$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9dd1dca-95f5-36cf-aa78-4e2150f2b174.roa File: d9dd1dca-95f5-36cf-aa78-4e2150f2b174.roa (raw, json) Hash identifier: zcpwKS9nB+8WwcDzfMrH/n3fiw04R+/6kVTM//C+kOA= Subject key identifier: 89:EB:F1:95:B6:AB:C3:5B:AC:00:F7:EA:32:1E:09:B6:67:2A:82:E2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A427590374C9D4EBFE9F88180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9dd1dca-95f5-36cf-aa78-4e2150f2b174.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 15169 IP address blocks: 192.178.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:90:37:4c:9d:4e:bf:e9:f8:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=dd795403-0112-4c56-a7dd-1fc02050674a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:76:36:f8:d6:82:85:26:63:2b:b6:87:d6:40: ee:ca:36:a2:4e:08:7b:b8:b9:3d:0e:c3:b2:f7:66: 4d:25:ed:97:ad:04:7c:3a:1f:28:ef:06:c4:94:d9: 04:0e:d4:c6:99:ba:44:16:ae:99:0b:c0:be:17:17: 56:16:7d:f2:12:79:d9:e5:70:1c:20:d3:5d:00:5d: 4b:c4:50:8a:39:fd:7d:11:43:db:3c:56:ff:c1:4a: c9:5e:1c:ab:77:ca:94:12:b1:12:c9:09:2a:6e:a8: 44:de:02:b2:c9:a0:e7:0b:d2:ad:e1:99:60:1c:84: 25:2d:9d:57:59:dc:d0:8e:06:bf:aa:c4:ba:4e:f4: 22:fd:d3:a5:76:f9:e7:b5:16:c6:ba:70:aa:99:8c: 0b:30:8d:9a:62:03:7d:16:bd:88:ac:e7:dc:db:f2: 81:5e:76:12:9b:c2:34:39:4f:52:c4:27:c5:03:69: 90:f9:45:3a:57:3c:c9:5c:06:f2:c8:4f:bd:86:ad: a7:a3:d0:e0:70:92:9e:43:03:6a:62:6a:57:ee:25: 79:f2:21:40:ca:e0:a7:48:fa:ac:35:e8:85:9d:94: 5c:5d:30:d0:2e:94:82:a0:2b:5e:dd:62:02:56:7b: 6d:1d:f9:19:cd:2f:40:31:b3:70:23:31:40:f9:7a: 60:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EB:F1:95:B6:AB:C3:5B:AC:00:F7:EA:32:1E:09:B6:67:2A:82:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9dd1dca-95f5-36cf-aa78-4e2150f2b174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d6:f5:13:6b:41:a1:ba:31:57:02:65:8e:32:f4:e0:05:38: 9a:20:9b:dc:0a:f2:71:7e:8d:7c:d8:c7:42:2d:f5:e2:81:f6: cc:75:25:43:8b:09:43:5d:27:ed:5e:ee:7c:1e:38:a6:67:e9: 13:bf:70:48:5e:90:48:29:0b:d4:1b:4c:09:ab:ff:dc:6d:05: 92:79:06:9e:87:db:47:b8:ca:8e:11:08:a9:1d:a3:5a:62:c6: b7:b5:51:e1:a0:ef:d4:d8:41:b1:8b:30:25:3a:53:b2:27:29: 07:a7:7e:4a:e2:cc:ae:7a:a6:05:e9:d7:02:3b:20:5c:66:05: f7:01:a1:07:41:49:dc:1e:31:71:71:fe:5e:cf:20:0e:0f:71: 32:a0:80:4c:db:ab:c2:cd:f5:fc:24:8f:7f:15:b8:a7:13:20: a7:d5:b4:bf:8e:6b:c0:e4:88:b7:97:8f:b7:60:bc:b5:31:00: 35:e4:fc:17:38:ef:63:8b:99:9c:07:b8:c1:b5:6e:b1:3c:4d: 2e:eb:7c:39:5f:b8:91:e2:5b:78:4d:2c:eb:78:af:9d:02:3f: a4:45:9a:8b:1e:a6:65:e9:d1:de:6a:fc:8d:e8:5d:82:71:1c: eb:c2:89:f6:5a:6b:4f:03:f5:c2:d9:9f:57:b2:97:f2:5c:a5: d0:cc:b2:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdZA3TJ1Ov+n4gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk ZGQ3OTU0MDMtMDExMi00YzU2LWE3ZGQtMWZjMDIwNTA2NzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3Y2+NaChSZjK7aH1kDuyjaiTgh7uLk9DsOy 92ZNJe2XrQR8Oh8o7wbElNkEDtTGmbpEFq6ZC8C+FxdWFn3yEnnZ5XAcINNdAF1L xFCKOf19EUPbPFb/wUrJXhyrd8qUErESyQkqbqhE3gKyyaDnC9Kt4ZlgHIQlLZ1X WdzQjga/qsS6TvQi/dOldvnntRbGunCqmYwLMI2aYgN9Fr2IrOfc2/KBXnYSm8I0 OU9SxCfFA2mQ+UU6VzzJXAbyyE+9hq2no9DgcJKeQwNqYmpX7iV58iFAyuCnSPqs NeiFnZRcXTDQLpSCoCte3WICVnttHfkZzS9AMbNwIzFA+XpgDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInr8ZW2q8NbrAD36jIeCbZnKoLiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDlkZDFkY2EtOTVmNS0z NmNmLWFhNzgtNGUyMTUwZjJiMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7W9RNrQaG6MVcCZY4y9OAFOJogm9wK8nF+jXzYx0It9eKB9sx1JUOL CUNdJ+1e7nweOKZn6RO/cEhekEgpC9QbTAmr/9xtBZJ5Bp6H20e4yo4RCKkdo1pi xre1UeGg79TYQbGLMCU6U7InKQenfkrizK56pgXp1wI7IFxmBfcBoQdBSdweMXFx /l7PIA4PcTKggEzbq8LN9fwkj38VuKcTIKfVtL+Oa8DkiLeXj7dgvLUxADXk/Bc4 72OLmZwHuMG1brE8TS7rfDlfuJHiW3hNLOt4r50CP6RFmosepmXp0d5q/I3oXYJx HOvCifZaa08D9cLZn1eyl/JcpdDMstY= -----END CERTIFICATE-----Generated at Mon Jun 30 10:40:03 2025 by rpki-client