$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/172c185b-2433-3ace-8416-a4f6da3639bf.roa File: 172c185b-2433-3ace-8416-a4f6da3639bf.roa (raw, json) Hash identifier: 1FapU5uE+CCtN1qdNa5g5ksXRRnE3ZbtKR3PnqA+naA= Subject key identifier: F9:61:31:17:C5:AC:22:7F:1B:20:8B:16:5F:5E:75:46:47:81:0D:E0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B2331945D01FC6260868D50D8 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/172c185b-2433-3ace-8416-a4f6da3639bf.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:94:5d:01:fc:62:60:86:8d:50:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=7a2183ab-3417-41d8-96cd-cf8ce007d651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:fc:1e:8b:e0:0c:7a:ee:bc:bd:34:28:c2: 0f:ce:45:ec:9b:ff:f4:2e:0a:96:7d:4f:b0:91:16: 62:22:6c:85:33:12:48:57:9f:32:6a:46:db:17:54: 75:80:ce:2f:89:5f:07:d0:23:fc:62:d1:09:03:60: 8d:74:02:6a:5a:e9:c5:ac:73:d0:d0:6b:85:05:0f: f2:18:a4:bb:fd:5e:5f:5f:f7:2c:70:00:d1:01:95: 1f:c1:8a:44:77:df:a7:72:74:57:7d:4f:9c:23:42: e1:2f:cb:40:ed:34:af:07:d3:22:06:b3:b4:b7:86: f4:84:aa:12:5e:95:cd:bc:48:42:cc:6e:18:0d:aa: 4b:b8:25:13:54:7f:62:37:4f:6b:83:b2:43:71:52: a3:6e:f1:99:14:6e:eb:cc:a4:ea:27:0a:20:ba:13: 19:23:5a:16:b2:46:05:79:86:ff:b6:49:b4:ed:1a: 06:85:67:c5:6f:e8:e5:7f:36:6c:8f:21:f6:d5:9a: f8:e2:4a:22:50:16:1e:9a:3f:62:11:b4:a3:24:1f: 01:11:73:0e:02:ae:fc:42:87:38:2b:bf:d1:b7:b7: f2:eb:1e:2e:a6:70:7a:e6:7e:63:ca:c9:e5:d9:85: 4d:0c:c8:ef:cc:67:de:35:72:1a:11:cc:07:81:1f: b3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:61:31:17:C5:AC:22:7F:1B:20:8B:16:5F:5E:75:46:47:81:0D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/172c185b-2433-3ace-8416-a4f6da3639bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:3e:54:bf:af:6e:e5:69:85:dd:9c:de:03:8f:f2:e2:4a:1c: f4:f3:9c:b1:57:18:a3:fd:28:af:dc:e3:77:cb:dc:3f:94:fd: db:87:95:9a:45:e4:77:0d:9f:85:93:4d:73:a9:52:20:c0:49: 33:74:fa:61:70:41:5c:fe:71:ba:b2:fd:db:fd:88:4f:81:ce: f9:07:a6:77:ba:40:df:de:31:5c:8b:03:4d:f4:02:d2:b7:74: 2f:45:e5:0e:b0:ed:25:6b:1b:9e:1f:f2:ec:8e:38:34:ce:3b: 38:f5:c6:fc:33:f4:ae:ee:50:87:47:29:7c:bd:e8:59:9f:e1: 38:55:f8:67:cc:aa:a9:86:e2:d6:bd:1a:51:eb:22:48:76:18: 48:b5:e5:f4:82:72:86:18:c3:e3:6e:aa:1a:58:9e:19:de:b4: 89:d8:6f:4e:a8:03:35:a4:2d:19:3e:98:53:d0:fa:0d:cc:89: ce:0d:6b:03:8e:4e:76:cc:c1:6e:2d:a2:27:b8:c4:8c:ef:3b: 24:5a:4e:b7:4d:37:98:b1:6a:a7:ee:b4:71:57:d9:38:e4:55: 05:13:cb:6b:87:f1:9a:f5:f0:8f:8d:65:2f:a4:1c:dc:25:eb: a3:94:2e:11:b7:5a:60:93:84:f5:b1:3a:94:56:e8:99:3c:45: 00:25:3f:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZRdAfxiYIaNUNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk N2EyMTgzYWItMzQxNy00MWQ4LTk2Y2QtY2Y4Y2UwMDdkNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaP8HovgDHruvL00KMIPzkXsm//0LgqWfU+w kRZiImyFMxJIV58yakbbF1R1gM4viV8H0CP8YtEJA2CNdAJqWunFrHPQ0GuFBQ/y GKS7/V5fX/cscADRAZUfwYpEd9+ncnRXfU+cI0LhL8tA7TSvB9MiBrO0t4b0hKoS XpXNvEhCzG4YDapLuCUTVH9iN09rg7JDcVKjbvGZFG7rzKTqJwoguhMZI1oWskYF eYb/tkm07RoGhWfFb+jlfzZsjyH21Zr44koiUBYemj9iEbSjJB8BEXMOAq78Qoc4 K7/Rt7fy6x4upnB65n5jysnl2YVNDMjvzGfeNXIaEcwHgR+zNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlhMRfFrCJ/GyCLFl9edUZHgQ3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTcyYzE4NWItMjQzMy0z YWNlLTg0MTYtYTRmNmRhMzYzOWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALE+VL+vbuVphd2c3gOP8uJKHPTznLFXGKP9KK/c43fL3D+U/duHlZpF 5HcNn4WTTXOpUiDASTN0+mFwQVz+cbqy/dv9iE+BzvkHpne6QN/eMVyLA030AtK3 dC9F5Q6w7SVrG54f8uyOODTOOzj1xvwz9K7uUIdHKXy96Fmf4ThV+GfMqqmG4ta9 GlHrIkh2GEi15fSCcoYYw+NuqhpYnhnetInYb06oAzWkLRk+mFPQ+g3Mic4NawOO TnbMwW4toie4xIzvOyRaTrdNN5ixaqfutHFX2TjkVQUTy2uH8Zr18I+NZS+kHNwl 66OULhG3WmCThPWxOpRW6Jk8RQAlP3k= -----END CERTIFICATE-----Generated at Fri Oct 17 08:44:57 2025 by rpki-client