$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e6bf6246-51cb-32e6-96f6-bbb17c7eddf0.roa File: e6bf6246-51cb-32e6-96f6-bbb17c7eddf0.roa (raw, json) Hash identifier: BvUsTH3/hDcjiBwzYKTDyT7TiIv1vFZXVK87Q6MXwqY= Subject key identifier: 1E:16:B2:29:BF:F8:B1:B1:67:CB:F8:0C:BD:72:3F:19:86:FE:CA:2F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B3987151D4E305BF26B8AD400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e6bf6246-51cb-32e6-96f6-bbb17c7eddf0.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:15:1d:4e:30:5b:f2:6b:8a:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=3c4c6a85-5fe6-4f1e-846b-8c45d9363fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:69:0d:9b:39:21:41:54:fb:f3:eb:7c:dc:ff: 8e:4e:c9:57:3d:9a:24:f0:fb:cd:17:80:d7:fc:d3: 46:04:95:a9:7e:45:b3:1e:4c:50:ee:ab:c8:a2:0d: ab:30:84:14:df:76:18:2b:72:b1:95:dd:55:b2:95: 28:70:e5:4e:b9:05:32:36:55:30:73:c8:1f:e9:c3: bb:c6:6c:12:5e:24:21:b2:b0:32:4b:88:f7:8f:a5: 32:65:7e:3c:25:b1:e8:2d:59:cc:8b:ca:75:b7:f4: c1:ff:5f:0e:d5:6a:90:00:81:17:fe:88:0e:e3:31: 0b:01:48:fe:84:80:8a:53:22:58:e7:44:44:1f:00: cf:12:80:7b:61:79:1d:5a:b2:c0:a1:41:a9:b0:75: 57:55:de:96:78:b0:c5:4b:93:8e:35:b6:c7:14:b0: 32:e4:72:d6:30:b0:36:22:6c:5e:42:7b:0a:10:1e: fd:b0:5f:3d:48:3d:0c:a9:7f:99:c2:fe:a1:1a:58: 77:3b:d8:c6:f3:c0:cf:56:c3:3c:c3:63:5d:10:f0: 5c:ae:b5:d1:aa:1f:23:1a:65:d1:03:e5:e6:20:99: d2:7f:83:fa:87:5c:10:20:64:7a:bd:b1:95:df:49: 1c:84:01:af:5a:f2:af:0e:73:21:91:b6:cb:63:f7: 15:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:16:B2:29:BF:F8:B1:B1:67:CB:F8:0C:BD:72:3F:19:86:FE:CA:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e6bf6246-51cb-32e6-96f6-bbb17c7eddf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:21:66:fd:f9:59:a2:45:a2:dd:9a:b0:d5:ac:0e:d7:5b:1c: ed:f8:86:99:1e:0c:4d:17:70:ee:e8:6f:c5:e7:ad:de:4f:c0: 67:66:90:21:74:82:a9:76:cc:8c:48:73:f2:76:87:3b:f6:ae: e4:8b:43:84:c9:12:0b:6b:ef:bf:b9:c4:d0:b6:a2:69:5c:00: cc:0c:c4:16:4a:10:8f:6c:aa:b3:0e:58:eb:a6:ef:f9:8f:ec: 60:ec:fb:83:a0:89:b6:a7:7e:c1:1a:93:c7:55:a1:d5:0e:5d: ca:15:cb:67:77:e9:f6:18:b7:20:93:5f:57:44:74:3e:84:9d: 4c:93:88:50:ad:7a:17:6a:a4:e1:c1:5c:e3:45:35:b8:52:dd: 0a:b2:ce:e0:93:53:df:0c:53:ae:3d:90:de:a7:31:86:c3:2d: 97:a0:2a:a1:1b:98:8c:bc:25:88:9f:d0:3d:c5:b3:62:9d:27: f7:ad:1c:17:45:bc:74:a9:26:57:81:70:16:e8:cd:d8:77:e1: 96:59:e6:10:cc:e0:c4:4b:63:85:16:3d:29:38:ad:f2:2d:eb: 1c:19:e2:48:ec:c4:48:61:27:2e:3f:67:7c:68:41:91:33:2c: 11:d7:af:49:ad:aa:43:d1:0e:c5:38:69:cb:fd:40:fd:c1:f9: 28:f0:cb:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hxUdTjBb8muK1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk M2M0YzZhODUtNWZlNi00ZjFlLTg0NmItOGM0NWQ5MzYzZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2kNmzkhQVT78+t83P+OTslXPZok8PvNF4DX /NNGBJWpfkWzHkxQ7qvIog2rMIQU33YYK3Kxld1VspUocOVOuQUyNlUwc8gf6cO7 xmwSXiQhsrAyS4j3j6UyZX48JbHoLVnMi8p1t/TB/18O1WqQAIEX/ogO4zELAUj+ hICKUyJY50REHwDPEoB7YXkdWrLAoUGpsHVXVd6WeLDFS5OONbbHFLAy5HLWMLA2 ImxeQnsKEB79sF89SD0MqX+Zwv6hGlh3O9jG88DPVsM8w2NdEPBcrrXRqh8jGmXR A+XmIJnSf4P6h1wQIGR6vbGV30kchAGvWvKvDnMhkbbLY/cVywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4Wsim/+LGxZ8v4DL1yPxmG/sovMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTZiZjYyNDYtNTFjYi0z MmU2LTk2ZjYtYmJiMTdjN2VkZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAohZv35WaJFot2asNWsDtdbHO34hpkeDE0XcO7ob8Xnrd5PwGdmkCF0 gql2zIxIc/J2hzv2ruSLQ4TJEgtr77+5xNC2omlcAMwMxBZKEI9sqrMOWOum7/mP 7GDs+4OgibanfsEak8dVodUOXcoVy2d36fYYtyCTX1dEdD6EnUyTiFCtehdqpOHB XONFNbhS3QqyzuCTU98MU649kN6nMYbDLZegKqEbmIy8JYif0D3Fs2KdJ/etHBdF vHSpJleBcBbozdh34ZZZ5hDM4MRLY4UWPSk4rfIt6xwZ4kjsxEhhJy4/Z3xoQZEz LBHXr0mtqkPRDsU4acv9QP3B+Sjwyzs= -----END CERTIFICATE-----Generated at Fri Oct 17 08:47:41 2025 by rpki-client