$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85a6cf21-2056-3a41-b8bd-d016042a8028.roa File: 85a6cf21-2056-3a41-b8bd-d016042a8028.roa (raw, json) Hash identifier: GHh9gQP6NjS+qnnoEMrk7ZXsozdBKCkEfiDFDlLoT2U= Subject key identifier: C6:06:47:C8:D6:F3:8C:76:21:90:59:0B:BB:30:76:B9:59:D7:33:D6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B233194FCECEDEEC73B5FED94 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85a6cf21-2056-3a41-b8bd-d016042a8028.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:94:fc:ec:ed:ee:c7:3b:5f:ed:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=8dcfd008-eb44-4f77-af44-3857d2d3dd33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:b1:ab:80:22:63:51:11:55:c4:76:bd:ea: e0:d4:38:14:13:13:41:bf:4e:3e:f0:6d:ee:37:07: b9:9b:13:27:31:af:0c:20:9a:a2:40:1f:50:74:f6: 74:be:21:d6:ab:56:6d:97:e4:a5:e7:13:a1:d2:03: 8d:9f:47:d6:c7:62:71:5d:df:b0:cc:2c:8a:b7:bf: 36:e0:2c:2e:69:9a:cb:c3:c4:c8:d1:6d:49:2c:6a: de:25:57:eb:a9:d7:bb:c7:a5:53:44:72:2a:4e:2e: f9:0d:93:23:5c:75:5e:bf:98:f7:95:f8:ae:41:cd: 0e:81:97:b4:91:93:42:ec:9e:2a:52:89:ba:07:94: 3c:3a:74:e3:91:73:f8:4b:3b:89:53:4d:0e:c2:fa: ec:c1:b0:7e:6f:52:e6:12:9f:c3:64:26:2b:7b:c3: 56:56:0c:58:ea:b6:89:33:8c:a4:a2:bf:32:ab:de: 6f:d8:6f:42:44:25:48:3b:d0:a4:90:5d:8d:f7:13: 83:1c:0e:cb:94:90:4a:71:02:fc:cb:0f:07:37:c0: 0b:82:89:56:91:7b:ba:fd:e6:a0:e0:81:80:a8:fa: 6c:07:9d:96:5f:4c:e2:4b:5d:99:03:d7:25:80:6a: 3f:34:df:f3:d5:1a:3a:67:fe:98:20:9a:01:bc:08: dd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:06:47:C8:D6:F3:8C:76:21:90:59:0B:BB:30:76:B9:59:D7:33:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85a6cf21-2056-3a41-b8bd-d016042a8028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:81:db:79:90:58:e7:3f:ff:33:43:0f:ad:a7:9f:42:0a:96: 4d:1b:98:9c:7d:77:38:41:2d:17:2a:48:9a:c6:da:c6:65:22: 58:12:03:89:8d:7f:a7:7c:ec:21:c3:76:e7:87:9b:22:62:8c: 0d:18:06:88:e3:ee:ea:b5:c9:ad:6c:e7:9c:c7:67:70:ef:e3: 1a:03:b9:2e:03:0c:54:23:99:0c:ca:9a:85:84:05:3a:e7:a8: c0:db:8e:bd:24:b7:16:22:9b:cb:b9:14:c9:2a:84:45:ba:05: 76:57:24:15:7f:ba:3d:e0:0c:74:d7:82:0d:85:8d:c8:cd:84: dc:a8:b6:b2:81:9c:26:6a:17:6a:10:46:52:73:ee:0b:34:a9: 73:e0:9c:87:d9:a1:75:76:f4:b7:2e:00:d1:ec:79:d0:9e:82: 94:d3:1e:45:ba:20:23:3d:1a:69:00:7b:81:d5:42:cf:ce:53: 47:34:c3:8d:8e:d3:93:78:99:27:5a:a2:c6:47:bd:c4:8c:13: a3:5e:7e:8b:33:47:b9:08:ad:e6:84:30:a6:63:d2:1c:97:89: 8c:38:c4:c6:19:0e:2f:54:5a:f0:b9:fb:b8:7a:e8:cf:2f:a7: 89:ab:e1:2a:f3:47:68:9a:fb:aa:79:5b:d6:ee:32:8a:97:34: 7c:dc:2d:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZT87O3uxztf7ZQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk OGRjZmQwMDgtZWI0NC00Zjc3LWFmNDQtMzg1N2QyZDNkZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgCxq4AiY1ERVcR2verg1DgUExNBv04+8G3u Nwe5mxMnMa8MIJqiQB9QdPZ0viHWq1Ztl+Sl5xOh0gONn0fWx2JxXd+wzCyKt782 4CwuaZrLw8TI0W1JLGreJVfrqde7x6VTRHIqTi75DZMjXHVev5j3lfiuQc0OgZe0 kZNC7J4qUom6B5Q8OnTjkXP4SzuJU00OwvrswbB+b1LmEp/DZCYre8NWVgxY6raJ M4ykor8yq95v2G9CRCVIO9CkkF2N9xODHA7LlJBKcQL8yw8HN8ALgolWkXu6/eag 4IGAqPpsB52WX0ziS12ZA9clgGo/NN/z1Ro6Z/6YIJoBvAjdrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYGR8jW84x2IZBZC7swdrlZ1zPWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODVhNmNmMjEtMjA1Ni0z YTQxLWI4YmQtZDAxNjA0MmE4MDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLK/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGB23mQWOc//zNDD62nn0IKlk0bmJx9dzhBLRcqSJrG2sZlIlgSA4mN f6d87CHDdueHmyJijA0YBojj7uq1ya1s55zHZ3Dv4xoDuS4DDFQjmQzKmoWEBTrn qMDbjr0ktxYim8u5FMkqhEW6BXZXJBV/uj3gDHTXgg2FjcjNhNyotrKBnCZqF2oQ RlJz7gs0qXPgnIfZoXV29LcuANHsedCegpTTHkW6ICM9GmkAe4HVQs/OU0c0w42O 05N4mSdaosZHvcSME6NefoszR7kIreaEMKZj0hyXiYw4xMYZDi9UWvC5+7h66M8v p4mr4SrzR2ia+6p5W9buMoqXNHzcLWM= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:27 2025 by rpki-client