$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e772925-bb32-3593-a988-6cdc6f1d8a11.roa File: 3e772925-bb32-3593-a988-6cdc6f1d8a11.roa (raw, json) Hash identifier: +pBEu2vFE9ss2FjdeiVfii3GokI1MbXGNrati1oW8cs= Subject key identifier: 3E:62:D3:E9:E0:2D:C5:A0:4B:ED:CC:EA:70:16:25:49:06:9C:28:8C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A84123237477B516D0D8F3640 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e772925-bb32-3593-a988-6cdc6f1d8a11.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 192.178.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:32:37:47:7b:51:6d:0d:8f:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=53321792-07c3-47ae-ab79-65ac18c7c574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e7:b1:ac:3b:01:97:ca:7f:5d:0f:fa:d9:9c: 6e:f4:d6:96:c7:51:4e:4e:9b:b7:e5:34:8b:d6:6a: 8a:14:ea:41:4e:d6:69:11:92:dc:e3:d6:12:24:ca: ff:15:20:fe:dc:0e:1d:9b:24:2a:f6:e8:5a:b7:25: 32:dd:13:f5:fc:47:ee:f6:53:fe:2a:cb:ff:f1:ea: 2c:e9:02:67:9b:93:27:68:eb:14:41:73:db:fb:0e: 67:35:69:ff:09:4d:2c:ab:80:1a:96:d1:4e:b7:3c: 59:f4:21:7b:f0:fb:19:af:be:19:ea:f8:42:19:0c: 31:0f:d8:ea:19:b8:8a:a9:71:33:a5:b8:ef:1d:d2: 75:a7:da:4e:44:44:c1:b2:1a:80:bf:cc:fa:c2:58: 9f:43:ef:2b:c0:3e:02:0b:d4:54:08:65:6d:1d:3d: af:bc:00:95:1b:a0:6a:e6:59:d3:c1:95:ff:61:73: 6c:98:d2:c7:db:9d:f9:8b:6c:0d:18:5b:41:52:ed: be:be:7f:6b:24:17:0c:e4:ba:90:87:67:25:28:5c: 2e:fa:20:ca:4a:ab:20:8e:ed:ae:c6:3d:c8:a8:79: 19:66:cf:12:9f:b6:96:0e:75:b8:60:98:b7:be:66: 94:c5:fb:ff:37:68:5c:2b:6d:30:21:e0:8b:8e:7f: fd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:62:D3:E9:E0:2D:C5:A0:4B:ED:CC:EA:70:16:25:49:06:9C:28:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e772925-bb32-3593-a988-6cdc6f1d8a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:38:00:37:ed:37:e1:d8:2b:18:45:50:a8:f4:52:ad:b8:e0: 9c:66:d4:d0:3f:60:6c:d6:92:86:d8:18:a5:32:f1:ef:c9:b4: b1:3a:8b:29:6d:ef:c6:37:c6:61:7b:dc:11:cc:1d:86:fc:fc: 69:2d:ce:e3:e6:43:29:26:90:50:98:d4:23:5e:11:93:77:4e: 93:b1:a0:4b:7a:8a:a4:65:09:17:64:29:bd:a0:9f:06:e2:ac: 95:6c:2a:40:5f:95:32:3b:86:ba:47:6e:ff:e3:1d:f3:c1:10: c7:a4:bb:4b:57:69:6f:91:9b:cf:ff:e1:b5:71:26:35:aa:15: c0:cb:50:e6:3c:4a:9a:d5:bf:eb:29:59:23:49:c8:46:6b:f1: c2:86:d2:4b:a8:04:b9:0f:e7:25:54:ea:19:a0:d7:55:a0:3c: 5c:cb:ae:06:56:2a:fc:57:c2:86:fb:31:05:81:53:33:0c:e0: 29:17:6f:26:96:45:5d:6f:e8:cb:c1:02:7e:10:26:26:e3:ed: 8b:13:2b:ec:ff:84:c9:88:92:37:3c:ab:fe:a5:6e:f3:6f:2a: 29:25:ce:82:82:6c:19:96:2a:95:7e:07:40:ad:3b:37:b1:73: 2f:7e:1d:49:5b:ab:e9:39:4a:8f:d7:6e:24:e5:03:e6:76:8d: cc:bd:a9:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjI3R3tRbQ2PNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTMzMjE3OTItMDdjMy00N2FlLWFiNzktNjVhYzE4YzdjNTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruexrDsBl8p/XQ/62Zxu9NaWx1FOTpu35TSL 1mqKFOpBTtZpEZLc49YSJMr/FSD+3A4dmyQq9uhatyUy3RP1/Efu9lP+Ksv/8eos 6QJnm5MnaOsUQXPb+w5nNWn/CU0sq4AaltFOtzxZ9CF78PsZr74Z6vhCGQwxD9jq GbiKqXEzpbjvHdJ1p9pORETBshqAv8z6wlifQ+8rwD4CC9RUCGVtHT2vvACVG6Bq 5lnTwZX/YXNsmNLH2535i2wNGFtBUu2+vn9rJBcM5LqQh2clKFwu+iDKSqsgju2u xj3IqHkZZs8Sn7aWDnW4YJi3vmaUxfv/N2hcK20wIeCLjn/9OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5i0+ngLcWgS+3M6nAWJUkGnCiMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2U3NzI5MjUtYmIzMi0z NTkzLWE5ODgtNmNkYzZmMWQ4YTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLIrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHI4ADftN+HYKxhFUKj0Uq244Jxm1NA/YGzWkobYGKUy8e/JtLE6iylt 78Y3xmF73BHMHYb8/GktzuPmQykmkFCY1CNeEZN3TpOxoEt6iqRlCRdkKb2gnwbi rJVsKkBflTI7hrpHbv/jHfPBEMeku0tXaW+Rm8//4bVxJjWqFcDLUOY8SprVv+sp WSNJyEZr8cKG0kuoBLkP5yVU6hmg11WgPFzLrgZWKvxXwob7MQWBUzMM4CkXbyaW RV1v6MvBAn4QJibj7YsTK+z/hMmIkjc8q/6lbvNvKiklzoKCbBmWKpV+B0CtOzex cy9+HUlbq+k5So/XbiTlA+Z2jcy9qfY= -----END CERTIFICATE-----Generated at Wed Aug 6 11:01:28 2025 by rpki-client