$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfac38b0-5803-382f-94a4-bd9f8ed915a6.roa File: dfac38b0-5803-382f-94a4-bd9f8ed915a6.roa (raw, json) Hash identifier: 61H2jLxCLvmBWzLvJARLNppGQ/0VExiom5uIERc2JZs= Subject key identifier: D5:AA:9A:BE:0B:F8:57:17:3D:9F:33:81:1A:E9:95:C8:BC:18:30:E8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A427592932920A0C1EABF2700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfac38b0-5803-382f-94a4-bd9f8ed915a6.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 15169 IP address blocks: 192.178.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:92:93:29:20:a0:c1:ea:bf:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=3df2257f-ab4d-4142-8e59-9d37228ff767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6b:19:11:15:35:10:93:3b:0d:e2:0c:9a:42: 3e:30:db:0b:ca:a6:76:58:fa:46:1c:b2:6a:fa:04: 5c:97:5a:42:4e:89:c0:25:6d:f3:86:71:8c:3a:6e: 84:23:43:87:84:1b:4b:ab:19:23:b4:6f:c5:2f:b7: 5f:6f:c4:df:5f:c9:8e:8a:a0:43:a7:5e:e1:9b:a1: e0:3f:f4:f2:16:6f:db:94:2e:2c:8a:b1:c0:a6:95: de:9f:4f:aa:26:dd:64:83:eb:7d:aa:1a:11:8d:00: 49:02:c3:3f:7b:79:8e:9b:03:6c:18:ef:6a:20:ce: 60:7e:6f:6a:6b:d2:f9:6d:00:ac:57:ec:33:74:d2: 5f:07:78:53:58:6f:ea:37:3d:69:73:a6:2f:50:41: c6:6d:62:12:f0:7b:14:db:e5:d1:37:03:10:18:99: 49:27:b7:8b:78:77:55:3e:db:6d:08:52:ae:79:0f: 4e:64:36:e7:87:6d:4b:60:b0:db:2b:31:8b:93:9f: c1:bc:26:b7:7e:79:87:02:4d:b8:a7:d9:ec:86:86: a5:96:0e:44:22:f9:61:8b:34:00:98:c0:9e:d8:13: c3:08:b4:91:41:1b:44:02:8f:a3:57:19:2b:fb:0c: fd:61:f9:3b:0b:d9:e3:20:de:5b:99:c0:c0:77:48: fd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AA:9A:BE:0B:F8:57:17:3D:9F:33:81:1A:E9:95:C8:BC:18:30:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfac38b0-5803-382f-94a4-bd9f8ed915a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:72:af:fa:f7:14:ee:b1:34:3d:95:5f:b1:66:ca:a8:48:c2: f3:54:02:3a:05:5c:7b:7f:7e:da:34:d3:43:04:ff:7d:05:52: b8:b3:b7:e0:c4:24:5c:a4:d1:5c:58:5f:e1:65:62:5f:d4:ad: 33:5b:fd:39:74:d4:b7:6c:8b:a1:b0:6b:c7:54:15:98:78:5a: 70:80:2b:d8:df:c0:1a:39:ce:6f:0e:97:43:35:f8:6e:fc:72: 81:34:b8:71:1b:62:33:1a:8b:60:27:e9:73:42:82:66:7c:86: 6c:bc:18:cc:46:af:04:57:f1:c2:54:01:db:2c:ec:c7:48:db: 3b:fb:76:e7:46:c7:87:5a:b6:2f:57:06:65:6c:d6:bc:54:1e: e3:06:72:93:c7:6a:8c:09:69:98:9f:c8:43:f9:e3:d7:9f:d7: e8:a7:6d:b0:7e:ff:88:8a:d8:1c:ef:0c:77:ee:0d:5a:39:ce: ad:17:fd:e0:a9:15:7a:3d:a0:08:dd:4e:0c:57:46:b1:b8:0f: 64:08:64:88:28:60:a3:45:fe:2d:f3:47:f2:a4:f8:db:a2:18: 48:94:69:2a:a2:7d:98:db:37:f4:66:75:9b:d7:bc:bd:c6:6d: bd:3b:73:0e:0a:d9:55:5e:60:eb:85:5a:a0:d2:82:39:5c:b9: 49:d9:ae:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdZKTKSCgweq/JwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk M2RmMjI1N2YtYWI0ZC00MTQyLThlNTktOWQzNzIyOGZmNzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmsZERU1EJM7DeIMmkI+MNsLyqZ2WPpGHLJq +gRcl1pCTonAJW3zhnGMOm6EI0OHhBtLqxkjtG/FL7dfb8TfX8mOiqBDp17hm6Hg P/TyFm/blC4sirHAppXen0+qJt1kg+t9qhoRjQBJAsM/e3mOmwNsGO9qIM5gfm9q a9L5bQCsV+wzdNJfB3hTWG/qNz1pc6YvUEHGbWIS8HsU2+XRNwMQGJlJJ7eLeHdV PtttCFKueQ9OZDbnh21LYLDbKzGLk5/BvCa3fnmHAk24p9nshoallg5EIvlhizQA mMCe2BPDCLSRQRtEAo+jVxkr+wz9Yfk7C9njIN5bmcDAd0j9rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWqmr4L+FcXPZ8zgRrplci8GDDoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGZhYzM4YjAtNTgwMy0z ODJmLTk0YTQtYmQ5ZjhlZDkxNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9yr/r3FO6xND2VX7FmyqhIwvNUAjoFXHt/fto000ME/30FUrizt+DE JFyk0VxYX+FlYl/UrTNb/Tl01Ldsi6Gwa8dUFZh4WnCAK9jfwBo5zm8Ol0M1+G78 coE0uHEbYjMai2An6XNCgmZ8hmy8GMxGrwRX8cJUAdss7MdI2zv7dudGx4dati9X BmVs1rxUHuMGcpPHaowJaZifyEP549ef1+inbbB+/4iK2BzvDHfuDVo5zq0X/eCp FXo9oAjdTgxXRrG4D2QIZIgoYKNF/i3zR/Kk+NuiGEiUaSqifZjbN/RmdZvXvL3G bb07cw4K2VVeYOuFWqDSgjlcuUnZrmA= -----END CERTIFICATE-----Generated at Mon Jun 30 04:50:47 2025 by rpki-client