$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a75a81d-edcf-38cd-ad25-79f23c4848e6.roa File: 5a75a81d-edcf-38cd-ad25-79f23c4848e6.roa (raw, json) Hash identifier: YgSjvO/QALyvfw4+NRzQrtf5VP/r064iAd5cBO3+1gQ= Subject key identifier: 8F:5F:6B:2D:25:19:6E:16:51:08:35:59:0D:E1:70:7B:81:F0:5D:D1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B3987150B624F1D7C192B9180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a75a81d-edcf-38cd-ad25-79f23c4848e6.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:15:0b:62:4f:1d:7c:19:2b:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=22961076-3551-40e9-962b-ae3bf493a044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:c1:7a:e4:b1:b9:b4:d6:01:f9:4a:1a:a4: 3d:44:97:dc:a6:38:bc:10:73:25:99:c4:9a:32:c7: f2:28:28:c7:49:a7:df:12:9e:69:b3:d7:0f:5c:9e: cf:94:7c:8c:cb:cd:e3:04:d8:0f:65:1d:7d:5c:45: fa:0f:52:a6:d1:0f:7e:87:12:bc:72:3b:6e:26:5c: 64:37:5d:ed:7f:b6:f6:a2:da:18:9a:1c:05:28:24: cc:8f:b4:b3:40:41:94:57:b8:85:bc:df:da:b1:92: 55:a4:86:53:0e:20:e7:8e:92:97:1f:4f:13:9b:9e: 17:dd:69:86:4b:47:71:14:8d:d0:01:73:7d:43:9f: 28:68:07:8e:4c:db:54:1f:af:cd:02:36:cd:d7:53: 9b:ee:0e:ee:2c:8e:30:30:da:4d:fa:7e:4a:0b:5c: 5a:a5:47:38:5e:41:72:19:8f:04:db:32:e0:6a:2e: c4:e0:bc:33:39:0d:16:1b:24:55:62:9b:eb:a9:b0: 6e:d6:3a:4f:65:dd:69:d0:93:ff:f3:e8:de:ca:bc: dc:a3:aa:e7:60:e9:67:1b:18:6c:84:56:9a:7e:57: b0:7c:77:df:96:84:1f:1a:d8:7a:6c:e1:c2:5e:09: d6:6f:9b:00:b7:b0:7c:1e:4f:a7:8c:9b:39:30:8c: d1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5F:6B:2D:25:19:6E:16:51:08:35:59:0D:E1:70:7B:81:F0:5D:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a75a81d-edcf-38cd-ad25-79f23c4848e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:48:32:42:68:b4:a8:58:20:d5:92:d8:a0:cb:4f:09:99:22: 99:92:ff:c2:bf:8e:d2:8f:73:8d:be:18:a2:b9:8c:65:d4:43: 08:bb:c7:96:eb:49:f3:80:08:d9:cf:2c:c5:29:78:cf:65:28: 17:7c:68:35:4d:19:3f:77:2e:8b:e7:e0:17:84:15:47:ed:c5: 4e:4c:17:a4:f9:d9:e9:57:31:ed:63:ac:ee:c9:b5:01:b7:92: 85:8b:46:39:27:9e:95:d0:13:b4:22:79:c6:38:c4:64:5b:97: be:e6:64:7c:8c:1d:16:98:d6:53:06:29:0a:bd:24:74:67:30: 3e:f0:01:ee:ec:8a:38:03:21:bb:b5:29:0e:21:18:e3:bc:9b: 4f:50:ed:bc:58:cc:3b:85:28:1c:8a:6e:0f:28:4a:aa:7d:34: d3:7c:ad:7f:aa:53:6c:e3:ff:94:5f:f0:ef:c2:89:25:e0:c1: 4f:6f:e8:48:e2:a8:25:a9:c0:0f:b7:23:4f:ec:30:9e:21:df: 8a:92:6e:a1:1e:c6:9c:50:ec:29:c6:ed:e7:79:19:8c:b2:b7: 7c:73:7e:22:e6:6c:ab:0d:a3:fa:18:f2:37:50:c0:37:ec:44: 72:ef:40:9c:f8:c1:f4:dd:da:d4:1d:ce:20:dd:bb:63:a2:ef: 71:23:9c:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hxULYk8dfBkrkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk MjI5NjEwNzYtMzU1MS00MGU5LTk2MmItYWUzYmY0OTNhMDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUXBeuSxubTWAflKGqQ9RJfcpji8EHMlmcSa MsfyKCjHSaffEp5ps9cPXJ7PlHyMy83jBNgPZR19XEX6D1Km0Q9+hxK8cjtuJlxk N13tf7b2otoYmhwFKCTMj7SzQEGUV7iFvN/asZJVpIZTDiDnjpKXH08Tm54X3WmG S0dxFI3QAXN9Q58oaAeOTNtUH6/NAjbN11Ob7g7uLI4wMNpN+n5KC1xapUc4XkFy GY8E2zLgai7E4LwzOQ0WGyRVYpvrqbBu1jpPZd1p0JP/8+jeyrzco6rnYOlnGxhs hFaaflewfHffloQfGth6bOHCXgnWb5sAt7B8Hk+njJs5MIzR3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9fay0lGW4WUQg1WQ3hcHuB8F3RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWE3NWE4MWQtZWRjZi0z OGNkLWFkMjUtNzlmMjNjNDg0OGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVIMkJotKhYINWS2KDLTwmZIpmS/8K/jtKPc42+GKK5jGXUQwi7x5br SfOACNnPLMUpeM9lKBd8aDVNGT93Lovn4BeEFUftxU5MF6T52elXMe1jrO7JtQG3 koWLRjknnpXQE7QiecY4xGRbl77mZHyMHRaY1lMGKQq9JHRnMD7wAe7sijgDIbu1 KQ4hGOO8m09Q7bxYzDuFKByKbg8oSqp9NNN8rX+qU2zj/5Rf8O/CiSXgwU9v6Eji qCWpwA+3I0/sMJ4h34qSbqEexpxQ7CnG7ed5GYyyt3xzfiLmbKsNo/oY8jdQwDfs RHLvQJz4wfTd2tQdziDdu2Oi73EjnGI= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:46 2025 by rpki-client