$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce7ac34e-e3a0-3c59-8b46-29b5067f7601.roa File: ce7ac34e-e3a0-3c59-8b46-29b5067f7601.roa (raw, json) Hash identifier: Z2Iw0DU9GnhNT3U2+mfIo1jq0pUYv1+RRCdGl30XKa8= Subject key identifier: 1E:BF:E1:19:8C:28:CF:22:E3:28:73:D0:FC:B1:13:03:95:92:60:24 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A427591D11A12AED15E2A6080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce7ac34e-e3a0-3c59-8b46-29b5067f7601.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 15169 IP address blocks: 192.178.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:91:d1:1a:12:ae:d1:5e:2a:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=bfd09428-39e9-414c-8128-f40631b7ee8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b2:9d:34:51:dc:ed:4c:e3:d2:da:0f:44:34: 1d:c1:12:21:27:d4:4a:54:55:5e:69:92:99:ea:f4: c4:f1:62:ee:14:2c:0d:b6:10:2b:b4:33:da:33:0c: b8:66:70:88:d7:5a:62:af:0d:b4:f0:c7:42:d0:a4: f7:c8:f6:8a:14:5c:8c:34:ad:5e:a4:61:ff:f0:eb: ce:95:7d:47:e2:f9:88:e5:eb:cc:c2:fc:84:ec:ac: fc:df:22:db:bf:40:5d:23:84:ab:a5:c0:ed:94:6f: 81:36:ed:97:fd:bc:cd:13:fa:aa:dd:b9:ba:b1:42: c3:e1:ca:aa:a8:9a:98:50:0b:2b:2e:3a:f9:c4:8a: 77:3a:c0:9a:6d:d6:f0:bd:d4:79:aa:61:bf:a4:c5: 5c:1f:b9:cd:16:94:cd:26:4f:12:21:a4:ac:bf:ef: 33:66:f8:03:e3:ae:c2:f4:9d:3c:9a:7b:a6:e2:0a: 30:aa:cc:44:88:78:bb:e3:75:06:cc:d2:08:41:da: 5a:6c:cc:fb:be:e1:82:72:1b:3a:1d:33:3e:fc:ac: cc:e7:7e:c4:59:21:8b:93:67:e6:16:f0:81:e3:28: a4:7d:4d:9b:0a:c0:27:8c:09:6d:80:cb:b8:20:71: fa:46:e7:e1:cb:3f:4c:e2:82:00:eb:00:b4:ed:21: 0c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BF:E1:19:8C:28:CF:22:E3:28:73:D0:FC:B1:13:03:95:92:60:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce7ac34e-e3a0-3c59-8b46-29b5067f7601.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:bc:f0:23:23:2a:28:0b:6b:eb:d5:57:e8:6d:5e:f7:d9:1c: 2a:6c:77:e6:d9:a2:a3:20:4e:51:b0:12:ec:9d:6d:31:6a:a3: dc:55:3e:60:4d:94:bd:75:fb:a7:41:2a:55:66:db:cf:5b:3f: 9a:fb:33:13:4a:16:a2:59:78:b7:c8:fc:d4:ff:1a:fb:b9:f1: 54:d6:65:e3:42:d5:ec:a4:7e:78:e2:55:dc:8e:05:0b:7f:52: 40:96:c2:39:d3:91:e7:35:fe:15:7a:9c:c5:34:9b:e3:f8:e2: 32:d1:82:1c:8a:07:d7:03:e3:60:e5:a6:6e:83:55:f8:63:32: 4e:4b:01:ee:80:a9:b0:2f:ad:9a:b7:72:56:bd:8e:04:da:cb: cb:8b:bf:aa:3b:8f:f3:ab:4b:14:78:3c:d8:a9:6e:6a:34:ea: 74:c2:4b:3d:99:12:ba:8d:fd:9b:67:7f:6d:71:5a:9d:d2:0a: 68:97:46:e7:2f:93:0e:99:72:78:2d:52:6d:ee:86:25:87:f5: 18:19:e7:3f:bb:e5:b8:60:d0:7c:1a:9c:ad:67:0c:a5:68:3e: d6:99:a5:75:40:7e:45:46:1d:ca:37:21:84:e1:b5:86:3e:77: f6:22:a9:ea:03:69:d3:a4:fa:6d:a3:e0:c2:78:43:f2:10:f5: d0:c8:92:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdZHRGhKu0V4qYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk YmZkMDk0MjgtMzllOS00MTRjLTgxMjgtZjQwNjMxYjdlZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LKdNFHc7Uzj0toPRDQdwRIhJ9RKVFVeaZKZ 6vTE8WLuFCwNthArtDPaMwy4ZnCI11pirw208MdC0KT3yPaKFFyMNK1epGH/8OvO lX1H4vmI5evMwvyE7Kz83yLbv0BdI4SrpcDtlG+BNu2X/bzNE/qq3bm6sULD4cqq qJqYUAsrLjr5xIp3OsCabdbwvdR5qmG/pMVcH7nNFpTNJk8SIaSsv+8zZvgD467C 9J08mnum4gowqsxEiHi743UGzNIIQdpabMz7vuGCchs6HTM+/KzM537EWSGLk2fm FvCB4yikfU2bCsAnjAltgMu4IHH6Rufhyz9M4oIA6wC07SEMFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6/4RmMKM8i4yhz0PyxEwOVkmAkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2U3YWMzNGUtZTNhMC0z YzU5LThiNDYtMjliNTA2N2Y3NjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACy88CMjKigLa+vVV+htXvfZHCpsd+bZoqMgTlGwEuydbTFqo9xVPmBN lL11+6dBKlVm289bP5r7MxNKFqJZeLfI/NT/Gvu58VTWZeNC1eykfnjiVdyOBQt/ UkCWwjnTkec1/hV6nMU0m+P44jLRghyKB9cD42Dlpm6DVfhjMk5LAe6AqbAvrZq3 cla9jgTay8uLv6o7j/OrSxR4PNipbmo06nTCSz2ZErqN/Ztnf21xWp3SCmiXRucv kw6ZcngtUm3uhiWH9RgZ5z+75bhg0HwanK1nDKVoPtaZpXVAfkVGHco3IYThtYY+ d/YiqeoDadOk+m2j4MJ4Q/IQ9dDIkmM= -----END CERTIFICATE-----Generated at Mon Jun 30 10:38:56 2025 by rpki-client