$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c617d4d0-3bce-3aea-991a-8137e06ec0a3.roa File: c617d4d0-3bce-3aea-991a-8137e06ec0a3.roa (raw, json) Hash identifier: lgCb/tbDdGmqzhhEtt3T+4RdoR3NwPb5+u19362Sghw= Subject key identifier: 2E:24:FB:DB:E0:1B:3B:E2:AD:66:16:B4:2F:41:65:DE:57:A0:E2:21 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A42758FDF76A0BFBBEFB9AD00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c617d4d0-3bce-3aea-991a-8137e06ec0a3.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 15169 IP address blocks: 192.178.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:8f:df:76:a0:bf:bb:ef:b9:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=b238daf6-18fe-49b0-9e6f-1f3146de3dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6a:37:20:04:c6:45:a8:0e:6a:df:de:1d:bc: 02:0d:a3:9b:3f:b0:45:26:85:a3:e5:b1:8b:88:03: 1b:7e:e9:96:24:48:be:c0:cf:42:21:b4:60:ff:30: cc:79:16:4b:e1:7f:72:05:79:f4:b2:c1:78:2e:02: 65:0d:15:dd:37:e0:d9:f7:ef:23:68:23:b3:f1:81: 8c:ed:83:ee:0e:c5:91:44:e2:af:9c:f4:74:cc:15: bf:61:e6:bb:0d:9b:0f:c1:f0:ae:03:d3:49:ae:d4: 76:70:63:8f:ca:fc:cd:1e:06:c1:4e:83:e8:d7:7e: c0:92:19:14:1b:cf:58:4b:95:f3:53:43:e6:4e:40: 37:7e:3f:21:d6:00:34:44:45:11:68:23:39:65:b9: 22:c9:3a:93:9b:88:5b:b2:1e:a4:b8:5c:82:bd:fe: df:cf:b3:fc:c0:43:04:e9:3a:af:b9:11:af:dd:69: 50:ed:05:88:a5:74:d9:75:97:fd:b5:0f:e2:ef:bb: fe:6e:11:f9:5b:33:49:41:f4:97:f7:f7:5c:f0:a7: bf:58:cc:e2:71:fb:09:d9:bc:ec:2e:2a:f2:a6:d3: 7a:78:d9:bd:01:3f:7d:1a:91:85:b3:51:7d:f2:94: 12:15:03:2a:fd:c2:2c:26:a0:0f:4a:00:05:92:fd: cb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:24:FB:DB:E0:1B:3B:E2:AD:66:16:B4:2F:41:65:DE:57:A0:E2:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c617d4d0-3bce-3aea-991a-8137e06ec0a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7d:17:a0:5d:00:ff:18:a9:0b:44:9a:1e:45:16:d9:dd:2d: e4:2b:7f:5b:1f:7e:7d:db:ff:ea:ed:e0:c6:bf:26:a5:ff:76: b6:ca:8f:2d:ce:a7:dd:93:ee:22:fa:2a:5c:df:41:e3:b6:25: e1:53:51:78:6b:f2:11:83:38:7e:9f:51:f7:02:dd:52:81:09: a9:f7:fa:72:90:37:f9:aa:96:91:d9:7b:f6:81:b7:3b:35:5c: ac:44:8a:e4:4f:21:aa:8a:69:29:9c:06:62:38:62:8a:6c:9b: 92:d4:34:72:93:e8:9c:4a:38:ba:be:9a:c6:38:51:75:05:ba: 46:cf:c0:92:79:9f:38:b5:8b:c2:51:75:68:2c:5a:5e:51:d0: 32:01:cb:2f:d0:1f:bf:cc:4d:3f:9b:d3:d1:20:46:0b:7e:61: bc:0b:54:9b:2e:20:6f:c6:17:fe:38:08:ab:c0:98:ab:75:00: de:6a:98:12:16:1f:8e:a0:2d:ea:31:a4:7c:49:e9:41:62:d2: 31:80:77:c0:ff:62:5c:54:52:09:84:17:be:c0:a6:ed:19:f3: 47:f3:31:59:1b:00:63:9d:da:a8:a5:5b:e5:39:36:b9:5d:4f: ec:03:6d:0d:22:d8:f1:fc:75:50:00:7e:db:90:77:7d:ed:63: 02:59:c4:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdY/fdqC/u++5rQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk YjIzOGRhZjYtMThmZS00OWIwLTllNmYtMWYzMTQ2ZGUzZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWo3IATGRagOat/eHbwCDaObP7BFJoWj5bGL iAMbfumWJEi+wM9CIbRg/zDMeRZL4X9yBXn0ssF4LgJlDRXdN+DZ9+8jaCOz8YGM 7YPuDsWRROKvnPR0zBW/Yea7DZsPwfCuA9NJrtR2cGOPyvzNHgbBToPo137AkhkU G89YS5XzU0PmTkA3fj8h1gA0REURaCM5ZbkiyTqTm4hbsh6kuFyCvf7fz7P8wEME 6TqvuRGv3WlQ7QWIpXTZdZf9tQ/i77v+bhH5WzNJQfSX9/dc8Ke/WMzicfsJ2bzs LiryptN6eNm9AT99GpGFs1F98pQSFQMq/cIsJqAPSgAFkv3LyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4k+9vgGzvirWYWtC9BZd5XoOIhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzYxN2Q0ZDAtM2JjZS0z YWVhLTk5MWEtODEzN2UwNmVjMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAl9F6BdAP8YqQtEmh5FFtndLeQrf1sffn3b/+rt4Ma/JqX/drbKjy3O p92T7iL6KlzfQeO2JeFTUXhr8hGDOH6fUfcC3VKBCan3+nKQN/mqlpHZe/aBtzs1 XKxEiuRPIaqKaSmcBmI4Yopsm5LUNHKT6JxKOLq+msY4UXUFukbPwJJ5nzi1i8JR dWgsWl5R0DIByy/QH7/MTT+b09EgRgt+YbwLVJsuIG/GF/44CKvAmKt1AN5qmBIW H46gLeoxpHxJ6UFi0jGAd8D/YlxUUgmEF77Apu0Z80fzMVkbAGOd2qilW+U5Nrld T+wDbQ0i2PH8dVAAftuQd33tYwJZxMc= -----END CERTIFICATE-----Generated at Mon Jun 30 10:48:11 2025 by rpki-client