$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/413ef40e-9cf0-3178-86cf-a53904635005.roa File: 413ef40e-9cf0-3178-86cf-a53904635005.roa (raw, json) Hash identifier: fCrhfrQkQBhIlOsmehI6z42k6FgTg/j4/DPdRO90bk8= Subject key identifier: 70:83:A8:54:0D:BF:94:47:CA:B5:6C:C5:D2:68:91:DA:3B:72:C6:D4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B233193E427CD7A11C88BF100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/413ef40e-9cf0-3178-86cf-a53904635005.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:93:e4:27:cd:7a:11:c8:8b:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=a7859c42-0cdb-41b2-b382-57fae24cd9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:15:77:96:40:bd:44:08:77:f0:d3:fb:a2:9b: 57:33:95:e4:46:a9:f7:96:2a:08:6a:a5:a1:55:55: 5b:8b:32:a3:e8:81:f2:a8:4b:36:44:f3:69:48:f8: 6f:3b:d3:51:f3:ec:00:d2:af:dd:9d:a0:c1:d0:02: f1:2a:cf:c0:7a:6e:6f:3c:92:de:20:34:39:c2:42: 53:b3:2a:01:0b:1d:b8:5c:3e:c2:fe:aa:75:30:ad: a3:48:ec:ff:0d:29:91:8a:a9:6f:70:89:61:9a:d4: 6c:78:15:81:0e:e5:d8:2e:f7:79:47:d7:78:ff:57: fa:68:fc:1f:49:21:3e:8b:42:14:9f:42:03:47:c9: 70:15:e5:e2:99:c9:fc:e3:38:50:64:e0:f1:5c:ee: f2:00:b0:0b:9f:7f:04:61:85:1e:37:6a:39:cc:21: ab:71:d4:bc:3f:94:37:d2:22:95:c6:76:4b:c9:02: dd:9d:24:4e:da:cd:19:9c:d4:8e:d1:fd:9c:f0:9c: 7d:6b:a1:f3:ba:ac:ed:1c:a0:19:54:3b:ca:b6:2a: 8e:04:d9:eb:85:0c:26:be:40:22:23:de:26:7f:e4: e2:4c:94:8c:20:a1:cf:e8:ae:77:a2:9d:92:62:55: 3a:f8:d7:69:67:9d:46:f8:79:51:21:f1:64:73:f1: 9a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:83:A8:54:0D:BF:94:47:CA:B5:6C:C5:D2:68:91:DA:3B:72:C6:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/413ef40e-9cf0-3178-86cf-a53904635005.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:e6:92:28:0c:9a:64:05:16:07:92:e9:56:0f:87:c0:62:74: 13:67:9e:78:c4:d0:ae:1f:3a:ac:0a:ec:1c:7b:8c:49:be:ce: f7:6f:2f:b1:4b:48:8a:41:44:06:69:e3:18:54:e6:65:02:b0: 4e:0d:32:2f:f5:5f:aa:2d:e6:d6:6b:8a:e2:41:53:ec:3c:60: 4a:ce:de:82:80:cd:f9:bd:60:5e:1c:1d:e2:35:61:a8:de:81: 3f:a0:5e:4f:f0:f3:64:4a:35:cd:fd:93:28:a9:f2:eb:39:06: 8f:59:23:6a:ea:f3:18:76:fd:60:06:9c:9a:3f:f8:d6:77:ac: d7:a1:69:bf:20:94:08:06:6e:4b:84:1c:ae:47:50:d7:08:03: 5d:04:0f:72:9c:97:14:6e:43:14:d6:9d:21:76:b9:ee:d6:a4: 31:17:8a:df:9d:ff:04:58:b0:52:8b:59:b7:05:e3:a4:47:65: f4:1b:3a:29:d0:c9:03:30:5b:04:0b:8a:1c:e4:c0:35:92:76: ef:0e:0e:3e:d4:5c:cd:60:b8:98:d0:77:b3:b1:17:91:2a:03: e3:9e:06:e4:1b:8d:44:32:6e:8a:ee:d0:ea:de:d6:fd:3b:b2: 6b:0c:42:80:86:bc:22:6a:0d:d5:86:bd:11:f4:63:ca:64:5d: e0:32:cf:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZPkJ816EciL8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk YTc4NTljNDItMGNkYi00MWIyLWIzODItNTdmYWUyNGNkOWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhV3lkC9RAh38NP7optXM5XkRqn3lioIaqWh VVVbizKj6IHyqEs2RPNpSPhvO9NR8+wA0q/dnaDB0ALxKs/Aem5vPJLeIDQ5wkJT syoBCx24XD7C/qp1MK2jSOz/DSmRiqlvcIlhmtRseBWBDuXYLvd5R9d4/1f6aPwf SSE+i0IUn0IDR8lwFeXimcn84zhQZODxXO7yALALn38EYYUeN2o5zCGrcdS8P5Q3 0iKVxnZLyQLdnSRO2s0ZnNSO0f2c8Jx9a6HzuqztHKAZVDvKtiqOBNnrhQwmvkAi I94mf+TiTJSMIKHP6K53op2SYlU6+NdpZ51G+HlRIfFkc/GavwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCDqFQNv5RHyrVsxdJokdo7csbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDEzZWY0MGUtOWNmMC0z MTc4LTg2Y2YtYTUzOTA0NjM1MDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjmkigMmmQFFgeS6VYPh8BidBNnnnjE0K4fOqwK7Bx7jEm+zvdvL7FL SIpBRAZp4xhU5mUCsE4NMi/1X6ot5tZriuJBU+w8YErO3oKAzfm9YF4cHeI1Yaje gT+gXk/w82RKNc39kyip8us5Bo9ZI2rq8xh2/WAGnJo/+NZ3rNehab8glAgGbkuE HK5HUNcIA10ED3KclxRuQxTWnSF2ue7WpDEXit+d/wRYsFKLWbcF46RHZfQbOinQ yQMwWwQLihzkwDWSdu8ODj7UXM1guJjQd7OxF5EqA+OeBuQbjUQyboru0Ore1v07 smsMQoCGvCJqDdWGvRH0Y8pkXeAyz8U= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:11 2025 by rpki-client