$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa File: 211bf909-5b40-31a9-9871-addf1a48e134.roa (raw, json) Hash identifier: k+7BsDFihBhCIFRQAVdxamSxNhREg2oWKOPWwte7TNQ= Subject key identifier: 03:C0:65:B8:27:8B:AD:65:21:18:CE:78:4C:59:82:25:FC:A0:5D:77 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A841182BAD88A4D5522214480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 192.178.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:82:ba:d8:8a:4d:55:22:21:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=a2a6dbe0-2394-45c9-8602-48ecae88c53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8f:33:72:df:9a:d9:6a:0d:f0:15:88:ad:3e: bf:92:c7:b3:22:64:50:65:05:dd:60:ef:87:24:c1: 74:9c:2b:18:ca:89:30:24:9e:3f:6a:02:b9:65:b7: 5a:ae:8f:09:db:89:2c:b7:bb:aa:0c:dc:cc:0e:40: f2:2a:56:dc:89:f4:d8:76:a2:f9:01:eb:2a:70:93: 98:b2:f4:e6:11:f4:36:84:70:36:c3:3a:d9:6a:f3: ad:9b:07:42:4a:e0:f7:e9:34:16:54:46:6f:7c:10: f6:f5:bb:b1:97:43:fc:d7:81:54:7b:3e:91:f7:5d: d7:c0:fe:d1:e5:91:2e:9e:23:d9:eb:50:66:50:eb: b2:4e:a4:20:3e:4c:18:ba:a3:6f:b0:93:d9:e7:c5: a6:4c:f7:58:7d:cd:67:4c:a4:71:8c:ad:ef:d1:8d: fe:05:82:eb:55:50:7c:64:96:82:5c:e3:33:27:40: 23:fe:18:81:77:b0:ad:c7:80:9d:1e:53:cc:4d:4b: b7:f7:bd:cd:7a:f7:31:a0:67:fc:3b:7a:94:37:cd: 4b:02:61:3f:09:01:dc:66:cd:6b:b8:99:a0:d4:1c: 7c:ed:91:12:e8:ad:ba:39:47:75:e3:9e:63:83:2f: c4:1b:08:e9:53:55:e0:7f:ab:15:a4:73:50:6e:df: 9f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C0:65:B8:27:8B:AD:65:21:18:CE:78:4C:59:82:25:FC:A0:5D:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:3e:c1:e6:8e:70:41:32:12:1a:4d:33:40:13:fb:ff:2c:0e: 19:d5:5f:25:ed:ae:a1:6f:76:7d:ab:fa:ae:1c:f8:be:f5:ba: c7:be:fd:e6:f8:c6:aa:58:45:12:8f:b0:3e:0b:0d:ff:fa:95: da:79:cb:6d:b8:13:63:19:6a:c6:d9:44:95:2e:cb:57:21:ab: fb:ca:78:9c:d7:87:9c:5e:ea:0f:9f:b4:4d:54:96:f9:87:ce: f7:d7:cc:e9:a8:2c:ec:92:51:67:95:fa:e4:0f:f4:c9:f5:bc: 8a:24:61:c4:c9:9e:07:58:2b:22:3f:40:d3:f6:fc:1f:0c:dc: 0c:94:da:30:4e:2c:2c:16:26:e4:42:a5:18:f0:16:d5:00:56: 29:a4:e5:8a:49:eb:1b:37:da:16:82:b4:e6:77:07:97:94:4c: d3:06:a1:f1:72:46:65:4e:a1:82:df:17:76:9a:9c:13:15:6b: 85:b6:77:05:21:81:3e:4e:2b:9d:3a:f0:38:6a:88:85:19:ae: 9f:fe:c3:ca:4c:72:ab:a2:b3:68:d4:2c:de:35:7a:23:78:7c: d0:76:ee:87:91:fc:b6:fa:4a:9c:ba:30:d3:ce:b9:1a:3b:02: c1:00:f7:63:f1:95:e5:79:ef:73:fc:55:02:29:46:3c:ac:47: bd:83:2b:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYK62IpNVSIhRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YTJhNmRiZTAtMjM5NC00NWM5LTg2MDItNDhlY2FlODhjNTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI8zct+a2WoN8BWIrT6/ksezImRQZQXdYO+H JMF0nCsYyokwJJ4/agK5Zbdaro8J24kst7uqDNzMDkDyKlbcifTYdqL5AesqcJOY svTmEfQ2hHA2wzrZavOtmwdCSuD36TQWVEZvfBD29buxl0P814FUez6R913XwP7R 5ZEuniPZ61BmUOuyTqQgPkwYuqNvsJPZ58WmTPdYfc1nTKRxjK3v0Y3+BYLrVVB8 ZJaCXOMzJ0Aj/hiBd7Ctx4CdHlPMTUu3973NevcxoGf8O3qUN81LAmE/CQHcZs1r uJmg1Bx87ZES6K26OUd1455jgy/EGwjpU1Xgf6sVpHNQbt+fQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPAZbgni61lIRjOeExZgiX8oF13MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjExYmY5MDktNWI0MC0z MWE5LTk4NzEtYWRkZjFhNDhlMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLIqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8+weaOcEEyEhpNM0AT+/8sDhnVXyXtrqFvdn2r+q4c+L71use+/eb4 xqpYRRKPsD4LDf/6ldp5y224E2MZasbZRJUuy1chq/vKeJzXh5xe6g+ftE1UlvmH zvfXzOmoLOySUWeV+uQP9Mn1vIokYcTJngdYKyI/QNP2/B8M3AyU2jBOLCwWJuRC pRjwFtUAVimk5YpJ6xs32haCtOZ3B5eUTNMGofFyRmVOoYLfF3aanBMVa4W2dwUh gT5OK5068DhqiIUZrp/+w8pMcquis2jULN41eiN4fNB27oeR/Lb6Spy6MNPOuRo7 AsEA92PxleV573P8VQIpRjysR72DK4Y= -----END CERTIFICATE-----Generated at Mon Aug 4 15:32:32 2025 by rpki-client