$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7989e3c-b727-32b3-a17e-85c7c99d3b60.roa File: a7989e3c-b727-32b3-a17e-85c7c99d3b60.roa (raw, json) Hash identifier: jpjcYJsUSxnyEgXLW+UaIybsvVCI035GBa8TcAh8SZE= Subject key identifier: E8:98:F7:8E:78:DB:F6:01:3D:73:42:15:0A:B6:02:91:10:74:7E:E3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A42758CE54071924B95BBE440 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7989e3c-b727-32b3-a17e-85c7c99d3b60.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 15169 IP address blocks: 192.178.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:8c:e5:40:71:92:4b:95:bb:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=3d8bf8e7-e260-4058-95cb-e0f56088f3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:18:02:29:81:e7:76:ac:da:ab:29:c2:0b:1c: a4:dd:10:2c:b1:0f:20:4d:f4:a6:5c:c1:1d:ec:49: 8f:8b:38:64:ed:a9:26:6c:9d:fb:0e:a6:30:13:d8: 6c:76:39:97:7d:92:8b:fd:c2:9e:d6:43:8b:c5:fd: ed:3c:2b:89:1f:31:5d:8c:17:f1:9e:65:47:3b:05: 20:65:30:6e:08:85:61:aa:82:84:1d:a3:3b:be:3b: e2:81:dd:be:69:33:94:21:91:74:6f:16:35:08:23: 37:9a:55:29:bb:84:58:54:c7:ce:96:f8:d6:c6:e0: 20:da:cc:1c:fb:a6:8e:51:0f:d3:65:f9:4f:12:fd: c8:d9:e2:a3:ea:44:2f:b4:83:46:be:41:27:57:6d: 1b:5e:03:b7:52:5b:96:c0:46:4e:c9:50:5f:af:0d: b3:68:f1:8e:02:7c:1d:a7:a6:3d:45:f2:9d:bb:1e: 1f:64:f0:40:8a:5f:3b:e0:7e:ae:a5:1c:26:91:73: 9a:f8:20:30:4d:f1:9c:02:70:70:1a:72:bd:b4:3a: 95:c7:81:9e:05:fb:28:b7:46:42:e1:5c:3d:cf:76: e6:6f:d0:f3:0e:cc:4d:97:44:2c:f6:08:3c:83:dc: a0:09:78:1d:d2:ce:11:06:88:0c:e3:3f:23:fd:b5: df:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:98:F7:8E:78:DB:F6:01:3D:73:42:15:0A:B6:02:91:10:74:7E:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7989e3c-b727-32b3-a17e-85c7c99d3b60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:27:98:5f:ae:a3:02:3d:da:22:f1:21:a2:61:b3:4c:e6:d0: 32:1a:cc:58:ed:57:2d:9e:09:f8:67:7d:8b:18:10:da:bf:06: b2:04:e2:9e:1e:c6:fd:11:9e:56:08:d3:e6:29:ef:ca:bb:75: 3e:ab:31:07:7b:98:a9:92:16:87:6a:cf:b1:43:b1:28:83:96: c2:3b:65:bd:c4:4b:10:a4:7d:03:31:92:9c:ce:17:13:1f:03: 56:99:71:75:c0:81:47:74:1b:5f:24:3e:49:0b:4f:36:f3:6b: 7e:77:d8:c6:cb:e5:61:0c:d7:eb:3f:a6:a2:71:b5:f1:a1:d6: 5d:f5:25:d0:42:69:7d:8d:ba:f4:48:ec:3c:65:cc:76:26:d4: b9:33:25:6b:0f:28:02:09:da:05:f5:d7:62:fe:9b:f5:78:94: e2:fd:2e:7f:5f:e4:fb:d2:f2:59:a8:54:32:53:c8:9a:6e:81: 68:a2:4f:3b:1f:6a:95:cd:e1:c9:c8:a7:12:6b:6e:b2:92:d7: ee:97:42:73:af:d8:66:b7:68:bf:3a:2e:18:36:cf:7f:4d:e8: b5:96:8c:89:61:47:41:a9:78:93:c5:61:96:12:7d:9e:1d:0b: 7b:f8:82:60:db:b0:79:f3:02:31:1d:42:53:44:8f:89:d3:35: a2:d6:28:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYzlQHGSS5W75EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk M2Q4YmY4ZTctZTI2MC00MDU4LTk1Y2ItZTBmNTYwODhmM2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhgCKYHndqzaqynCCxyk3RAssQ8gTfSmXMEd 7EmPizhk7akmbJ37DqYwE9hsdjmXfZKL/cKe1kOLxf3tPCuJHzFdjBfxnmVHOwUg ZTBuCIVhqoKEHaM7vjvigd2+aTOUIZF0bxY1CCM3mlUpu4RYVMfOlvjWxuAg2swc +6aOUQ/TZflPEv3I2eKj6kQvtINGvkEnV20bXgO3UluWwEZOyVBfrw2zaPGOAnwd p6Y9RfKdux4fZPBAil874H6upRwmkXOa+CAwTfGcAnBwGnK9tDqVx4GeBfsot0ZC 4Vw9z3bmb9DzDsxNl0Qs9gg8g9ygCXgd0s4RBogM4z8j/bXfsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiY94542/YBPXNCFQq2ApEQdH7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTc5ODllM2MtYjcyNy0z MmIzLWExN2UtODVjN2M5OWQzYjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMnmF+uowI92iLxIaJhs0zm0DIazFjtVy2eCfhnfYsYENq/BrIE4p4e xv0RnlYI0+Yp78q7dT6rMQd7mKmSFodqz7FDsSiDlsI7Zb3ESxCkfQMxkpzOFxMf A1aZcXXAgUd0G18kPkkLTzbza3532MbL5WEM1+s/pqJxtfGh1l31JdBCaX2NuvRI 7DxlzHYm1LkzJWsPKAIJ2gX112L+m/V4lOL9Ln9f5PvS8lmoVDJTyJpugWiiTzsf apXN4cnIpxJrbrKS1+6XQnOv2Ga3aL86Lhg2z39N6LWWjIlhR0GpeJPFYZYSfZ4d C3v4gmDbsHnzAjEdQlNEj4nTNaLWKNU= -----END CERTIFICATE-----Generated at Mon Jun 30 03:55:56 2025 by rpki-client