$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81c65fe0-e4d2-35d2-8761-159457e81fc3.roa File: 81c65fe0-e4d2-35d2-8761-159457e81fc3.roa (raw, json) Hash identifier: dGwAqCFBdFg6Fb1OkeeEIOIqJvrEquYV3FC9YVJShh8= Subject key identifier: ED:2B:7B:97:BC:BD:FC:D7:09:4A:34:58:4D:42:E5:64:82:CF:10:E3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B233194ADCC9506CCAC42EE40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81c65fe0-e4d2-35d2-8761-159457e81fc3.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:94:ad:cc:95:06:cc:ac:42:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=2d6cd197-f945-4769-a6fd-c26cb8cb3d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ba:9e:3e:51:15:1b:aa:f1:f9:ad:34:ff:25: 69:c1:fc:fe:ae:35:95:b6:a5:70:96:ed:8e:64:a6: ad:27:68:a1:fe:d5:9f:fa:24:3c:67:2f:63:78:db: ca:63:29:6b:a1:28:0a:1a:e3:75:44:25:bf:03:cf: 14:d4:36:37:9b:a8:78:77:ba:c3:5f:29:8b:aa:f2: e6:9a:2c:1a:5f:14:cb:49:a6:40:ae:0d:d9:a3:10: 09:3c:2b:2c:ac:0e:81:51:84:08:65:91:2d:89:0d: f0:c4:d9:fc:be:cb:7e:ff:fd:36:6b:73:7f:a0:d3: 9c:11:4c:42:e1:69:f5:c0:de:ad:9d:9a:5e:52:58: 57:7d:3e:7b:b7:f2:61:56:e8:e4:13:26:42:e5:29: af:15:24:ab:d3:1b:0e:92:58:3d:03:89:cf:ec:b5: 57:af:db:9a:d4:9f:d2:49:3b:17:1f:a3:b7:14:3e: 82:e4:ad:a6:21:32:a0:fb:55:fd:06:01:91:99:e5: 55:2e:68:f9:ca:09:f4:b3:12:1e:bd:53:c9:3f:d0: f3:07:56:19:8e:ac:d3:76:1c:ed:b6:b0:f9:10:c0: be:eb:a5:03:e0:fb:0a:c6:3d:64:97:f8:05:45:ee: f7:ff:75:c0:ef:d0:4e:c7:c1:f1:0f:d1:32:f4:9b: 10:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2B:7B:97:BC:BD:FC:D7:09:4A:34:58:4D:42:E5:64:82:CF:10:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81c65fe0-e4d2-35d2-8761-159457e81fc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:9f:54:c5:ab:da:e8:20:b3:4a:09:fc:94:b9:53:b4:40:ee: 9a:42:6e:2c:63:56:bb:b0:d0:8f:bd:6b:bd:c5:b1:22:eb:4f: 34:0a:10:d1:8c:dc:2d:b0:e0:58:a5:ee:02:e8:ff:84:22:ee: 96:e2:50:87:ad:5b:56:57:5c:20:cc:d2:03:63:25:01:fa:0b: ef:46:7b:22:88:ea:a4:e6:26:a0:ed:e4:3e:07:d9:6e:f2:6b: ff:d2:14:ba:fc:fe:7a:84:3c:95:b3:fc:a2:52:65:dc:fd:92: 4d:26:fd:fc:c9:13:07:80:6e:2f:86:7a:cc:2d:06:b0:8b:ca: dc:0c:1e:09:13:b7:81:b6:47:ff:a4:a8:b9:4d:06:1f:db:31: 53:50:e5:19:4c:68:80:a9:5c:04:db:2a:30:8b:e8:bc:85:17: 46:7d:d2:21:1d:63:96:75:ac:fd:29:7d:8c:61:92:ce:ab:ef: 52:1d:7a:b7:0b:6b:79:2f:f4:56:ea:1a:95:f9:fe:7f:14:02: 07:3d:e3:6c:af:c8:26:69:c6:4e:5f:af:1c:dd:8d:2e:33:08: 0d:da:39:f3:4f:55:42:9d:6f:b2:de:ca:e5:9d:dd:f7:51:88: fb:d3:d1:e7:8f:91:01:c4:36:1c:7d:c6:12:c3:f3:1b:17:b6: 3c:ae:43:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZStzJUGzKxC7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk MmQ2Y2QxOTctZjk0NS00NzY5LWE2ZmQtYzI2Y2I4Y2IzZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7qePlEVG6rx+a00/yVpwfz+rjWVtqVwlu2O ZKatJ2ih/tWf+iQ8Zy9jeNvKYylroSgKGuN1RCW/A88U1DY3m6h4d7rDXymLqvLm miwaXxTLSaZArg3ZoxAJPCssrA6BUYQIZZEtiQ3wxNn8vst+//02a3N/oNOcEUxC 4Wn1wN6tnZpeUlhXfT57t/JhVujkEyZC5SmvFSSr0xsOklg9A4nP7LVXr9ua1J/S STsXH6O3FD6C5K2mITKg+1X9BgGRmeVVLmj5ygn0sxIevVPJP9DzB1YZjqzTdhzt trD5EMC+66UD4PsKxj1kl/gFRe73/3XA79BOx8HxD9Ey9JsQCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0re5e8vfzXCUo0WE1C5WSCzxDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODFjNjVmZTAtZTRkMi0z NWQyLTg3NjEtMTU5NDU3ZTgxZmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByfVMWr2uggs0oJ/JS5U7RA7ppCbixjVruw0I+9a73FsSLrTzQKENGM 3C2w4Fil7gLo/4Qi7pbiUIetW1ZXXCDM0gNjJQH6C+9GeyKI6qTmJqDt5D4H2W7y a//SFLr8/nqEPJWz/KJSZdz9kk0m/fzJEweAbi+GeswtBrCLytwMHgkTt4G2R/+k qLlNBh/bMVNQ5RlMaICpXATbKjCL6LyFF0Z90iEdY5Z1rP0pfYxhks6r71IdercL a3kv9FbqGpX5/n8UAgc942yvyCZpxk5frxzdjS4zCA3aOfNPVUKdb7LeyuWd3fdR iPvT0eePkQHENhx9xhLD8xsXtjyuQwE= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:39 2025 by rpki-client