$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa File: c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa (raw, json) Hash identifier: ARaJ33TReeAnIc6MEDEaiqcM3O7pqOVZ87o9ZUygiGM= Subject key identifier: 8C:FA:C7:AF:81:B1:EC:89:CB:6F:5E:CA:C1:EA:AE:9B:8E:30:21:45 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A42759382C80842098430E040 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 15169 IP address blocks: 192.178.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:93:82:c8:08:42:09:84:30:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=a4ac45d4-4d7e-4a31-83f7-fd4c2531f923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:66:43:00:f6:90:b8:9d:7b:fa:2d:9e:88:38: 30:78:be:b3:e2:6a:6d:18:05:17:e3:06:bb:8c:7c: b9:28:a6:3c:96:82:59:a2:73:c2:3f:16:ea:09:99: e0:c5:a8:c2:53:db:4a:bb:20:a1:32:ef:65:78:9d: 55:0c:8f:0c:59:00:42:bd:d6:5b:49:32:e6:e7:06: 60:58:17:f1:52:e4:78:96:da:34:82:ee:7e:f5:28: 58:de:3d:9e:db:9d:55:80:53:ec:9f:b8:35:70:69: d5:47:5c:be:3c:fa:25:c3:f5:94:77:15:3a:90:d6: 56:1a:7d:50:01:c5:0c:ba:58:16:27:fb:b7:2e:dd: e3:7d:b4:1d:24:0e:b1:15:75:d4:ef:74:fb:9b:c1: 8a:8a:78:3f:8c:97:72:4e:73:2f:76:4c:50:58:87: 37:64:46:ef:a2:26:8b:cb:aa:57:01:a0:10:8a:60: 7e:22:d6:3f:c3:bb:6a:2f:3c:f2:18:17:22:de:4f: 45:56:db:b3:6e:ec:73:1c:fb:40:37:31:7e:52:91: 2c:f0:c1:d5:da:4a:1f:5c:c3:ac:c0:8c:37:d0:20: f4:a5:31:c1:bf:3a:9a:28:32:65:bb:68:6e:9e:71: d2:61:11:21:f3:2f:ba:04:5a:e3:3b:38:35:21:8f: 5b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FA:C7:AF:81:B1:EC:89:CB:6F:5E:CA:C1:EA:AE:9B:8E:30:21:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:93:f1:c1:53:e8:c8:42:8b:6f:1f:ea:b3:19:0f:0f:bc:bf: 1d:a8:1f:d7:47:82:c3:00:8b:bc:82:97:8b:33:20:f0:10:c9: 9d:3c:93:d9:92:ba:2a:f1:74:46:72:1b:35:ae:db:32:4c:95: a8:03:72:84:1a:5f:94:50:97:85:d4:42:a3:1c:e6:03:3a:f4: 3b:99:9e:95:a3:30:7a:9a:4f:07:9e:e4:be:71:41:85:a1:3d: a1:36:67:81:30:e1:77:e6:76:8d:63:b6:d7:29:f5:64:a0:d1: 26:df:55:12:a8:e2:1a:59:3c:85:59:74:4c:57:af:5c:4b:cc: 15:f7:f7:13:b7:13:82:00:e9:05:d0:0b:b7:0d:06:76:91:c8: be:f7:99:f8:08:b8:09:83:92:a1:7a:53:ec:99:21:99:1b:8b: ab:0c:e2:98:6e:71:bf:fd:bc:3c:ae:d8:e9:35:fc:86:f3:97: cc:82:96:a3:75:e6:a1:79:25:0c:34:21:a1:5b:c4:1f:33:80: 12:90:c8:b5:24:df:28:e2:ba:da:0a:98:0b:53:1c:c6:21:56: b6:c8:95:29:88:20:2b:65:93:50:ea:43:71:34:12:36:37:dd: 0c:42:48:50:10:d8:88:73:8d:59:b2:49:d8:33:f4:17:e1:c5: 0f:48:f3:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdZOCyAhCCYQw4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk YTRhYzQ1ZDQtNGQ3ZS00YTMxLTgzZjctZmQ0YzI1MzFmOTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWZDAPaQuJ17+i2eiDgweL6z4mptGAUX4wa7 jHy5KKY8loJZonPCPxbqCZngxajCU9tKuyChMu9leJ1VDI8MWQBCvdZbSTLm5wZg WBfxUuR4lto0gu5+9ShY3j2e251VgFPsn7g1cGnVR1y+PPolw/WUdxU6kNZWGn1Q AcUMulgWJ/u3Lt3jfbQdJA6xFXXU73T7m8GKing/jJdyTnMvdkxQWIc3ZEbvoiaL y6pXAaAQimB+ItY/w7tqLzzyGBci3k9FVtuzbuxzHPtANzF+UpEs8MHV2kofXMOs wIw30CD0pTHBvzqaKDJlu2hunnHSYREh8y+6BFrjOzg1IY9bvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIz6x6+BseyJy29eysHqrpuOMCFFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzdiOTkxMmQtMmNkNi0z OTc0LWE4MDUtMWUwNTI1YTFhMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaT8cFT6MhCi28f6rMZDw+8vx2oH9dHgsMAi7yCl4szIPAQyZ08k9mS uirxdEZyGzWu2zJMlagDcoQaX5RQl4XUQqMc5gM69DuZnpWjMHqaTwee5L5xQYWh PaE2Z4Ew4Xfmdo1jttcp9WSg0SbfVRKo4hpZPIVZdExXr1xLzBX39xO3E4IA6QXQ C7cNBnaRyL73mfgIuAmDkqF6U+yZIZkbi6sM4phucb/9vDyu2Ok1/Ibzl8yClqN1 5qF5JQw0IaFbxB8zgBKQyLUk3yjiutoKmAtTHMYhVrbIlSmIICtlk1DqQ3E0EjY3 3QxCSFAQ2IhzjVmySdgz9BfhxQ9I86U= -----END CERTIFICATE-----Generated at Mon Jun 30 04:07:32 2025 by rpki-client