$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d72bec8-a1a0-3a48-b226-ac1996fbd649.roa File: 2d72bec8-a1a0-3a48-b226-ac1996fbd649.roa (raw, json) Hash identifier: hxSggqPTx2TDVfcxPyjTjPa+A4LK9HsWwi2wxrtb9sA= Subject key identifier: B8:4B:5C:E3:17:36:E7:31:B3:52:1D:74:88:79:D7:71:ED:1E:53:AC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584AA1621B780D5487FFAA29E800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d72bec8-a1a0-3a48-b226-ac1996fbd649.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 15169 IP address blocks: 192.178.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:62:1b:78:0d:54:87:ff:aa:29:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=10911943-86dc-41bc-8b55-7e6233bbfb92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8e:cc:1e:09:46:4b:f5:30:32:90:d6:f5:1b: 5c:e2:36:5c:3f:c1:80:58:48:56:d7:f9:41:4a:ca: 10:7f:76:25:74:1e:33:5f:e5:7a:88:f7:62:b8:50: 9e:36:95:2e:21:03:39:bc:52:07:07:f9:56:90:80: eb:f7:00:f4:e1:92:2e:7f:13:92:67:b0:4c:57:fe: 76:1e:cc:0f:39:e7:8e:18:17:da:f3:70:eb:46:e6: a8:ad:d9:2c:c4:01:49:99:01:06:53:23:df:8e:a9: 01:59:56:d6:3e:75:6c:84:66:6c:6e:91:91:67:d3: 38:f8:28:ab:92:fc:d9:40:21:86:3c:fc:fa:5f:50: 00:b2:f7:1e:2c:33:7a:04:a4:60:24:60:c6:db:e8: 56:47:b2:db:42:fa:8f:39:4a:f4:4d:35:ef:f3:02: 80:42:a9:5c:f8:de:eb:fc:d9:5a:1c:42:b7:d0:10: 86:76:dd:fb:69:63:c5:71:50:cc:29:2f:64:a9:42: e7:e9:22:36:73:ed:c5:32:5b:9c:e0:f4:34:6e:57: 3c:65:e9:ee:22:55:bc:0e:2c:e7:a0:12:fa:b2:f0: 68:30:06:59:48:37:48:07:7d:75:7a:28:93:72:0f: 4e:e7:19:d2:7a:69:4e:af:88:61:ac:8f:f6:f6:2d: a4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4B:5C:E3:17:36:E7:31:B3:52:1D:74:88:79:D7:71:ED:1E:53:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d72bec8-a1a0-3a48-b226-ac1996fbd649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f1:23:51:16:5b:8e:be:a6:66:50:fa:1b:43:b0:25:d2:1d: 4e:77:63:17:ec:0e:6b:ab:f0:72:87:5c:65:c1:3f:68:50:f1: 8a:d1:9c:fb:b0:25:90:87:83:bb:5d:50:57:1d:73:da:24:fa: 04:2a:20:1b:09:1d:0d:93:50:b2:99:97:85:3f:ed:fd:52:51: 8c:82:ca:34:16:18:e1:79:f3:39:67:10:9a:8f:f9:6e:8f:54: 17:f0:13:d2:0d:45:66:4f:8c:93:a0:ca:36:76:d5:14:65:30: f5:d1:c2:9a:90:fb:f2:1a:19:ec:53:ec:20:06:57:b5:4f:d5: db:aa:e7:20:23:c8:f6:3b:4f:d6:0a:2c:a1:28:b7:26:df:40: be:0a:7a:5b:37:63:58:0d:4a:ce:ea:c1:97:85:2d:e2:6e:ff: 7f:45:24:97:49:a9:b8:ed:ec:ad:f8:69:fb:42:79:52:18:12: fb:f3:b2:c1:27:06:8b:78:7f:28:d0:02:9d:94:65:73:35:e8: 17:a8:32:7f:f6:26:86:00:29:a5:82:03:66:b1:be:e6:32:f5: 5a:a9:c1:a8:5a:c0:5b:fa:f6:8c:81:b1:bf:9d:e6:89:6e:b8: fc:a9:59:68:7c:8e:82:0a:4f:fb:8f:a2:85:c2:27:6a:ea:fc: 3b:e8:6d:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYht4DVSH/6op6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk MTA5MTE5NDMtODZkYy00MWJjLThiNTUtN2U2MjMzYmJmYjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp47MHglGS/UwMpDW9Rtc4jZcP8GAWEhW1/lB SsoQf3YldB4zX+V6iPdiuFCeNpUuIQM5vFIHB/lWkIDr9wD04ZIufxOSZ7BMV/52 HswPOeeOGBfa83DrRuaordksxAFJmQEGUyPfjqkBWVbWPnVshGZsbpGRZ9M4+Cir kvzZQCGGPPz6X1AAsvceLDN6BKRgJGDG2+hWR7LbQvqPOUr0TTXv8wKAQqlc+N7r /NlaHEK30BCGdt37aWPFcVDMKS9kqULn6SI2c+3FMluc4PQ0blc8ZenuIlW8Dizn oBL6svBoMAZZSDdIB311eiiTcg9O5xnSemlOr4hhrI/29i2k3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhLXOMXNucxs1IddIh513HtHlOsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmQ3MmJlYzgtYTFhMC0z YTQ4LWIyMjYtYWMxOTk2ZmJkNjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfxI1EWW46+pmZQ+htDsCXSHU53YxfsDmur8HKHXGXBP2hQ8YrRnPuw JZCHg7tdUFcdc9ok+gQqIBsJHQ2TULKZl4U/7f1SUYyCyjQWGOF58zlnEJqP+W6P VBfwE9INRWZPjJOgyjZ21RRlMPXRwpqQ+/IaGexT7CAGV7VP1duq5yAjyPY7T9YK LKEotybfQL4Kels3Y1gNSs7qwZeFLeJu/39FJJdJqbjt7K34aftCeVIYEvvzssEn Bot4fyjQAp2UZXM16BeoMn/2JoYAKaWCA2axvuYy9VqpwahawFv69oyBsb+d5olu uPypWWh8joIKT/uPooXCJ2rq/DvobSY= -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:21 2025 by rpki-client