$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2f8f3bd7-fba4-35c5-ad65-6abf692c8db1.roa File: 2f8f3bd7-fba4-35c5-ad65-6abf692c8db1.roa (raw, json) Hash identifier: 9IroHcxPwPKoLViSDgiWM+izEXVbBefXX8ACgaAFCvE= Subject key identifier: 37:67:5A:DE:83:9E:06:22:AD:ED:71:E5:87:45:1F:83:7E:C8:A1:3F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B23319526231B4A59EE53E280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2f8f3bd7-fba4-35c5-ad65-6abf692c8db1.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:95:26:23:1b:4a:59:ee:53:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=ca528644-27de-4e88-8942-cc3b89514651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:49:62:6e:6b:4a:ab:3b:56:67:4c:e6:26:0f: 1c:e2:e5:38:96:f0:a4:fb:9a:4e:3f:e9:18:12:60: 1d:97:b4:d3:36:49:f6:e7:8f:bb:50:a2:b9:37:06: f2:da:7b:4d:a9:bf:36:6f:2f:df:1a:f5:7d:5d:89: 76:3f:8a:4b:22:57:86:db:d2:17:89:ed:ae:66:c2: ac:ec:24:de:1a:56:b6:ec:df:7e:ee:2d:b9:3c:74: 0e:8b:38:12:31:88:a2:16:ff:50:0e:2a:ba:4d:cf: 45:de:91:a4:ab:2a:9c:11:ce:df:ce:53:8c:d4:eb: 57:65:b8:34:54:28:e6:8c:89:6e:c4:f0:59:19:19: 22:af:d4:2a:21:0b:9c:8f:b0:2b:0f:64:d9:7c:a5: 0d:39:5b:3a:50:d3:4b:c5:84:07:be:c8:ec:22:cd: 3d:61:fd:35:db:3e:69:6f:73:1e:a3:a0:27:21:c6: 40:f6:e6:07:ab:14:35:02:8a:fc:bc:b6:c7:b2:59: 74:ff:21:21:9e:c2:9c:c6:da:bb:c1:aa:fd:22:56: 29:9a:8c:a5:b7:ec:cc:51:cc:a4:30:ab:f0:f2:50: e8:9b:64:dd:30:23:b7:2d:7b:f3:d5:14:7c:fe:5e: 00:99:e6:b9:ad:f0:e4:7b:e5:49:47:35:ed:71:f9: de:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:67:5A:DE:83:9E:06:22:AD:ED:71:E5:87:45:1F:83:7E:C8:A1:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2f8f3bd7-fba4-35c5-ad65-6abf692c8db1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:5d:41:bd:42:00:ec:b1:1d:3e:a9:aa:5e:16:84:40:5b:f9: b9:2c:a2:1a:53:b3:f4:99:5d:90:20:29:e5:ab:69:b5:6b:27: 52:a2:fa:17:cd:30:0a:90:72:97:2a:09:7c:7f:10:5a:9c:f4: da:13:29:58:43:5b:5a:61:21:07:ee:f2:15:f0:bc:a9:37:dd: 15:6a:11:e0:cf:71:af:0a:22:89:90:90:dd:ff:8e:72:c3:9a: ac:6f:e4:94:f9:e0:ed:31:27:56:16:b8:8c:b8:03:ec:75:2c: c8:73:32:df:27:ec:1f:03:a0:1a:d3:dd:11:db:c7:66:f0:2f: 28:dc:df:18:fe:36:67:58:05:35:99:bc:5a:54:57:3c:5f:36: b0:55:f2:b9:95:f7:6e:1a:22:5a:8c:01:e2:af:f4:7e:0e:dc: 87:53:b0:4e:f6:ad:00:24:64:ec:2b:53:20:54:33:a9:35:27: 99:e8:fc:fb:98:56:34:0e:2a:4b:27:ba:b8:72:ab:bd:25:d4: 7e:e0:ee:bf:84:cf:cc:87:84:49:8c:10:03:19:c3:22:67:25: e0:cb:e7:b7:7b:d2:5d:f1:ac:43:3a:82:98:40:aa:ed:c3:8b: 7d:6a:cb:b2:d2:43:03:b5:f0:1e:53:4c:9d:b2:c0:a5:39:92: 9e:49:2f:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZUmIxtKWe5T4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk Y2E1Mjg2NDQtMjdkZS00ZTg4LTg5NDItY2MzYjg5NTE0NjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUlibmtKqztWZ0zmJg8c4uU4lvCk+5pOP+kY EmAdl7TTNkn254+7UKK5Nwby2ntNqb82by/fGvV9XYl2P4pLIleG29IXie2uZsKs 7CTeGla27N9+7i25PHQOizgSMYiiFv9QDiq6Tc9F3pGkqyqcEc7fzlOM1OtXZbg0 VCjmjIluxPBZGRkir9QqIQucj7ArD2TZfKUNOVs6UNNLxYQHvsjsIs09Yf012z5p b3Meo6AnIcZA9uYHqxQ1Aor8vLbHsll0/yEhnsKcxtq7war9IlYpmoylt+zMUcyk MKvw8lDom2TdMCO3LXvz1RR8/l4Amea5rfDke+VJRzXtcfneaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdnWt6DngYire1x5YdFH4N+yKE/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmY4ZjNiZDctZmJhNC0z NWM1LWFkNjUtNmFiZjY5MmM4ZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLK1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHldQb1CAOyxHT6pql4WhEBb+bksohpTs/SZXZAgKeWrabVrJ1Ki+hfN MAqQcpcqCXx/EFqc9NoTKVhDW1phIQfu8hXwvKk33RVqEeDPca8KIomQkN3/jnLD mqxv5JT54O0xJ1YWuIy4A+x1LMhzMt8n7B8DoBrT3RHbx2bwLyjc3xj+NmdYBTWZ vFpUVzxfNrBV8rmV924aIlqMAeKv9H4O3IdTsE72rQAkZOwrUyBUM6k1J5no/PuY VjQOKksnurhyq70l1H7g7r+Ez8yHhEmMEAMZwyJnJeDL57d70l3xrEM6gphAqu3D i31qy7LSQwO18B5TTJ2ywKU5kp5JL9c= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:37 2025 by rpki-client