$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2cc338bb-17f7-3d63-b37c-74d0bcb9afa2.roa File: 2cc338bb-17f7-3d63-b37c-74d0bcb9afa2.roa (raw, json) Hash identifier: cbz1V4xEHauAbVsRMjYxLmCUjs4cIqKay6vkKIIZono= Subject key identifier: C4:88:9F:66:61:38:4F:7D:7A:C4:24:74:ED:C1:48:8F:7E:F4:B1:DA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B2066DBADF585C751EC390880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2cc338bb-17f7-3d63-b37c-74d0bcb9afa2.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:db:ad:f5:85:c7:51:ec:39:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=8f57ecae-dd1b-4cfa-9eeb-09d26e2b84fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5b:c6:05:bf:61:66:0e:b0:9d:23:c5:e6:a6: c5:53:80:59:77:bf:07:b4:9c:10:85:be:0e:ec:58: af:07:e2:3e:6a:c7:95:4e:67:c6:67:26:cd:d8:70: 9c:cd:f0:40:1d:32:2b:b9:21:33:0b:6d:2e:32:63: ed:60:6e:ba:df:0d:4d:20:01:fd:f5:f1:d5:db:61: 24:32:4c:2b:67:8a:e9:8f:f6:6b:ef:87:a8:76:91: b9:c3:2b:f1:85:bf:e2:d4:72:0b:8f:38:65:98:7d: 8d:75:c3:48:4d:ad:dd:47:9e:ef:a5:9e:6c:64:0d: 0e:40:64:a2:69:99:7b:b8:1f:3d:80:e0:e1:b6:f1: 28:4d:e0:02:07:39:8e:18:98:05:d7:31:f6:ea:8e: 10:4c:67:4d:57:3f:93:77:73:4d:35:31:92:32:9f: c2:78:40:94:7e:91:a9:7e:21:f3:b0:e6:4b:e2:3a: 48:4e:b0:08:f1:84:00:4c:5b:e9:dc:80:18:ae:d1: f3:66:ff:ca:96:86:3f:c9:fd:29:a6:7f:0a:de:0e: b3:7c:b5:f7:b6:59:01:87:c0:0f:fa:84:75:4b:82: 90:2a:4c:bb:ab:94:61:cb:a7:0b:38:61:2d:ed:fc: c5:ea:71:74:4d:40:0f:7a:18:c7:70:f4:04:85:8f: c2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:88:9F:66:61:38:4F:7D:7A:C4:24:74:ED:C1:48:8F:7E:F4:B1:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2cc338bb-17f7-3d63-b37c-74d0bcb9afa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ff:da:72:54:18:27:e2:c0:15:91:2d:27:35:d4:56:c1:69: 09:23:06:76:26:c5:75:ff:6f:ff:1a:f7:c5:35:c1:33:49:e8: d5:fe:5e:31:80:2f:4b:3b:43:cb:8f:06:fa:f8:02:4d:7e:9c: 36:b4:a3:01:5e:68:f8:08:34:17:aa:27:11:8b:25:99:3c:34: 4c:67:f4:76:fe:aa:eb:0c:76:d9:d2:1b:e4:08:31:57:17:33: b9:91:90:19:23:50:37:fd:d2:9c:72:a2:47:9e:77:69:bc:61: 36:38:f5:69:0d:56:1a:fd:0f:49:67:b3:6f:49:b1:de:e4:87: d9:ac:51:7f:e5:49:c2:da:05:4a:aa:33:0b:f2:d5:ff:5e:5e: 79:5d:49:0c:85:92:f6:63:b7:d9:1b:99:50:0a:83:94:10:27: b9:14:5e:bb:81:f3:5b:31:60:26:43:dc:1f:51:bb:ac:b7:6f: 0b:f2:38:65:c1:36:53:05:48:c3:1a:4f:cd:20:f9:bc:eb:b8: 13:23:f1:be:95:8c:32:98:7f:71:c2:6d:eb:69:1a:bc:16:d6: 33:7e:1f:f3:03:64:5d:18:78:ce:19:6a:25:2a:91:63:49:d8: 05:83:50:e7:eb:6a:00:7e:67:ff:00:cb:3c:ba:f3:de:cc:d1: 30:c3:58:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZtut9YXHUew5CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk OGY1N2VjYWUtZGQxYi00Y2ZhLTllZWItMDlkMjZlMmI4NGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFvGBb9hZg6wnSPF5qbFU4BZd78HtJwQhb4O 7FivB+I+aseVTmfGZybN2HCczfBAHTIruSEzC20uMmPtYG663w1NIAH99fHV22Ek MkwrZ4rpj/Zr74eodpG5wyvxhb/i1HILjzhlmH2NdcNITa3dR57vpZ5sZA0OQGSi aZl7uB89gODhtvEoTeACBzmOGJgF1zH26o4QTGdNVz+Td3NNNTGSMp/CeECUfpGp fiHzsOZL4jpITrAI8YQATFvp3IAYrtHzZv/KloY/yf0ppn8K3g6zfLX3tlkBh8AP +oR1S4KQKky7q5Rhy6cLOGEt7fzF6nF0TUAPehjHcPQEhY/CVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSIn2ZhOE99esQkdO3BSI9+9LHaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmNjMzM4YmItMTdmNy0z ZDYzLWIzN2MtNzRkMGJjYjlhZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABP/2nJUGCfiwBWRLSc11FbBaQkjBnYmxXX/b/8a98U1wTNJ6NX+XjGA L0s7Q8uPBvr4Ak1+nDa0owFeaPgINBeqJxGLJZk8NExn9Hb+qusMdtnSG+QIMVcX M7mRkBkjUDf90pxyokeed2m8YTY49WkNVhr9D0lns29Jsd7kh9msUX/lScLaBUqq Mwvy1f9eXnldSQyFkvZjt9kbmVAKg5QQJ7kUXruB81sxYCZD3B9Ru6y3bwvyOGXB NlMFSMMaT80g+bzruBMj8b6VjDKYf3HCbetpGrwW1jN+H/MDZF0YeM4ZaiUqkWNJ 2AWDUOfragB+Z/8Ayzy6897M0TDDWLY= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:02 2025 by rpki-client