$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c98a701b-7bc9-3bad-a939-be22323e522c.roa File: c98a701b-7bc9-3bad-a939-be22323e522c.roa (raw, json) Hash identifier: zJ2QBM/LUFnAgHdxvOz8/wyGKtrtTnCW4WPjzUCxcAw= Subject key identifier: 60:52:F6:9F:11:9A:ED:02:EB:CD:4D:DD:3F:D8:26:8F:58:A8:76:4E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B23319410994EEDBF401D6280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c98a701b-7bc9-3bad-a939-be22323e522c.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:94:10:99:4e:ed:bf:40:1d:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=7950a36f-728e-4692-bd29-bd5056c99e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d8:6e:fd:f7:3c:56:5f:11:f2:60:9f:08:50: 41:9f:78:c4:58:ca:fd:b1:0d:7d:28:2d:c5:4c:09: 64:ba:94:cd:72:f5:30:c6:6d:33:45:44:43:c7:74: 7b:e4:ab:30:69:e8:f6:6d:d9:c0:5b:35:9e:33:c2: 7f:6d:41:33:dd:e0:3f:d1:f8:e9:47:e8:df:52:e7: ed:05:88:05:b0:3d:0c:a9:ed:5b:88:53:69:ce:1f: 35:73:9e:30:dc:23:0a:1e:2f:18:7f:af:53:fd:20: 19:99:d9:ba:fb:73:25:59:ea:c1:54:1b:25:b3:72: ad:6f:17:a8:76:4a:5f:36:0d:a1:33:03:38:b0:c8: 62:83:fe:7c:f0:3f:d4:e6:66:e9:66:73:dc:e3:61: f1:5f:3a:06:02:5d:34:41:4a:77:dd:db:71:04:61: 7a:47:69:b8:35:59:52:58:e8:9e:9a:d0:c1:93:78: 6e:25:af:09:35:d5:a9:95:42:9f:ab:e2:3a:3e:a1: d8:99:11:ad:b6:dc:0a:6d:8b:10:2e:1b:f5:3a:97: 96:bd:df:8a:2f:07:19:96:f8:9b:2c:16:e2:01:e3: c9:2d:49:44:5c:61:d2:39:fc:49:01:7c:b5:e3:ed: ad:c5:cb:24:ce:ff:5a:af:9d:03:1a:a4:66:dd:1b: f6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:52:F6:9F:11:9A:ED:02:EB:CD:4D:DD:3F:D8:26:8F:58:A8:76:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c98a701b-7bc9-3bad-a939-be22323e522c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:cf:18:bb:10:bf:59:ee:e5:c5:e8:3b:a8:c8:cd:06:75:1b: 8f:02:cd:dc:7d:f0:67:0d:92:29:5c:48:f0:a1:0f:58:3a:43: cd:b3:83:0c:f8:48:44:64:5e:bc:13:69:c6:6e:79:14:f6:0b: 9d:ae:62:d1:57:d4:84:61:60:1a:5c:df:89:89:bc:da:9d:c3: 23:dc:92:da:fd:3c:e4:14:a9:06:d5:a5:e7:a1:ae:3f:c5:eb: 64:03:40:93:c0:5c:a1:b3:f6:64:91:f5:bb:62:27:11:e8:d1: e2:67:f7:b9:3d:b2:e8:51:bb:69:4a:62:55:3d:b3:15:31:da: aa:32:0f:9a:8e:f7:52:02:e2:cb:29:ef:ba:25:61:64:f1:ba: 72:84:d4:f1:5d:64:a4:f9:1b:ff:2b:55:3a:0d:3b:1d:ae:bc: 5d:e0:48:5a:46:4a:6c:17:48:c6:72:c6:e7:5c:8a:12:12:c6: 20:d9:c0:f0:1c:78:ed:04:bd:51:32:b4:cb:9f:ad:cc:12:cf: 5a:ea:07:ae:62:d9:1e:db:7f:62:ef:3c:38:ab:c6:6d:e8:26: 90:48:29:32:83:b4:45:9e:16:d4:18:ff:6e:d6:95:b9:6e:8e: a5:1e:e3:2c:ea:10:aa:0d:a8:d6:99:06:c8:e7:7d:66:38:5a: 4a:95:42:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZQQmU7tv0AdYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk Nzk1MGEzNmYtNzI4ZS00NjkyLWJkMjktYmQ1MDU2Yzk5ZTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9hu/fc8Vl8R8mCfCFBBn3jEWMr9sQ19KC3F TAlkupTNcvUwxm0zRURDx3R75Kswaej2bdnAWzWeM8J/bUEz3eA/0fjpR+jfUuft BYgFsD0Mqe1biFNpzh81c54w3CMKHi8Yf69T/SAZmdm6+3MlWerBVBsls3Ktbxeo dkpfNg2hMwM4sMhig/588D/U5mbpZnPc42HxXzoGAl00QUp33dtxBGF6R2m4NVlS WOiemtDBk3huJa8JNdWplUKfq+I6PqHYmRGtttwKbYsQLhv1OpeWvd+KLwcZlvib LBbiAePJLUlEXGHSOfxJAXy14+2txcskzv9ar50DGqRm3Rv20wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBS9p8Rmu0C681N3T/YJo9YqHZOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzk4YTcwMWItN2JjOS0z YmFkLWE5MzktYmUyMjMyM2U1MjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjPGLsQv1nu5cXoO6jIzQZ1G48Czdx98GcNkilcSPChD1g6Q82zgwz4 SERkXrwTacZueRT2C52uYtFX1IRhYBpc34mJvNqdwyPcktr9POQUqQbVpeehrj/F 62QDQJPAXKGz9mSR9btiJxHo0eJn97k9suhRu2lKYlU9sxUx2qoyD5qO91IC4ssp 77olYWTxunKE1PFdZKT5G/8rVToNOx2uvF3gSFpGSmwXSMZyxudcihISxiDZwPAc eO0EvVEytMufrcwSz1rqB65i2R7bf2LvPDirxm3oJpBIKTKDtEWeFtQY/27Wlblu jqUe4yzqEKoNqNaZBsjnfWY4WkqVQlY= -----END CERTIFICATE-----Generated at Fri Oct 17 08:42:26 2025 by rpki-client