$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfac38b0-5803-382f-94a4-bd9f8ed915a6.roa File: dfac38b0-5803-382f-94a4-bd9f8ed915a6.roa (raw, json) Hash identifier: QGN2j7frgV5N6cz2XC19aI3ffhGDUIPLGdTfkoIPFmk= Subject key identifier: 93:46:BC:D7:11:6E:83:B4:FF:B2:43:4E:4A:FA:E5:FA:4D:F9:DB:6A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B233194E8E5BAA6C332AC4D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfac38b0-5803-382f-94a4-bd9f8ed915a6.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:94:e8:e5:ba:a6:c3:32:ac:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=ff0a7465-9023-49f6-b5f9-89cee5f8983a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:86:93:a6:99:0e:72:5c:1a:65:b5:d3:e1:85: 33:17:b5:1e:16:93:06:88:cd:09:02:c7:d7:6e:7d: a6:d9:57:81:f3:69:73:d2:45:0f:3e:6c:77:57:97: 7d:65:52:56:b1:ab:3e:6b:00:a4:34:5d:f1:da:69: 7d:27:71:cf:c4:2b:69:e6:e2:0a:45:d0:3a:39:3b: 82:0f:05:c7:86:a4:fb:f7:ac:f1:b7:e6:fa:74:99: 2f:9f:ec:b7:d5:6c:47:9b:a1:97:52:a4:6d:c5:1f: 6a:f9:09:20:37:e3:28:70:a4:0b:df:c4:c0:7d:84: 4e:f1:21:80:de:45:01:f8:2f:b0:04:8f:43:8b:82: 5e:f2:a9:d1:d9:40:55:b6:9c:8d:05:fa:aa:8d:0a: 62:cd:47:46:67:29:4b:9e:78:5f:b2:d6:76:80:5a: 65:5b:6c:70:7a:5c:e6:26:d6:99:8f:7c:4c:77:e3: 0b:df:cd:69:92:d2:7e:5b:58:39:c8:5b:31:5c:c0: 51:48:d0:e8:c1:06:fb:be:b0:f4:04:8a:b4:04:49: 31:c6:19:d7:dd:4a:85:5a:c7:5d:89:3d:29:d7:23: 2a:2a:2b:8f:ba:ff:92:6b:a6:39:2c:a6:55:b6:5f: 97:c9:a4:cc:a7:d6:39:69:cb:10:bf:18:fc:b0:9f: cc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:46:BC:D7:11:6E:83:B4:FF:B2:43:4E:4A:FA:E5:FA:4D:F9:DB:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfac38b0-5803-382f-94a4-bd9f8ed915a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:fa:17:22:78:bc:a4:cd:2a:a4:81:73:28:89:75:85:07:a7: f2:fe:d4:3f:87:00:95:8f:5b:42:13:a4:df:85:51:fe:75:d7: eb:b6:df:53:70:80:57:99:4e:4d:e1:a4:24:fc:ea:90:4e:c5: b1:b1:ca:d0:ca:6c:7f:5a:01:d4:ef:89:66:b6:19:67:54:60: 01:84:71:27:49:4c:dc:e0:e3:76:0e:57:5c:1e:71:1b:cc:c3: 88:cf:24:03:bf:f1:67:31:8e:d3:cb:70:3e:df:6b:a4:b4:a0: 6a:88:fd:45:83:2c:44:f2:dd:08:83:8f:09:2a:6f:b6:4b:f4: 28:11:c9:d9:ee:13:92:10:7a:19:51:de:57:6f:5d:be:3c:2d: 90:1f:6c:34:9f:c8:19:ab:22:da:90:65:07:89:ff:22:dc:f5: a6:88:16:24:4e:e5:e6:45:90:a7:21:f9:6e:f4:e4:42:79:6b: 3c:7b:88:cf:c9:39:03:d4:dc:10:10:3d:e6:09:2b:44:7f:62: a4:44:bc:8e:dd:71:e2:be:02:28:24:dd:71:c9:c7:30:85:dc: 90:cb:4f:4a:ea:a1:da:c6:56:43:11:bd:53:2f:f6:3e:88:bc: 37:5b:bd:70:00:f9:60:fe:07:fc:12:47:6c:62:36:e4:18:58: 42:c9:01:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZTo5bqmwzKsTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk ZmYwYTc0NjUtOTAyMy00OWY2LWI1ZjktODljZWU1Zjg5ODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoaTppkOclwaZbXT4YUzF7UeFpMGiM0JAsfX bn2m2VeB82lz0kUPPmx3V5d9ZVJWsas+awCkNF3x2ml9J3HPxCtp5uIKRdA6OTuC DwXHhqT796zxt+b6dJkvn+y31WxHm6GXUqRtxR9q+QkgN+MocKQL38TAfYRO8SGA 3kUB+C+wBI9Di4Je8qnR2UBVtpyNBfqqjQpizUdGZylLnnhfstZ2gFplW2xwelzm JtaZj3xMd+ML381pktJ+W1g5yFsxXMBRSNDowQb7vrD0BIq0BEkxxhnX3UqFWsdd iT0p1yMqKiuPuv+Sa6Y5LKZVtl+XyaTMp9Y5acsQvxj8sJ/M/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNGvNcRboO0/7JDTkr65fpN+dtqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGZhYzM4YjAtNTgwMy0z ODJmLTk0YTQtYmQ5ZjhlZDkxNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID6FyJ4vKTNKqSBcyiJdYUHp/L+1D+HAJWPW0ITpN+FUf511+u231Nw gFeZTk3hpCT86pBOxbGxytDKbH9aAdTviWa2GWdUYAGEcSdJTNzg43YOV1wecRvM w4jPJAO/8WcxjtPLcD7fa6S0oGqI/UWDLETy3QiDjwkqb7ZL9CgRydnuE5IQehlR 3ldvXb48LZAfbDSfyBmrItqQZQeJ/yLc9aaIFiRO5eZFkKch+W705EJ5azx7iM/J OQPU3BAQPeYJK0R/YqREvI7dceK+Aigk3XHJxzCF3JDLT0rqodrGVkMRvVMv9j6I vDdbvXAA+WD+B/wSR2xiNuQYWELJAXA= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:45 2025 by rpki-client