$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d08f403e-ed94-3b66-9997-e619f6160283.roa File: d08f403e-ed94-3b66-9997-e619f6160283.roa (raw, json) Hash identifier: HGl4uYzFAgr9N3ALzcD+fTMu5WeHfC0lZJeKhwShq4s= Subject key identifier: B1:43:B1:70:A8:8F:B2:50:FC:15:21:68:A0:DC:04:CF:B9:4C:2C:F5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B41E71F13FF0C549D15126960 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d08f403e-ed94-3b66-9997-e619f6160283.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1f:13:ff:0c:54:9d:15:12:69:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=4d4d12a2-4b2a-4756-baae-9798be47ccba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:61:11:a8:3e:b0:6e:5b:64:89:32:c1:f3:76: 30:b7:87:57:6e:17:2d:ca:23:61:2c:50:d6:54:12: c9:77:4a:55:01:51:d1:a2:2f:2c:f9:e2:77:9e:88: 5c:b6:8e:50:22:96:07:da:df:59:d2:40:da:eb:e0: 04:0b:eb:4b:71:ca:05:f1:46:2e:06:59:b6:f4:3c: 31:30:56:c6:29:ce:db:f1:ba:7f:f5:a1:ba:37:ad: 89:2a:7e:33:c2:d4:52:b4:57:7c:16:97:a1:e2:cc: 59:78:bb:43:b1:be:17:ca:8e:72:60:fa:f4:8d:dd: 3f:5e:5a:9a:8b:ab:ea:b2:67:dd:eb:bd:f2:bd:4f: cd:65:12:81:b5:29:94:43:bd:01:1b:29:72:6a:18: ae:f6:51:cc:ec:87:13:9e:22:16:7c:43:14:0e:1e: 42:14:c3:11:f1:35:c9:8d:5f:fe:68:08:be:35:86: 15:e3:c4:8b:89:04:4a:b6:fb:92:e7:9e:4f:d5:38: a1:90:11:7e:e1:dc:28:db:81:f7:03:b2:eb:83:13: b8:06:e1:da:7e:8f:cb:41:b3:0d:c2:22:5c:2e:d7: 96:86:b0:e6:da:5d:eb:24:f7:ce:f2:12:be:00:41: a1:ae:e7:1c:6c:c0:36:55:0e:25:c2:88:e1:56:14: 47:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:43:B1:70:A8:8F:B2:50:FC:15:21:68:A0:DC:04:CF:B9:4C:2C:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d08f403e-ed94-3b66-9997-e619f6160283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:36:09:19:8f:08:bf:2f:f0:a0:95:81:f2:3b:e7:be:5a:a6: a4:bb:69:b8:89:fd:ba:7b:79:81:95:84:4e:8f:ce:ab:8b:85: 6a:64:ac:3b:f4:a8:53:7b:b6:46:7a:69:5c:89:b6:38:ff:ce: 0c:b5:5e:5b:4d:7a:89:ce:f3:b3:f5:3c:72:42:5b:99:d9:41: a5:17:6e:04:dd:00:bc:9c:2d:69:77:76:41:a2:1f:21:c5:70: 02:11:7a:ec:22:2f:f3:ac:5d:9f:49:fa:b0:25:15:58:e4:d0: 12:03:c0:2b:0e:a9:e9:d0:b4:25:08:e8:22:36:54:3b:27:24: 63:5c:78:22:3a:4a:23:2d:d3:6d:47:0c:6a:78:13:e5:84:e1: aa:d0:56:19:cc:14:cb:6a:99:f8:96:c1:cc:77:b5:2c:8b:6d: ee:2f:37:48:51:83:9b:34:ca:4f:66:b3:09:b6:f8:9f:96:9a: 32:15:8a:2e:8d:6e:b9:ca:34:ab:0a:bd:56:7e:8d:c7:a0:5f: 94:d7:19:9f:02:d5:25:16:4d:af:f4:b4:49:a8:8c:f7:8e:04: 41:b5:41:21:db:57:d0:f4:a0:23:2e:19:bd:40:fd:43:c3:1e: c7:b6:09:59:9b:7d:fe:c0:28:d4:03:3d:fd:35:cf:3d:32:a6: a0:ae:c5:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5x8T/wxUnRUSaWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NGQ0ZDEyYTItNGIyYS00NzU2LWJhYWUtOTc5OGJlNDdjY2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2ERqD6wbltkiTLB83Ywt4dXbhctyiNhLFDW VBLJd0pVAVHRoi8s+eJ3nohcto5QIpYH2t9Z0kDa6+AEC+tLccoF8UYuBlm29Dwx MFbGKc7b8bp/9aG6N62JKn4zwtRStFd8Fpeh4sxZeLtDsb4Xyo5yYPr0jd0/Xlqa i6vqsmfd673yvU/NZRKBtSmUQ70BGylyahiu9lHM7IcTniIWfEMUDh5CFMMR8TXJ jV/+aAi+NYYV48SLiQRKtvuS555P1TihkBF+4dwo24H3A7LrgxO4BuHafo/LQbMN wiJcLteWhrDm2l3rJPfO8hK+AEGhruccbMA2VQ4lwojhVhRHAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFDsXCoj7JQ/BUhaKDcBM+5TCz1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDA4ZjQwM2UtZWQ5NC0z YjY2LTk5OTctZTYxOWY2MTYwMjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADM2CRmPCL8v8KCVgfI7575apqS7abiJ/bp7eYGVhE6PzquLhWpkrDv0 qFN7tkZ6aVyJtjj/zgy1XltNeonO87P1PHJCW5nZQaUXbgTdALycLWl3dkGiHyHF cAIReuwiL/OsXZ9J+rAlFVjk0BIDwCsOqenQtCUI6CI2VDsnJGNceCI6SiMt021H DGp4E+WE4arQVhnMFMtqmfiWwcx3tSyLbe4vN0hRg5s0yk9mswm2+J+WmjIVii6N brnKNKsKvVZ+jcegX5TXGZ8C1SUWTa/0tEmojPeOBEG1QSHbV9D0oCMuGb1A/UPD Hse2CVmbff7AKNQDPf01zz0ypqCuxbQ= -----END CERTIFICATE-----Generated at Fri Oct 17 08:44:59 2025 by rpki-client