$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9664c027-7801-36ef-8261-6bb6e855a421.roa File: 9664c027-7801-36ef-8261-6bb6e855a421.roa (raw, json) Hash identifier: Zl+cSjp9lkoaNl/gM+xt0+JN92B6YtN8XNOzDTJ77Xo= Subject key identifier: 16:33:D3:C1:33:1D:F1:22:EB:EE:7D:2B:FF:C1:C6:FF:A7:2F:E7:70 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B2331944A0A7CC47A2FADB260 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9664c027-7801-36ef-8261-6bb6e855a421.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:94:4a:0a:7c:c4:7a:2f:ad:b2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=b4848305-7a5d-4eef-909b-360322f38cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:94:7c:73:ca:57:fb:8b:60:ed:7e:01:a4:f5: 05:52:f3:18:b3:1e:ea:3b:10:35:54:5c:2a:e6:7b: b4:c5:49:a1:ca:4a:6a:96:89:ec:8a:f5:99:24:9b: 45:bd:74:03:f2:58:3c:8a:af:f9:d5:56:ee:88:72: 70:cc:22:e1:40:35:0a:a0:e1:1d:74:c7:b9:ba:2e: 7c:6a:c5:95:eb:c6:22:1c:1b:6d:85:00:ed:60:c7: 1d:9b:d3:88:2f:d0:7a:cd:0e:8f:4c:bb:b5:f4:72: c4:bc:b3:64:58:d4:d1:c7:42:c4:f9:b9:3a:0a:5f: 7d:c8:9b:ba:c8:10:b3:37:17:c1:8d:70:02:f8:37: 7a:b7:56:d5:2b:74:7e:b7:62:b5:22:62:73:26:5b: 1f:33:75:be:df:7a:34:12:3e:85:4a:b1:44:5e:4b: 50:83:da:a0:56:a1:23:e5:95:94:10:3a:fc:70:fe: 37:3c:77:9e:30:fb:11:c6:a2:b1:29:0a:fa:05:a9: 5a:93:86:a8:ee:a3:f1:bc:3d:63:cf:bd:2d:bf:ce: d5:c1:4f:28:66:12:56:28:10:c2:8f:20:0a:9c:af: ee:84:9e:36:12:44:a0:bc:ba:c0:27:25:a4:bf:58: 16:0d:5d:1f:c4:24:c1:fa:32:3c:48:ce:31:96:2a: ec:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:33:D3:C1:33:1D:F1:22:EB:EE:7D:2B:FF:C1:C6:FF:A7:2F:E7:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9664c027-7801-36ef-8261-6bb6e855a421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:07:d0:4b:ec:81:ca:5d:ae:79:02:8a:fa:a2:0a:5c:d7:86: 43:aa:1f:42:dd:d1:ed:a6:49:bf:a7:18:f8:f1:6d:a3:b5:59: d9:07:5a:b5:01:f6:f6:f9:31:f3:06:e2:57:d2:be:7d:b6:79: 18:0a:d1:3d:2a:d4:0e:de:5f:e5:9a:dd:6d:76:54:7f:d0:48: 0e:02:5f:32:fb:66:08:78:c5:e2:31:5d:74:87:65:34:8a:b3: 3d:e4:41:c4:56:78:44:cc:8c:10:f2:bb:3c:c7:18:7d:ed:66: 90:24:0e:d7:e1:49:b0:0d:96:36:61:59:8d:65:16:3a:73:45: f8:1c:73:f0:4f:98:7c:e7:53:cb:6e:46:78:5a:ee:6a:e9:e2: 45:8d:0c:d7:0e:d1:c1:cd:25:c3:3c:74:4d:b5:90:88:c8:ab: 1b:82:04:b2:19:01:0c:c5:ab:47:2d:cf:91:44:33:bc:5d:a7: dd:fc:41:27:9b:89:c9:e0:14:0b:9a:00:3a:26:a6:ad:00:0c: 2c:43:9d:c2:94:ca:67:cd:c5:22:48:cf:38:d2:77:28:ae:e4: f5:09:64:96:6e:00:eb:7e:d4:c4:39:e3:ef:f5:b0:5f:6b:ae: 24:d0:4a:b3:67:4a:65:a9:8d:05:6e:8e:4d:b6:68:02:58:c9: 4f:8d:b8:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZRKCnzEei+tsmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk YjQ4NDgzMDUtN2E1ZC00ZWVmLTkwOWItMzYwMzIyZjM4Y2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZR8c8pX+4tg7X4BpPUFUvMYsx7qOxA1VFwq 5nu0xUmhykpqlonsivWZJJtFvXQD8lg8iq/51VbuiHJwzCLhQDUKoOEddMe5ui58 asWV68YiHBtthQDtYMcdm9OIL9B6zQ6PTLu19HLEvLNkWNTRx0LE+bk6Cl99yJu6 yBCzNxfBjXAC+Dd6t1bVK3R+t2K1ImJzJlsfM3W+33o0Ej6FSrFEXktQg9qgVqEj 5ZWUEDr8cP43PHeeMPsRxqKxKQr6Balak4ao7qPxvD1jz70tv87VwU8oZhJWKBDC jyAKnK/uhJ42EkSgvLrAJyWkv1gWDV0fxCTB+jI8SM4xlirsmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYz08EzHfEi6+59K//Bxv+nL+dwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTY2NGMwMjctNzgwMS0z NmVmLTgyNjEtNmJiNmU4NTVhNDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcH0EvsgcpdrnkCivqiClzXhkOqH0Ld0e2mSb+nGPjxbaO1WdkHWrUB 9vb5MfMG4lfSvn22eRgK0T0q1A7eX+Wa3W12VH/QSA4CXzL7Zgh4xeIxXXSHZTSK sz3kQcRWeETMjBDyuzzHGH3tZpAkDtfhSbANljZhWY1lFjpzRfgcc/BPmHznU8tu Rnha7mrp4kWNDNcO0cHNJcM8dE21kIjIqxuCBLIZAQzFq0ctz5FEM7xdp938QSeb icngFAuaADompq0ADCxDncKUymfNxSJIzzjSdyiu5PUJZJZuAOt+1MQ54+/1sF9r riTQSrNnSmWpjQVujk22aAJYyU+NuNg= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:21 2025 by rpki-client