$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f89a595d-4679-3ba3-87ea-01bb796c68e2.roa File: f89a595d-4679-3ba3-87ea-01bb796c68e2.roa (raw, json) Hash identifier: 7yzGTL3yj4E9OYPD5bklYzyz1C+0RtVu3ULE8JgPR2c= Subject key identifier: F7:95:D7:89:A3:EC:B4:FD:85:AB:F5:F7:27:BB:12:01:85:C0:99:B0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A51D07AFCE599925F69F02080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f89a595d-4679-3ba3-87ea-01bb796c68e2.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 15169 IP address blocks: 192.178.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:7a:fc:e5:99:92:5f:69:f0:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=51e9583a-a215-4ece-84f2-b698a6c65d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fa:77:9e:3f:96:d5:b8:03:eb:f9:f1:08:55: bf:67:b2:98:43:54:00:8c:b3:15:4b:f7:c4:d0:27: 34:09:f3:89:f7:31:a9:bc:00:d0:1b:1b:09:05:43: 2c:2f:21:31:76:cf:7f:51:69:59:7f:22:4f:e0:11: fc:fc:c3:49:50:98:86:3e:c3:80:17:91:ab:7d:29: 1a:a5:ac:dd:12:61:eb:94:43:df:3e:ee:17:8a:cf: 34:bb:9e:f6:8d:7f:7d:41:f6:49:24:22:6b:0b:62: 06:92:8a:9b:21:20:d4:50:1a:7b:db:e3:53:a2:c9: c2:4e:0d:7e:06:e6:50:7b:8c:58:1a:8b:72:d0:9c: 3d:59:f8:13:59:07:fe:39:91:05:45:e5:9b:7d:6a: af:15:2f:8f:49:42:43:5e:08:f9:3d:2a:b2:49:e9: 6c:01:61:a7:6f:37:21:d9:2c:ad:da:de:86:b2:e8: 65:b4:8f:78:dc:c9:e8:71:38:1d:08:8f:9e:a8:12: 63:24:a9:cc:9c:71:32:20:2e:d5:48:40:b4:a3:8d: 99:79:fc:97:61:3f:ab:5a:5a:0d:8b:7b:51:be:18: 65:82:4a:be:c1:33:de:ec:56:1a:fd:7b:48:6f:2f: d2:2a:23:74:68:76:91:00:6e:d0:6c:17:fc:b4:f2: 7a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:95:D7:89:A3:EC:B4:FD:85:AB:F5:F7:27:BB:12:01:85:C0:99:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f89a595d-4679-3ba3-87ea-01bb796c68e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:b4:6e:d0:c3:22:fa:2b:ba:38:76:0b:21:a7:0c:03:77:0c: ab:95:5b:28:f1:15:d8:42:5c:29:e1:7b:7b:55:80:24:b3:4e: b9:d3:c5:77:c1:ce:1c:f6:4d:f3:88:33:72:26:b9:b0:e9:16: 55:85:9f:6f:41:68:c9:f9:1e:81:c6:de:c3:20:69:8e:cf:47: 15:06:45:99:b2:6c:69:12:2b:b8:e6:1d:3f:cc:30:17:43:5b: 08:4c:17:9b:00:b4:c6:09:d8:49:1b:3b:06:7b:46:23:6b:ac: 93:8f:d2:ca:fd:15:43:01:44:c3:01:1b:3a:25:b7:dd:6d:7e: 4b:86:e5:b8:54:b1:c3:1a:17:1b:67:7e:91:58:cd:2e:dc:1a: e9:e3:a2:23:67:8d:4a:07:a4:7a:c9:52:54:2a:a0:91:1c:06: bd:26:cc:07:ca:ef:39:6c:f2:4c:1b:fe:a8:b1:b7:12:5e:0f: e6:d9:86:5e:e4:c5:b9:56:cf:ab:6e:e3:5c:77:02:e6:f1:c7: 28:f9:8c:76:f5:3b:8d:ab:2b:d1:5c:6f:55:85:fd:1c:7b:61: 47:65:21:fb:bc:ef:b1:f7:32:c5:57:2c:35:d2:d4:9f:b7:c5: 41:01:67:2f:7d:b7:ee:23:6c:1e:9c:49:98:94:4d:a4:dc:47: 01:1a:5c:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0Hr85ZmSX2nwIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk NTFlOTU4M2EtYTIxNS00ZWNlLTg0ZjItYjY5OGE2YzY1ZDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/p3nj+W1bgD6/nxCFW/Z7KYQ1QAjLMVS/fE 0Cc0CfOJ9zGpvADQGxsJBUMsLyExds9/UWlZfyJP4BH8/MNJUJiGPsOAF5GrfSka pazdEmHrlEPfPu4Xis80u572jX99QfZJJCJrC2IGkoqbISDUUBp72+NTosnCTg1+ BuZQe4xYGoty0Jw9WfgTWQf+OZEFReWbfWqvFS+PSUJDXgj5PSqySelsAWGnbzch 2Syt2t6GsuhltI943MnocTgdCI+eqBJjJKnMnHEyIC7VSEC0o42ZefyXYT+rWloN i3tRvhhlgkq+wTPe7FYa/XtIby/SKiN0aHaRAG7QbBf8tPJ6/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeV14mj7LT9hav19ye7EgGFwJmwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjg5YTU5NWQtNDY3OS0z YmEzLTg3ZWEtMDFiYjc5NmM2OGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH20btDDIvorujh2CyGnDAN3DKuVWyjxFdhCXCnhe3tVgCSzTrnTxXfB zhz2TfOIM3ImubDpFlWFn29BaMn5HoHG3sMgaY7PRxUGRZmybGkSK7jmHT/MMBdD WwhMF5sAtMYJ2EkbOwZ7RiNrrJOP0sr9FUMBRMMBGzolt91tfkuG5bhUscMaFxtn fpFYzS7cGunjoiNnjUoHpHrJUlQqoJEcBr0mzAfK7zls8kwb/qixtxJeD+bZhl7k xblWz6tu41x3Aubxxyj5jHb1O42rK9Fcb1WF/Rx7YUdlIfu877H3MsVXLDXS1J+3 xUEBZy99t+4jbB6cSZiUTaTcRwEaXI8= -----END CERTIFICATE-----Generated at Mon Jun 30 10:24:19 2025 by rpki-client