4f:6d:ef:2e:f4:95:67:c2:a4:b7:6d:61:1c:92:1e: 5a:90:7f:f0:2f:84:2c:2a:8f:8e:bb:e9:4b:67:25: 5a:c7:18:72:39:c4:b6:02:aa:dd:3b:f8:10:ca:b4: 59:90:6e:eb:84:71:70:a7:fa:7c:1d:3d:53:85:b5: 5b:d0:99:56:5d:ed:e9:f9:1d:05:36:01:95:d8:82: 29:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:90:40:CC:FB:BA:48:5A:C7:BF:32:22:BC:9F:E1:18:40:0B:1E:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86c33ef2-c12e-3c30-8177-f2e56b567ee7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:11:20:35:95:45:83:b6:03:be:41:4c:b4:38:fa:1d:ac:c0: a7:4f:23:10:fc:ac:f7:7f:c2:18:9c:01:8f:08:85:4b:db:05: 71:5a:7e:66:bc:78:bf:be:41:df:9d:a0:e0:ec:b2:7d:d4:68: 75:e9:6d:24:2e:95:39:14:ea:db:51:bf:d1:42:f0:b9:6a:d6: df:e9:6e:d9:2f:81:f4:0c:18:26:ac:fa:0c:68:2b:3e:29:81: c4:62:a5:c6:84:f7:a7:8c:68:b5:bd:ee:36:fa:74:0d:d9:76: be:6c:d1:76:31:8e:ab:fe:9e:62:1a:79:4b:a6:39:db:02:45: 0f:62:bd:d6:89:a7:8d:6c:de:d6:0a:df:7f:fc:ea:8c:38:9b: 6f:86:10:89:8e:20:84:59:ad:53:04:e5:ca:ce:65:52:77:07: ad:91:1e:bf:22:5b:1f:39:46:6a:61:8a:05:55:cf:18:bd:5f: 4f:ed:98:a9:bf:4a:ad:7c:83:18:b5:e6:b7:09:33:c0:3e:2b: 6a:5d:6e:bc:45:b0:08:8b:32:d2:07:03:91:8d:18:33:57:09: 2f:65:13:26:29:4d:ea:32:64:bf:a3:10:b1:3d:4c:e8:16:d4: ed:9a:8a:95:5e:95:11:10:0b:d5:ec:e5:fd:e0:55:cb:49:06: 52:5f:88:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdZEiB+3/RDARjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk MmJkOWY1ZDctNzg0OC00NGY1LWE2MDItMGQxNWY5NDVhMDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F9k2tsjMILHwd3qQVMY6YarvfSxHQvA8FLz gZKeHBYNwadw9uIa5ANw5uW/zTt6omr3Hjjq9DJQXP6Kc6ey/VAbZU+wDGGq1ME4 iNu8FLFRrcpIxf8EURuADpWg8XBQh2rwxl2Y4rbXiFr+e1QYDi9NBuUTNWWyw2az RF6Pit60VLpNmHksK/i2bE+8Y632+S+3CKHk2fMUJOv7Rbq8sITIMlRMlT9eBzsd bqzc0Q5HjnZPbe8u9JVnwqS3bWEckh5akH/wL4QsKo+Ou+lLZyVaxxhyOcS2Aqrd O/gQyrRZkG7rhHFwp/p8HT1ThbVb0JlWXe3p+R0FNgGV2IIpcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOaQQMz7ukhax78yIryf4RhACx4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODZjMzNlZjItYzEyZS0z YzMwLTgxNzctZjJlNTZiNTY3ZWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwRIDWVRYO2A75BTLQ4+h2swKdPIxD8rPd/whicAY8IhUvbBXFafma8 eL++Qd+doODssn3UaHXpbSQulTkU6ttRv9FC8Llq1t/pbtkvgfQMGCas+gxoKz4p gcRipcaE96eMaLW97jb6dA3Zdr5s0XYxjqv+nmIaeUumOdsCRQ9ivdaJp41s3tYK 33/86ow4m2+GEImOIIRZrVME5crOZVJ3B62RHr8iWx85RmphigVVzxi9X0/tmKm/ Sq18gxi15rcJM8A+K2pdbrxFsAiLMtIHA5GNGDNXCS9lEyYpTeoyZL+jELE9TOgW 1O2aipVelREQC9Xs5f3gVctJBlJfiKA= -----END CERTIFICATE-----Generated at Mon Jun 30 07:34:55 2025 by rpki-client