$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8a28810-00a3-3777-9ee5-fcb9b672c4d3.roa File: b8a28810-00a3-3777-9ee5-fcb9b672c4d3.roa (raw, json) Hash identifier: u6uqu02HQ63pJPjAH32fZnma5I3DU2sYc/qDG+rufGA= Subject key identifier: E7:29:21:9C:E0:A9:9F:1E:29:95:00:BC:8C:EF:55:86:70:B8:0F:00 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A4275919FC4B0D400B9BA9280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8a28810-00a3-3777-9ee5-fcb9b672c4d3.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 15169 IP address blocks: 192.178.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:91:9f:c4:b0:d4:00:b9:ba:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=7a6e13f6-a053-4aa6-8dc9-8c65af831b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3f:96:1a:7d:28:72:69:1f:75:a4:e8:32:b0: 69:06:44:06:ba:d3:3b:7c:eb:24:7a:9a:63:a2:19: 57:d5:94:a1:ae:08:cf:ae:b5:1c:6d:dd:75:5e:bd: 9b:d4:cd:90:ee:f3:56:9d:33:c7:d8:49:54:e9:7f: 62:20:7d:49:24:94:c8:cd:bf:b8:6a:8a:e1:85:5e: 55:ee:8a:b0:69:4e:14:f3:aa:bf:12:09:05:0b:84: d7:e6:ac:c5:c9:10:50:8c:b9:70:e9:23:8a:b2:0d: 79:55:d5:22:19:b8:6b:a4:14:93:8a:52:3c:d1:78: 88:23:14:28:54:c8:ab:9d:a8:70:f1:ae:21:22:28: a7:de:41:85:82:4a:a1:fe:e3:06:a1:74:89:01:1c: 6f:4d:50:df:e7:38:ad:c1:0f:c2:26:2e:5f:7a:a1: ac:1a:86:56:52:08:cb:e1:0b:a8:62:0c:39:9d:0a: 46:3d:ad:f9:ff:fb:1e:fa:12:31:0f:e3:b8:6f:99: 63:10:d0:98:cd:f9:fb:f2:e4:a4:4a:c5:e8:78:e7: 26:ff:97:1d:23:a1:95:ba:be:06:d4:77:fb:a3:43: fc:19:31:67:10:aa:74:32:58:2d:1d:9c:00:b4:0c: 6b:6f:9b:03:e8:47:05:72:c0:99:36:7c:88:00:c0: 12:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:29:21:9C:E0:A9:9F:1E:29:95:00:BC:8C:EF:55:86:70:B8:0F:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8a28810-00a3-3777-9ee5-fcb9b672c4d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:2b:9d:77:d3:9c:e5:72:9f:a8:1e:b4:d8:b4:41:e6:c9:44: 5f:d3:af:7a:db:28:b2:a7:d1:61:65:ca:16:38:d6:c6:a2:0c: b8:1f:70:31:e6:92:bd:7b:d9:a7:14:19:85:11:fe:e9:03:df: ec:8c:99:cb:7d:76:9d:49:dc:87:d8:77:94:79:2f:54:ae:bf: 1c:ff:b4:ae:20:dc:25:a6:df:73:9c:4a:4d:2e:ab:aa:9e:28: 36:c7:db:35:01:99:49:89:e3:7d:b9:19:2f:b3:8b:39:f6:94: 1e:b8:fa:5a:4f:3e:74:94:9f:ea:61:6d:3d:ff:87:be:ea:d2: e0:cc:d7:9b:53:0d:62:fe:8f:15:32:f9:66:1a:db:01:b1:c4: 9d:df:d0:42:9b:c1:e3:26:ce:f2:7b:44:e4:17:c4:df:db:1d: b7:2d:97:d0:05:63:18:b4:36:4a:c5:c9:ad:26:05:68:ef:31: 41:dc:6d:42:5c:d7:4a:b6:70:e4:58:f1:8c:81:4f:e6:d3:09: da:75:c6:bf:f6:7a:95:1e:8f:34:79:f0:76:db:49:9a:80:c4: 1f:0f:39:e5:89:85:83:4f:b2:0f:2c:79:b1:cf:8b:01:fd:ce: 33:e9:21:2f:bd:76:77:56:62:46:50:76:b8:22:a7:ad:a0:38: 13:be:7f:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdZGfxLDUALm6koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk N2E2ZTEzZjYtYTA1My00YWE2LThkYzktOGM2NWFmODMxYjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz+WGn0ocmkfdaToMrBpBkQGutM7fOskeppj ohlX1ZShrgjPrrUcbd11Xr2b1M2Q7vNWnTPH2ElU6X9iIH1JJJTIzb+4aorhhV5V 7oqwaU4U86q/EgkFC4TX5qzFyRBQjLlw6SOKsg15VdUiGbhrpBSTilI80XiIIxQo VMirnahw8a4hIiin3kGFgkqh/uMGoXSJARxvTVDf5zitwQ/CJi5feqGsGoZWUgjL 4QuoYgw5nQpGPa35//se+hIxD+O4b5ljENCYzfn78uSkSsXoeOcm/5cdI6GVur4G 1Hf7o0P8GTFnEKp0MlgtHZwAtAxrb5sD6EcFcsCZNnyIAMASeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcpIZzgqZ8eKZUAvIzvVYZwuA8AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjhhMjg4MTAtMDBhMy0z Nzc3LTllZTUtZmNiOWI2NzJjNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkrnXfTnOVyn6getNi0QebJRF/Tr3rbKLKn0WFlyhY41saiDLgfcDHm kr172acUGYUR/ukD3+yMmct9dp1J3IfYd5R5L1Suvxz/tK4g3CWm33OcSk0uq6qe KDbH2zUBmUmJ4325GS+zizn2lB64+lpPPnSUn+phbT3/h77q0uDM15tTDWL+jxUy +WYa2wGxxJ3f0EKbweMmzvJ7ROQXxN/bHbctl9AFYxi0NkrFya0mBWjvMUHcbUJc 10q2cORY8YyBT+bTCdp1xr/2epUejzR58HbbSZqAxB8POeWJhYNPsg8sebHPiwH9 zjPpIS+9dndWYkZQdrgip62gOBO+f6k= -----END CERTIFICATE-----Generated at Mon Jun 30 11:02:56 2025 by rpki-client