$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/88f50b68-e113-32d5-a451-470c4836caa1.roa File: 88f50b68-e113-32d5-a451-470c4836caa1.roa (raw, json) Hash identifier: VNelARH7IvFvQjwMuOKf9u9X2lNOoL9ImlhhsmxHfRY= Subject key identifier: B1:59:CC:A3:69:68:E2:C9:41:58:C4:DF:84:AA:1A:79:0E:C0:95:81 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B2331922093B48DFDBF80D4C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/88f50b68-e113-32d5-a451-470c4836caa1.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:92:20:93:b4:8d:fd:bf:80:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=12e63d3c-2ee2-46c6-86d8-5aa99119867f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bc:2e:f8:1c:ed:49:18:01:84:d8:e8:66:66: e0:56:1f:ac:fa:2d:a1:f2:1e:54:35:4c:ed:a6:07: b5:6c:88:35:9d:e2:61:b9:7a:6e:4e:6f:99:b2:52: d7:2f:c2:4e:72:ad:9e:42:81:14:51:c9:74:f3:26: 9b:7d:4c:d0:06:c0:0c:6c:d4:62:0b:13:5d:7d:da: 4a:de:f2:56:16:2a:3f:17:5f:28:42:83:5f:3d:20: 97:28:18:de:11:05:c2:74:3e:16:71:b8:bc:61:ba: fd:1f:85:14:48:8f:dd:1d:48:aa:d9:e0:28:89:9f: 56:e7:9f:66:d8:28:d0:bd:b6:7c:ff:bc:94:01:e5: d0:bb:6e:52:bb:c4:b5:0a:32:3c:a3:e2:f9:e4:f3: e2:fd:31:4f:54:19:f9:4d:99:b0:d4:20:94:65:c5: a4:77:6b:cf:43:fa:cb:db:84:5c:4a:99:52:c6:f2: d4:11:b1:96:9a:86:d9:2a:ae:5a:cd:55:8d:dd:d8: 53:75:fb:be:98:5f:ec:d9:92:dc:e8:c1:a2:55:a8: b1:34:94:93:14:f4:ef:33:29:cf:8c:8b:9d:0a:a6: da:d5:47:4f:b7:dd:6f:7e:5a:a0:5b:a2:db:dc:32: 9e:a3:a8:ac:22:da:69:8b:74:1b:4a:64:0d:12:ae: d9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:59:CC:A3:69:68:E2:C9:41:58:C4:DF:84:AA:1A:79:0E:C0:95:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/88f50b68-e113-32d5-a451-470c4836caa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:9f:29:ca:b7:7c:09:32:b1:a2:d9:6d:ba:3b:cc:ff:6a:03: cc:62:4a:27:47:5a:e6:9b:d2:33:30:f2:1e:67:3b:73:f0:15: f9:e1:cb:76:24:6d:87:9e:07:d7:7e:34:14:83:8f:30:c5:cd: ab:d0:1b:5f:3f:42:33:64:c9:c9:22:18:f4:c2:7e:53:af:97: 6e:cf:37:d4:6b:70:57:b8:0f:d4:ce:67:1b:1d:94:1e:b8:b1: db:66:e7:35:79:64:39:59:7e:f3:f6:9b:74:9f:92:89:98:6f: f5:cc:62:81:ce:6a:01:b4:60:7a:eb:70:05:84:de:d0:de:ce: 80:64:e3:39:43:e8:05:ab:7e:5a:bd:2f:cf:e4:7e:8f:e6:85: cb:b8:d2:ae:99:70:2f:95:be:25:af:87:f9:ad:c6:f1:e6:2e: 07:d1:13:d7:32:7d:ae:ee:ae:c0:16:9f:47:a2:93:e9:2c:88: c5:66:e4:ca:e2:e9:8b:b8:ca:18:49:03:f8:f9:e8:87:d4:04: 93:32:e4:1b:d6:3b:bb:fd:d9:86:e9:65:d3:f9:ef:81:33:af: ef:90:33:9b:aa:37:14:f2:ac:a2:24:a9:b4:68:83:18:c3:db: f6:af:65:8c:65:bf:47:b1:73:43:7e:d9:d9:4d:e6:36:d3:6f: ec:9f:1c:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZIgk7SN/b+A1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk MTJlNjNkM2MtMmVlMi00NmM2LTg2ZDgtNWFhOTkxMTk4NjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLwu+BztSRgBhNjoZmbgVh+s+i2h8h5UNUzt pge1bIg1neJhuXpuTm+ZslLXL8JOcq2eQoEUUcl08yabfUzQBsAMbNRiCxNdfdpK 3vJWFio/F18oQoNfPSCXKBjeEQXCdD4Wcbi8Ybr9H4UUSI/dHUiq2eAoiZ9W559m 2CjQvbZ8/7yUAeXQu25Su8S1CjI8o+L55PPi/TFPVBn5TZmw1CCUZcWkd2vPQ/rL 24RcSplSxvLUEbGWmobZKq5azVWN3dhTdfu+mF/s2ZLc6MGiVaixNJSTFPTvMynP jIudCqba1UdPt91vflqgW6Lb3DKeo6isItppi3QbSmQNEq7ZGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFZzKNpaOLJQVjE34SqGnkOwJWBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODhmNTBiNjgtZTExMy0z MmQ1LWE0NTEtNDcwYzQ4MzZjYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACufKcq3fAkysaLZbbo7zP9qA8xiSidHWuab0jMw8h5nO3PwFfnhy3Yk bYeeB9d+NBSDjzDFzavQG18/QjNkyckiGPTCflOvl27PN9RrcFe4D9TOZxsdlB64 sdtm5zV5ZDlZfvP2m3SfkomYb/XMYoHOagG0YHrrcAWE3tDezoBk4zlD6AWrflq9 L8/kfo/mhcu40q6ZcC+VviWvh/mtxvHmLgfRE9cyfa7ursAWn0eik+ksiMVm5Mri 6Yu4yhhJA/j56IfUBJMy5BvWO7v92YbpZdP574Ezr++QM5uqNxTyrKIkqbRogxjD 2/avZYxlv0exc0N+2dlN5jbTb+yfHBs= -----END CERTIFICATE-----Generated at Fri Oct 17 08:44:56 2025 by rpki-client