$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8798177b-2499-386b-aa9b-b44131f0b135.roa File: 8798177b-2499-386b-aa9b-b44131f0b135.roa (raw, json) Hash identifier: ZBRH+h5rRgfk9gacrIqePJGh9zaTvWqZ+a8Qh4El+Qg= Subject key identifier: DC:F2:9C:5E:F5:A8:7E:1B:E6:61:07:DD:95:4F:63:69:DD:DF:53:58 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A4275930AFEE6EAC886701780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8798177b-2499-386b-aa9b-b44131f0b135.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 15169 IP address blocks: 192.178.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:93:0a:fe:e6:ea:c8:86:70:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=35548a44-fd57-4881-bf09-7ad7166f7e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fb:ea:86:68:43:56:30:22:99:89:2e:dd:ef: 71:90:4c:3c:50:27:90:fd:2a:98:b5:03:b2:2e:a1: 7a:64:fa:3e:7f:5f:b5:a9:c9:4d:d9:c3:9d:00:78: de:bb:d9:ef:a7:16:2d:af:8a:02:80:ef:50:6d:3e: 79:3b:ed:db:21:38:8e:9d:a1:9e:44:de:0c:f9:4b: 8f:d8:0b:cb:64:96:68:a6:06:01:50:e8:17:22:f3: c7:ad:da:1e:38:2b:bb:d4:4b:91:26:83:0b:37:ab: 13:c6:1d:b2:31:ae:31:22:e8:6f:a9:e9:b3:20:b3: f4:b7:78:f7:9c:84:ee:1e:47:29:8c:62:03:53:3f: 3f:c7:7e:27:9e:d5:20:57:50:3a:e6:74:65:6d:69: 13:92:db:43:67:21:62:fa:a3:42:ed:43:70:aa:38: 2f:0f:1e:91:db:eb:1f:e9:1e:68:77:8c:b6:84:1d: 6a:14:96:7c:e8:27:b3:ee:a9:ad:15:cd:b3:c1:19: b3:7f:4f:98:45:16:b0:e3:f4:2a:fc:e3:0f:45:ce: 28:8b:be:54:a1:5d:af:a0:c9:b0:3f:8b:1a:3f:fd: f1:8d:0c:f8:a7:7a:6d:54:3b:a9:67:80:86:45:36: 6a:35:55:5c:c3:58:fc:09:4d:f7:a9:8a:da:5a:30: 99:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F2:9C:5E:F5:A8:7E:1B:E6:61:07:DD:95:4F:63:69:DD:DF:53:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8798177b-2499-386b-aa9b-b44131f0b135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:24:dc:72:fb:f3:97:3d:ff:8f:50:89:c1:29:fa:b4:60:92: 38:e2:2a:b0:0c:90:a3:89:6a:0b:8c:58:7d:de:83:fe:2d:d6: 32:b8:70:b6:f0:e6:e2:09:e2:b8:8c:69:11:5f:98:96:d5:d3: af:cc:5c:cd:5c:b1:4e:1b:c5:f5:4d:00:39:26:3a:d8:07:19: ac:a7:97:d5:b5:02:87:93:c5:dc:a5:b1:81:e3:c5:1a:ea:06: 87:83:06:60:62:06:a4:68:d2:1b:39:89:b8:9b:eb:bf:ec:17: 01:51:52:43:63:00:13:4b:da:68:47:88:30:ac:c3:8c:33:f6: cc:48:aa:fe:bd:33:b5:b2:ce:b6:bc:0a:d6:0b:d4:c7:8d:fe: 79:b9:f2:e2:ac:ce:54:e3:f6:b7:69:b1:a5:66:55:6e:34:5d: ad:9a:06:0f:ed:d3:5f:fd:d9:35:f5:0e:d0:c5:29:90:6f:ae: 33:c4:7e:b8:3e:01:ef:0a:f7:4c:1c:2e:b3:27:92:2e:f8:a9: 8b:9a:26:c8:46:ea:de:71:03:25:46:69:21:01:a5:c8:3a:6a: 47:75:dc:80:84:e6:cc:9b:b7:fb:b7:09:6e:f3:b1:89:c8:90: 4a:1d:f9:5e:c0:8b:78:d3:bf:fd:ee:2b:c0:13:c1:b5:17:33: a4:ce:8c:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdZMK/ubqyIZwF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk MzU1NDhhNDQtZmQ1Ny00ODgxLWJmMDktN2FkNzE2NmY3ZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvvqhmhDVjAimYku3e9xkEw8UCeQ/SqYtQOy LqF6ZPo+f1+1qclN2cOdAHjeu9nvpxYtr4oCgO9QbT55O+3bITiOnaGeRN4M+UuP 2AvLZJZopgYBUOgXIvPHrdoeOCu71EuRJoMLN6sTxh2yMa4xIuhvqemzILP0t3j3 nITuHkcpjGIDUz8/x34nntUgV1A65nRlbWkTkttDZyFi+qNC7UNwqjgvDx6R2+sf 6R5od4y2hB1qFJZ86Cez7qmtFc2zwRmzf0+YRRaw4/Qq/OMPRc4oi75UoV2voMmw P4saP/3xjQz4p3ptVDupZ4CGRTZqNVVcw1j8CU33qYraWjCZBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzynF71qH4b5mEH3ZVPY2nd31NYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODc5ODE3N2ItMjQ5OS0z ODZiLWFhOWItYjQ0MTMxZjBiMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0k3HL785c9/49QicEp+rRgkjjiKrAMkKOJaguMWH3eg/4t1jK4cLbw 5uIJ4riMaRFfmJbV06/MXM1csU4bxfVNADkmOtgHGaynl9W1AoeTxdylsYHjxRrq BoeDBmBiBqRo0hs5ibib67/sFwFRUkNjABNL2mhHiDCsw4wz9sxIqv69M7Wyzra8 CtYL1MeN/nm58uKszlTj9rdpsaVmVW40Xa2aBg/t01/92TX1DtDFKZBvrjPEfrg+ Ae8K90wcLrMnki74qYuaJshG6t5xAyVGaSEBpcg6akd13ICE5sybt/u3CW7zsYnI kEod+V7Ai3jTv/3uK8ATwbUXM6TOjIU= -----END CERTIFICATE-----Generated at Mon Jun 30 11:31:16 2025 by rpki-client