$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9af36d84-ca49-3b10-a12a-084e91373650.roa File: 9af36d84-ca49-3b10-a12a-084e91373650.roa (raw, json) Hash identifier: PU8IAVUZx0EAsL5A4Z0GyR4M3VjIHGYqBgRGZt7ehyY= Subject key identifier: 5E:83:ED:89:5A:FC:37:7E:07:47:88:B0:CC:81:DC:83:D5:7F:57:44 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A42758FFC2C23DC3DAF19FD00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9af36d84-ca49-3b10-a12a-084e91373650.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 15169 IP address blocks: 192.178.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:8f:fc:2c:23:dc:3d:af:19:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=f342d852-cad2-4267-9c8a-574fb2ca87f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c0:cb:31:ba:38:a6:e0:08:9b:d2:aa:ca:bc: a4:11:d6:06:04:1c:31:06:c1:1d:92:d1:d8:cb:df: 29:12:e8:49:b3:97:2e:9d:08:c7:55:10:cc:2a:46: 16:55:f3:72:26:58:87:0d:9f:27:a5:64:5c:7e:a4: b0:f3:78:86:12:5a:43:dd:f2:cb:21:9a:54:85:f8: 83:10:60:bd:91:ad:f0:f4:f0:8e:2b:41:ff:bf:57: f4:3d:6f:e5:6c:56:ef:e6:b1:5e:31:8a:06:93:70: 6a:cf:a2:95:c9:17:3a:1f:7c:85:c2:cb:e4:31:a0: d1:6c:ac:dd:4a:5f:50:c1:8f:c6:28:f4:5d:c4:57: a0:1d:ce:0c:3d:9e:c0:7c:c2:68:02:27:02:5f:ce: 16:ed:89:6f:88:2a:56:3d:66:52:65:93:f8:ee:02: fa:8e:30:e7:8b:c1:6f:59:ab:fc:8e:1a:4a:b6:ff: dd:ff:3c:b4:96:3e:3c:c1:86:44:35:46:ed:70:43: e3:f7:cf:41:d1:c3:ba:e9:43:98:20:66:00:5b:9c: 04:55:57:f1:22:f2:fa:4f:b0:e6:80:58:41:31:b4: 05:44:8f:cb:00:08:d1:80:e0:79:4f:e4:f2:6d:f0: 93:d2:ac:0c:ad:04:40:94:6b:33:c3:4a:c9:e7:c1: 44:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:83:ED:89:5A:FC:37:7E:07:47:88:B0:CC:81:DC:83:D5:7F:57:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9af36d84-ca49-3b10-a12a-084e91373650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:f8:9d:dc:66:fb:b5:ff:25:bd:14:52:d2:5d:97:0f:6a:29: bd:f4:df:2f:db:7c:87:03:48:4d:23:a4:ea:e5:ec:24:ae:ad: 68:5a:21:68:e6:52:ae:45:d9:a4:93:84:75:92:79:c3:58:ba: 40:ac:b5:f7:e3:59:c4:dd:c2:1f:28:d3:cf:af:6e:69:2e:81: e0:72:9f:28:8f:d0:67:7d:5b:56:2e:0e:bd:e6:62:7a:b4:84: 22:b7:15:fb:0a:f8:3e:df:31:2a:ac:09:03:b5:3d:cb:14:ba: 75:5b:8c:b6:1e:8b:fe:80:ab:a9:5e:44:76:03:a8:ea:7a:ba: ff:82:81:27:03:d2:1a:46:ea:5b:9e:f3:e9:01:cd:64:d6:f1: e6:a3:de:cc:68:fb:df:75:35:6b:bd:a7:b0:21:4b:e2:0b:9e: 8e:e5:3d:c5:13:a9:5f:13:f6:cf:98:19:17:7e:2c:ca:d5:9e: 46:74:32:69:51:03:3d:d7:dd:75:8b:67:53:7b:b6:9b:ca:37: e3:4d:c6:7b:e6:f0:2d:11:39:68:bc:ab:0d:2f:a1:1c:72:98: c6:32:4c:ee:92:77:96:79:0d:80:01:94:e3:2d:38:e2:a4:72: 62:92:a6:af:fa:14:4d:25:d9:dc:3b:81:b4:90:9a:b2:8b:43: 59:b6:ba:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdY/8LCPcPa8Z/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk ZjM0MmQ4NTItY2FkMi00MjY3LTljOGEtNTc0ZmIyY2E4N2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocDLMbo4puAIm9KqyrykEdYGBBwxBsEdktHY y98pEuhJs5cunQjHVRDMKkYWVfNyJliHDZ8npWRcfqSw83iGElpD3fLLIZpUhfiD EGC9ka3w9PCOK0H/v1f0PW/lbFbv5rFeMYoGk3Bqz6KVyRc6H3yFwsvkMaDRbKzd Sl9QwY/GKPRdxFegHc4MPZ7AfMJoAicCX84W7YlviCpWPWZSZZP47gL6jjDni8Fv Wav8jhpKtv/d/zy0lj48wYZENUbtcEPj989B0cO66UOYIGYAW5wEVVfxIvL6T7Dm gFhBMbQFRI/LAAjRgOB5T+TybfCT0qwMrQRAlGszw0rJ58FE2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6D7Yla/Dd+B0eIsMyB3IPVf1dEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWFmMzZkODQtY2E0OS0z YjEwLWExMmEtMDg0ZTkxMzczNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJn4ndxm+7X/Jb0UUtJdlw9qKb303y/bfIcDSE0jpOrl7CSurWhaIWjm Uq5F2aSThHWSecNYukCstffjWcTdwh8o08+vbmkugeBynyiP0Gd9W1YuDr3mYnq0 hCK3FfsK+D7fMSqsCQO1PcsUunVbjLYei/6Aq6leRHYDqOp6uv+CgScD0hpG6lue 8+kBzWTW8eaj3sxo+991NWu9p7AhS+ILno7lPcUTqV8T9s+YGRd+LMrVnkZ0MmlR Az3X3XWLZ1N7tpvKN+NNxnvm8C0ROWi8qw0voRxymMYyTO6Sd5Z5DYABlOMtOOKk cmKSpq/6FE0l2dw7gbSQmrKLQ1m2us0= -----END CERTIFICATE-----Generated at Mon Jun 30 10:33:42 2025 by rpki-client