$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d4eb15-889c-3c2c-a1e4-482420b45122.roa File: 32d4eb15-889c-3c2c-a1e4-482420b45122.roa (raw, json) Hash identifier: Yble4FHzsX7wcDgnYVRtyd/3K+2n3FYXRTBKzUv/Zis= Subject key identifier: DA:85:ED:E5:06:68:07:5F:BD:3C:D3:51:61:0F:28:C7:F4:C3:CE:1C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B2331913D73C98F00EC451D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d4eb15-889c-3c2c-a1e4-482420b45122.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:91:3d:73:c9:8f:00:ec:45:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=e83a373a-17be-4ec3-9469-8463a869be24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e2:f7:66:ba:89:e9:af:8a:25:e2:e9:3a:fd: ec:98:d7:7d:a5:28:03:a5:c1:19:60:5a:9f:d7:7d: f2:05:d5:5b:a3:f1:d8:56:81:8a:6e:96:d9:9e:2e: 99:f2:fb:4d:f5:54:c1:9b:51:35:bf:8e:b6:89:56: fd:37:05:e2:96:46:78:48:e4:ed:f2:cc:41:fc:83: fe:5e:14:c1:c5:55:64:6f:61:d2:c3:c8:06:07:bc: 04:ee:64:1d:9c:31:8a:cc:78:71:18:81:64:d5:93: 2f:c3:e3:17:bf:a0:52:84:c8:f3:f1:72:ef:75:d6: ee:f8:14:ce:ca:cd:66:67:0b:d1:63:e9:62:08:86: 63:5d:9c:44:1a:70:96:e2:ee:a0:8b:94:37:18:e4: 52:ab:e8:db:ee:24:a4:d5:4f:16:0b:47:84:75:5d: a0:08:9f:10:0c:76:2e:97:ae:c2:bd:45:5f:53:f8: a2:f4:f3:cb:b6:78:93:0d:e7:bb:f6:25:11:9c:81: 2c:03:a8:6c:71:36:28:45:45:86:48:66:68:c8:db: 33:a5:de:b0:1b:28:55:e9:f0:eb:93:79:a4:a1:d9: 93:89:02:f4:0e:50:ec:14:bc:ad:ea:63:e4:7d:75: f2:53:41:3d:c0:c1:ef:c2:b1:aa:d7:c9:e0:76:10: 31:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:85:ED:E5:06:68:07:5F:BD:3C:D3:51:61:0F:28:C7:F4:C3:CE:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d4eb15-889c-3c2c-a1e4-482420b45122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:8f:13:74:8b:69:27:57:95:e8:d3:af:b2:a9:50:eb:71:9a: 71:b9:87:d6:d2:f0:83:82:0b:ae:ce:5e:16:04:ad:6a:7d:50: be:f5:c3:27:fe:82:bb:22:c5:30:c7:06:c1:f3:e4:7f:cf:c2: 49:1f:9c:2f:01:89:62:27:4e:8a:a3:2e:bd:bc:b8:03:88:de: 38:e1:08:33:f1:d7:4f:d2:c9:c3:3f:de:1b:78:8d:b2:90:d1: 98:fa:4c:2b:9f:ff:20:8f:4a:52:15:86:cc:02:a4:ac:eb:fa: da:f7:d8:31:83:9d:e7:1e:e8:a4:35:ce:a0:3a:14:51:0e:8b: 9b:3c:1e:b7:69:9d:90:67:72:de:63:06:74:0d:86:65:8a:28: 7c:00:fc:a1:16:1a:43:d6:98:08:30:86:f2:3e:80:15:63:9b: 8c:24:93:9e:45:83:49:f8:6c:79:4d:a1:af:e3:f0:81:1f:50: 48:9e:e8:20:cb:0c:90:a7:aa:39:02:d2:f9:b2:d6:e3:1e:09: 42:cf:45:7d:86:d5:d4:86:41:bf:6a:b7:db:e2:64:66:cc:15: a1:a1:f3:7d:29:01:55:7b:8d:44:5a:9b:12:22:11:c4:7b:09: d0:73:7d:27:28:bf:ed:0a:c1:cc:dd:ef:e7:93:c5:d4:b2:e1: 27:30:38:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZE9c8mPAOxFHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk ZTgzYTM3M2EtMTdiZS00ZWMzLTk0NjktODQ2M2E4NjliZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOL3ZrqJ6a+KJeLpOv3smNd9pSgDpcEZYFqf 133yBdVbo/HYVoGKbpbZni6Z8vtN9VTBm1E1v462iVb9NwXilkZ4SOTt8sxB/IP+ XhTBxVVkb2HSw8gGB7wE7mQdnDGKzHhxGIFk1ZMvw+MXv6BShMjz8XLvddbu+BTO ys1mZwvRY+liCIZjXZxEGnCW4u6gi5Q3GORSq+jb7iSk1U8WC0eEdV2gCJ8QDHYu l67CvUVfU/ii9PPLtniTDee79iURnIEsA6hscTYoRUWGSGZoyNszpd6wGyhV6fDr k3mkodmTiQL0DlDsFLyt6mPkfXXyU0E9wMHvwrGq18ngdhAxJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqF7eUGaAdfvTzTUWEPKMf0w84cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzJkNGViMTUtODg5Yy0z YzJjLWExZTQtNDgyNDIwYjQ1MTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2PE3SLaSdXlejTr7KpUOtxmnG5h9bS8IOCC67OXhYErWp9UL71wyf+ grsixTDHBsHz5H/PwkkfnC8BiWInToqjLr28uAOI3jjhCDPx10/SycM/3ht4jbKQ 0Zj6TCuf/yCPSlIVhswCpKzr+tr32DGDnece6KQ1zqA6FFEOi5s8HrdpnZBnct5j BnQNhmWKKHwA/KEWGkPWmAgwhvI+gBVjm4wkk55Fg0n4bHlNoa/j8IEfUEie6CDL DJCnqjkC0vmy1uMeCULPRX2G1dSGQb9qt9viZGbMFaGh830pAVV7jURamxIiEcR7 CdBzfScov+0Kwczd7+eTxdSy4ScwOOg= -----END CERTIFICATE-----Generated at Tue Nov 4 23:24:40 2025 by rpki-client