$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7989e3c-b727-32b3-a17e-85c7c99d3b60.roa File: a7989e3c-b727-32b3-a17e-85c7c99d3b60.roa (raw, json) Hash identifier: zQfZswzkNOJBZJ+udrDqQbXycODr78xeywhp8dgoUAg= Subject key identifier: D9:1E:BB:67:DD:56:5F:8B:39:EB:DE:3E:C3:0B:F1:6B:DF:E3:21:3E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B23318E0FC3EBC8930B163280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7989e3c-b727-32b3-a17e-85c7c99d3b60.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:8e:0f:c3:eb:c8:93:0b:16:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=d3cf2383-3a2a-4a54-bdc0-7b50d0535aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:54:17:6f:db:51:82:9d:52:dc:1f:dc:c1:4b: 1a:61:cf:14:53:60:96:77:b0:96:2e:50:96:bd:4e: ee:85:00:ad:cb:1c:3b:67:96:96:1a:b9:8f:79:c3: b9:eb:c7:fe:48:1c:9f:fb:83:e6:6f:1b:30:85:12: b0:e2:e1:75:97:ae:12:e1:b8:f4:41:62:90:88:9e: f8:bc:7a:05:2e:38:6d:18:1d:91:88:7d:21:ad:bc: c5:82:3c:09:95:6f:54:c2:95:14:88:a5:eb:88:64: df:33:f7:f0:bd:fa:2b:85:19:57:f2:a8:98:fa:f9: 7c:18:f9:c9:a3:a2:bd:1c:ce:d7:64:ad:a0:ee:21: c4:01:6c:45:92:2f:0c:02:9d:f1:64:d4:fe:5f:3f: 0c:ba:df:aa:31:5f:ec:14:c1:a9:bb:5a:bf:80:2d: 1a:43:6f:13:30:53:5a:a7:e9:48:82:0c:0b:86:37: d0:d0:2a:67:47:08:1b:32:68:95:84:1f:d6:69:73: 4d:6b:49:91:a5:96:a7:38:f3:1a:2a:18:71:33:3d: 3b:e4:28:eb:3e:a1:33:b6:2d:51:51:18:5c:82:b3: 16:e2:b5:99:63:cd:4e:ad:40:36:c3:a7:ef:b6:dc: 90:7e:fe:63:69:98:12:95:c3:b2:ca:64:22:bd:c0: 50:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1E:BB:67:DD:56:5F:8B:39:EB:DE:3E:C3:0B:F1:6B:DF:E3:21:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7989e3c-b727-32b3-a17e-85c7c99d3b60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:55:9b:93:00:06:27:7b:48:ba:ff:27:52:a6:72:08:52:9b: e1:fe:91:2e:8c:b5:3e:ed:bd:a4:be:5e:66:68:42:ec:91:80: a5:76:b2:26:a0:40:c8:f7:a2:1d:6d:1c:5c:17:de:b4:85:b0: 6b:46:93:c2:ba:d8:b6:31:ee:5f:89:f1:d3:3a:c5:d8:68:ec: 3a:d3:7f:b3:a7:8c:83:28:99:c5:e5:b9:75:4a:93:7c:a6:4c: 74:89:b9:ec:f2:99:65:d6:0c:d2:d1:bd:bc:df:96:80:5c:e5: a7:5a:fe:aa:00:ff:3e:70:e6:c1:91:a5:68:4d:3c:c8:9b:49: 16:e8:5c:03:55:7b:e5:e9:47:7c:7e:ce:2c:bb:e7:cb:26:65: 4b:cc:5e:a8:27:ec:9f:bc:d8:e3:ea:9f:e5:36:5f:b7:6b:01: e4:c9:ab:cc:be:2c:71:bb:ec:9e:54:8a:9f:31:35:97:06:0b: 98:90:57:44:b2:1d:e3:e8:b6:4d:f0:78:20:1f:17:bd:54:71: 9a:7d:50:9a:0e:91:e6:ab:19:a0:3c:29:3c:d4:6a:74:39:b6: 8e:80:dd:b2:7c:16:0f:25:f5:f7:33:69:ae:43:6f:7a:db:cb: 29:7e:a8:29:5e:b4:ce:9e:89:47:57:8d:3b:83:34:bb:74:92: f4:63:87:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMY4Pw+vIkwsWMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk ZDNjZjIzODMtM2EyYS00YTU0LWJkYzAtN2I1MGQwNTM1YWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVQXb9tRgp1S3B/cwUsaYc8UU2CWd7CWLlCW vU7uhQCtyxw7Z5aWGrmPecO568f+SByf+4PmbxswhRKw4uF1l64S4bj0QWKQiJ74 vHoFLjhtGB2RiH0hrbzFgjwJlW9UwpUUiKXriGTfM/fwvforhRlX8qiY+vl8GPnJ o6K9HM7XZK2g7iHEAWxFki8MAp3xZNT+Xz8Mut+qMV/sFMGpu1q/gC0aQ28TMFNa p+lIggwLhjfQ0CpnRwgbMmiVhB/WaXNNa0mRpZanOPMaKhhxMz075CjrPqEzti1R URhcgrMW4rWZY81OrUA2w6fvttyQfv5jaZgSlcOyymQivcBQswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkeu2fdVl+LOevePsML8Wvf4yE+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTc5ODllM2MtYjcyNy0z MmIzLWExN2UtODVjN2M5OWQzYjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVVm5MABid7SLr/J1KmcghSm+H+kS6MtT7tvaS+XmZoQuyRgKV2siag QMj3oh1tHFwX3rSFsGtGk8K62LYx7l+J8dM6xdho7DrTf7OnjIMomcXluXVKk3ym THSJuezymWXWDNLRvbzfloBc5ada/qoA/z5w5sGRpWhNPMibSRboXANVe+XpR3x+ ziy758smZUvMXqgn7J+82OPqn+U2X7drAeTJq8y+LHG77J5Uip8xNZcGC5iQV0Sy HePotk3weCAfF71UcZp9UJoOkearGaA8KTzUanQ5to6A3bJ8Fg8l9fczaa5Db3rb yyl+qCletM6eiUdXjTuDNLt0kvRjh3o= -----END CERTIFICATE-----Generated at Fri Oct 17 10:47:00 2025 by rpki-client