$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2aaffdd-9e59-3b29-b45a-19a78fa36ea9.roa File: b2aaffdd-9e59-3b29-b45a-19a78fa36ea9.roa (raw, json) Hash identifier: 8UjZ5bZi/s+ROrJcYeLjOGztKTSY32Qw6F6EylTKjXs= Subject key identifier: 9A:FB:04:04:B8:D5:29:28:CB:DD:AD:3E:95:40:6F:E3:A1:3D:03:1A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A51D07F6F45613ECEEE717010 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2aaffdd-9e59-3b29-b45a-19a78fa36ea9.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 15169 IP address blocks: 192.178.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:7f:6f:45:61:3e:ce:ee:71:70:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=221b76f7-d1a7-446e-953b-5bb163efa429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a3:db:7a:3e:b3:56:32:0b:ca:a6:be:d1:65: 41:42:e4:53:fb:d5:2b:21:1d:2a:97:78:c2:45:53: d6:83:2b:a8:20:7b:fe:d8:4b:5e:24:65:ba:37:77: 81:3c:57:ec:d0:9a:8e:26:7c:31:40:ab:a7:bb:ae: 6b:73:5e:86:f9:34:76:b5:fe:91:4e:db:02:44:42: c9:57:91:f1:04:c9:a4:7d:62:9a:fc:c6:b2:6a:61: 8c:4d:04:1f:6c:55:6c:02:73:f1:2c:38:85:5e:92: c8:8e:e2:7f:19:71:1e:68:d3:2a:c9:bd:0a:6c:83: 0a:6c:e6:dc:c1:1b:77:4e:b8:f9:16:3f:97:91:3f: e7:02:0d:65:2e:a9:78:da:2e:35:8f:09:33:c8:22: 8c:8e:13:1a:0e:e1:46:01:17:0f:95:c2:ff:3e:e1: f3:94:a0:5a:dc:dd:a2:8c:45:ba:a4:f0:0f:e3:d4: e6:17:e3:79:56:8d:31:1e:45:d5:62:3c:54:22:ba: 70:8f:b5:95:4d:a9:3e:d0:fb:6e:84:ab:d1:b9:c4: 59:eb:25:15:78:25:7d:e3:20:63:2c:6a:dd:2f:1c: 57:da:ce:71:e7:16:a3:86:83:9b:ec:37:2a:bf:fd: cb:91:82:63:ed:05:66:4c:ff:13:30:95:ba:c8:27: 49:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FB:04:04:B8:D5:29:28:CB:DD:AD:3E:95:40:6F:E3:A1:3D:03:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2aaffdd-9e59-3b29-b45a-19a78fa36ea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:ae:61:f5:20:b7:53:85:05:3f:5f:1a:b5:38:af:0f:fc:bf: 0c:9e:73:96:77:d1:87:9c:ee:14:f8:b4:5f:0c:ec:a5:bd:de: fd:97:8b:c3:8d:fc:99:7e:c9:18:14:76:31:d5:96:53:e2:d7: 0d:11:51:87:1b:38:b3:c1:26:d1:10:21:d6:06:af:c7:65:68: 3b:aa:be:e8:a9:5b:20:be:b9:95:67:87:76:ac:ee:b1:de:12: 29:c9:72:f8:a9:a7:38:84:a5:59:f9:d9:d7:1d:33:69:38:f3: 0f:87:67:32:a9:d4:df:86:0d:cb:84:38:b2:77:ef:2f:24:37: bf:02:e4:01:dc:48:87:4d:2e:6d:ed:8d:c3:7d:70:16:48:57: d8:e2:d3:0b:d9:af:1a:dc:84:6d:8b:e0:b8:4c:95:f3:21:56: cf:12:85:dd:89:2d:86:ad:77:7e:ef:65:bc:41:29:00:7d:3a: 7a:50:28:c8:62:a3:23:8a:8d:95:e6:2d:10:98:f0:c5:3e:5c: 03:54:8d:64:8f:8d:4a:a6:d3:e7:52:38:31:dc:83:de:ed:96: 59:e0:c9:c0:00:51:a2:ce:c3:3d:1e:be:af:ac:48:17:40:df: b9:69:72:d5:8e:9f:ac:1d:6d:ac:76:ab:a6:00:1f:1c:5b:7f: da:89:13:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0H9vRWE+zu5xcBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk MjIxYjc2ZjctZDFhNy00NDZlLTk1M2ItNWJiMTYzZWZhNDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKPbej6zVjILyqa+0WVBQuRT+9UrIR0ql3jC RVPWgyuoIHv+2EteJGW6N3eBPFfs0JqOJnwxQKunu65rc16G+TR2tf6RTtsCRELJ V5HxBMmkfWKa/MayamGMTQQfbFVsAnPxLDiFXpLIjuJ/GXEeaNMqyb0KbIMKbObc wRt3Trj5Fj+XkT/nAg1lLql42i41jwkzyCKMjhMaDuFGARcPlcL/PuHzlKBa3N2i jEW6pPAP49TmF+N5Vo0xHkXVYjxUIrpwj7WVTak+0PtuhKvRucRZ6yUVeCV94yBj LGrdLxxX2s5x5xajhoOb7Dcqv/3LkYJj7QVmTP8TMJW6yCdJ+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJr7BAS41Skoy92tPpVAb+OhPQMaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjJhYWZmZGQtOWU1OS0z YjI5LWI0NWEtMTlhNzhmYTM2ZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWuYfUgt1OFBT9fGrU4rw/8vwyec5Z30Yec7hT4tF8M7KW93v2Xi8ON /Jl+yRgUdjHVllPi1w0RUYcbOLPBJtEQIdYGr8dlaDuqvuipWyC+uZVnh3as7rHe EinJcvippziEpVn52dcdM2k48w+HZzKp1N+GDcuEOLJ37y8kN78C5AHcSIdNLm3t jcN9cBZIV9ji0wvZrxrchG2L4LhMlfMhVs8Shd2JLYatd37vZbxBKQB9OnpQKMhi oyOKjZXmLRCY8MU+XANUjWSPjUqm0+dSODHcg97tllngycAAUaLOwz0evq+sSBdA 37lpctWOn6wdbax2q6YAHxxbf9qJE2k= -----END CERTIFICATE-----Generated at Mon Jun 30 07:22:01 2025 by rpki-client