$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7b7be0e-4b13-347a-87f9-6e790f01689d.roa File: a7b7be0e-4b13-347a-87f9-6e790f01689d.roa (raw, json) Hash identifier: nWEHt6kR0q2tEkHYTDbYfCAkebSIfL1osYV1fQ7h6Ao= Subject key identifier: 19:9B:F6:62:33:CB:14:E0:72:C9:64:C3:F8:F5:DD:76:6C:32:C2:20 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A427590E65C7D324C23809600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7b7be0e-4b13-347a-87f9-6e790f01689d.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 15169 IP address blocks: 192.178.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:90:e6:5c:7d:32:4c:23:80:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=e3f1c3d3-cc2d-4912-8821-452270e1a34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d1:81:24:0d:2c:fe:55:8b:32:0a:8d:46:49: e5:d0:d3:5e:7c:6a:80:d9:3b:49:bf:34:b4:6b:e1: 03:7e:46:58:f6:61:90:ac:c4:30:58:8b:17:4a:6d: 6a:d0:05:c1:9c:67:2d:61:77:ac:6d:c3:61:60:63: 0c:92:0f:0f:11:04:f1:19:0c:75:9e:8b:48:89:66: ab:de:2b:ec:99:f3:e3:41:3b:88:c1:c5:4c:39:59: ed:e7:1d:33:68:ac:6c:d4:18:dc:1f:f8:bb:36:06: 71:6e:a7:1e:85:b9:57:14:c3:58:62:80:e9:2f:7d: fa:d7:b7:56:09:53:26:f6:1e:80:a3:17:6e:6c:9d: 6f:1f:b9:48:7a:9a:26:87:ec:c9:6c:63:8b:31:ed: 89:f4:d4:95:34:c5:f1:0b:f7:57:a2:dd:a4:d3:57: 3f:fb:71:2e:32:79:29:2b:ca:32:6d:6b:8c:83:09: 6a:10:70:99:36:48:0d:db:55:28:12:44:30:c7:0e: 36:67:9b:69:66:3a:4f:32:61:ab:f7:17:a7:d6:d9: 53:79:6c:be:5c:cc:6e:bc:c9:29:2c:53:52:c8:33: de:89:12:7c:7b:4a:f9:d5:97:f6:87:b4:f4:96:17: 2b:18:a2:12:87:5d:30:6c:10:a4:ea:fa:ec:b2:a9: f2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9B:F6:62:33:CB:14:E0:72:C9:64:C3:F8:F5:DD:76:6C:32:C2:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7b7be0e-4b13-347a-87f9-6e790f01689d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:7e:d9:94:07:9c:3b:2d:f9:55:ed:22:3a:16:43:2d:97:0c: d9:e8:c5:b7:3f:3e:29:02:54:99:dc:7f:fe:66:01:50:17:cf: dd:a8:9c:96:fe:17:e5:0b:9c:11:ce:1b:5c:1b:16:f2:9e:0b: 7a:5e:b1:8d:a8:22:49:a8:c5:b0:a6:99:31:e2:89:53:95:21: 01:79:5b:45:55:cf:0d:66:54:dc:d8:52:5d:61:06:de:94:ea: 83:b2:b2:23:43:ef:33:19:a9:8e:57:28:cf:b1:ee:dc:60:c7: 8e:aa:8c:b4:f0:fe:6c:7d:fd:3f:54:c1:0a:05:51:3f:00:5a: a3:9a:08:b2:77:11:18:67:d6:39:1b:0e:18:ad:94:74:aa:6c: 84:e5:f7:0c:c9:47:5b:15:dc:ff:ff:52:7c:e8:e0:0f:62:34: 98:4f:9e:ca:47:b0:f6:7a:18:84:6f:ae:c8:66:b4:91:71:62: 73:b0:1e:eb:12:bc:86:ec:d1:b4:5d:33:e2:c1:6f:ef:60:ce: ff:7c:a3:4a:36:45:22:52:ea:55:42:28:41:b2:21:ba:36:19: 04:bd:82:68:10:91:1c:4b:e0:a8:a6:4a:a0:71:d5:65:26:31: 49:1f:b1:5f:89:8c:e8:b4:b1:fd:b8:c9:90:a5:b5:2b:a4:4a: 27:a2:ec:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdZDmXH0yTCOAlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk ZTNmMWMzZDMtY2MyZC00OTEyLTg4MjEtNDUyMjcwZTFhMzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNGBJA0s/lWLMgqNRknl0NNefGqA2TtJvzS0 a+EDfkZY9mGQrMQwWIsXSm1q0AXBnGctYXesbcNhYGMMkg8PEQTxGQx1notIiWar 3ivsmfPjQTuIwcVMOVnt5x0zaKxs1BjcH/i7NgZxbqcehblXFMNYYoDpL33617dW CVMm9h6AoxdubJ1vH7lIepomh+zJbGOLMe2J9NSVNMXxC/dXot2k01c/+3EuMnkp K8oybWuMgwlqEHCZNkgN21UoEkQwxw42Z5tpZjpPMmGr9xen1tlTeWy+XMxuvMkp LFNSyDPeiRJ8e0r51Zf2h7T0lhcrGKISh10wbBCk6vrssqnyEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmb9mIzyxTgcslkw/j13XZsMsIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTdiN2JlMGUtNGIxMy0z NDdhLTg3ZjktNmU3OTBmMDE2ODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFR+2ZQHnDst+VXtIjoWQy2XDNnoxbc/PikCVJncf/5mAVAXz92onJb+ F+ULnBHOG1wbFvKeC3pesY2oIkmoxbCmmTHiiVOVIQF5W0VVzw1mVNzYUl1hBt6U 6oOysiND7zMZqY5XKM+x7txgx46qjLTw/mx9/T9UwQoFUT8AWqOaCLJ3ERhn1jkb DhitlHSqbITl9wzJR1sV3P//Unzo4A9iNJhPnspHsPZ6GIRvrshmtJFxYnOwHusS vIbs0bRdM+LBb+9gzv98o0o2RSJS6lVCKEGyIbo2GQS9gmgQkRxL4KimSqBx1WUm MUkfsV+JjOi0sf24yZCltSukSiei7Fo= -----END CERTIFICATE-----Generated at Mon Jun 30 04:40:09 2025 by rpki-client