$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1408a967-bb22-3aa5-9b7d-7054fef10f1b.roa File: 1408a967-bb22-3aa5-9b7d-7054fef10f1b.roa (raw, json) Hash identifier: rJguIosKxV0aGfdOALWb/hDa9SlYZ/74iwVp6OyZDzw= Subject key identifier: 70:1F:57:FC:EA:59:26:41:33:0E:00:F1:74:F0:A7:5C:8E:AD:15:CB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B2331939840B6CD06D3D08B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1408a967-bb22-3aa5-9b7d-7054fef10f1b.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:93:98:40:b6:cd:06:d3:d0:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=ea6e4fdd-a97f-4a3a-bde3-e4549dd0073b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ca:79:1b:63:de:36:ac:61:ec:6a:ef:4e:d1: 04:7d:62:41:ca:0c:88:94:76:88:76:b5:50:b3:5b: 75:a2:1b:d3:7c:60:bc:37:85:a2:d5:47:10:17:ef: 45:a6:0b:65:d8:96:f6:c8:85:83:09:d7:c3:ca:e9: 30:88:75:bd:4d:c0:7a:37:ac:2f:23:be:52:c3:f6: b8:97:a0:1c:f6:97:2b:a8:f9:fc:21:53:e6:0d:94: 31:4b:e6:93:09:90:5f:f8:d3:02:fd:71:ab:f5:00: 63:55:a8:3e:55:18:75:09:0e:32:8e:ea:87:6e:7b: 20:d3:bf:eb:e0:fb:58:09:c6:62:13:88:72:a6:71: ad:6c:5d:44:a5:b2:bd:4b:8b:27:32:e5:11:41:f3: ae:ff:00:08:0e:e5:d7:2e:11:0b:97:14:95:1b:c8: 22:ae:7f:b5:03:76:46:5a:da:6b:99:ea:2f:66:6d: 5e:a3:6d:fb:f9:a8:00:6c:68:c9:fd:e5:8a:6f:fb: 59:ac:c8:17:cb:57:1a:eb:1b:33:c5:da:e0:b6:c6: 1f:b3:a0:03:b6:f1:3c:b1:bf:0e:ee:04:cc:ea:72: 71:71:37:bd:73:3f:53:45:8e:04:26:08:9a:fa:fa: fd:e4:d4:d5:cc:2e:f5:4d:5e:68:29:7d:7a:04:9b: 75:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1F:57:FC:EA:59:26:41:33:0E:00:F1:74:F0:A7:5C:8E:AD:15:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1408a967-bb22-3aa5-9b7d-7054fef10f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f8:5e:65:1a:0e:f0:d7:c3:64:f3:f1:ef:87:32:26:5b:f5: 07:6e:35:19:cb:3e:a1:72:a9:7d:bd:89:92:42:21:93:8a:e6: b1:05:78:ae:c5:df:32:42:8b:0a:9c:ff:0c:c1:2b:c1:02:5d: a5:5b:e2:e2:ef:71:66:08:fe:41:bc:b0:26:bf:fb:da:f1:93: f0:21:92:e5:f7:c7:42:bd:ec:0e:14:84:bb:d7:32:51:0e:7b: c2:8f:61:a7:58:44:21:38:58:d2:1b:34:99:dd:7c:4f:6d:be: 39:4c:26:66:02:c1:b7:49:84:90:68:96:77:c9:80:1f:fc:68: fd:d3:65:6d:5f:55:0f:43:77:bc:cb:2c:61:46:82:8b:db:06: 1a:bf:9d:c6:28:27:20:fe:cf:c0:ce:0d:96:94:ac:41:da:56: 97:c7:df:a0:25:53:5d:62:16:e3:d2:87:1b:39:7a:f6:d3:1d: 96:d4:8d:7e:0c:62:1d:8f:89:92:08:e6:ae:55:2d:cc:74:bb: 7c:0a:29:1d:ab:21:f4:87:76:69:e2:cc:ae:7b:3f:3a:d7:0f: bc:ef:58:3e:42:6a:fe:3a:2a:99:66:ee:23:d9:9e:31:f6:1d: 32:bb:35:84:52:25:ed:0c:45:20:03:f5:03:6f:c1:ad:63:9b: fd:5e:c7:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZOYQLbNBtPQi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk ZWE2ZTRmZGQtYTk3Zi00YTNhLWJkZTMtZTQ1NDlkZDAwNzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8p5G2PeNqxh7GrvTtEEfWJBygyIlHaIdrVQ s1t1ohvTfGC8N4Wi1UcQF+9Fpgtl2Jb2yIWDCdfDyukwiHW9TcB6N6wvI75Sw/a4 l6Ac9pcrqPn8IVPmDZQxS+aTCZBf+NMC/XGr9QBjVag+VRh1CQ4yjuqHbnsg07/r 4PtYCcZiE4hypnGtbF1EpbK9S4snMuURQfOu/wAIDuXXLhELlxSVG8girn+1A3ZG WtprmeovZm1eo237+agAbGjJ/eWKb/tZrMgXy1ca6xszxdrgtsYfs6ADtvE8sb8O 7gTM6nJxcTe9cz9TRY4EJgia+vr95NTVzC71TV5oKX16BJt1BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAfV/zqWSZBMw4A8XTwp1yOrRXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTQwOGE5NjctYmIyMi0z YWE1LTliN2QtNzA1NGZlZjEwZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/4XmUaDvDXw2Tz8e+HMiZb9QduNRnLPqFyqX29iZJCIZOK5rEFeK7F 3zJCiwqc/wzBK8ECXaVb4uLvcWYI/kG8sCa/+9rxk/AhkuX3x0K97A4UhLvXMlEO e8KPYadYRCE4WNIbNJndfE9tvjlMJmYCwbdJhJBolnfJgB/8aP3TZW1fVQ9Dd7zL LGFGgovbBhq/ncYoJyD+z8DODZaUrEHaVpfH36AlU11iFuPShxs5evbTHZbUjX4M Yh2PiZII5q5VLcx0u3wKKR2rIfSHdmnizK57PzrXD7zvWD5Cav46Kplm7iPZnjH2 HTK7NYRSJe0MRSAD9QNvwa1jm/1ex5U= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:26 2025 by rpki-client