$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5516c42c-43b7-30c5-b6fb-85bd6056d05a.roa File: 5516c42c-43b7-30c5-b6fb-85bd6056d05a.roa (raw, json) Hash identifier: 2Do2CbXjeKrdzpjjwAv0FP4EPf1/7Zthdl7y60cwFOM= Subject key identifier: 64:BC:6F:67:D4:3A:C2:4C:B9:14:63:D2:56:97:4E:02:E2:30:76:15 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A8411858ABCFBE8FB0F84D480 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5516c42c-43b7-30c5-b6fb-85bd6056d05a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 192.178.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:85:8a:bc:fb:e8:fb:0f:84:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=6b3ae53d-1082-40b1-9f4a-63448a3cb0b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e3:2d:53:4b:85:cf:3c:64:d1:c5:70:d7:c9: a9:4f:55:0c:a0:e9:f5:b0:e7:26:0f:62:27:be:2e: 13:c9:ea:6c:f6:43:0a:03:98:10:2a:34:57:dd:41: 73:86:18:96:f6:fb:c3:b6:13:a0:52:64:80:4d:e2: f5:7f:ee:c7:1a:57:e5:db:28:15:15:a0:66:71:b9: 73:e7:1e:66:80:5c:f2:96:5d:73:20:8e:a6:b0:37: 21:15:49:3b:a2:b6:98:7d:02:5e:a7:40:35:0c:d7: c0:2e:85:c9:70:fb:58:5b:67:15:8e:06:b1:28:60: 26:ce:08:35:a9:0b:0a:ca:5d:f0:6b:13:cf:d5:83: 51:9a:af:8d:06:a0:90:ff:55:44:47:82:40:42:e3: 54:f6:91:9b:4d:23:7d:80:50:61:b2:d8:14:63:c0: 70:30:84:25:65:e9:44:0e:49:e7:7d:f3:2d:d1:1b: c1:e9:64:a5:dd:b2:4c:e2:2f:ee:57:b9:33:0d:ac: 69:3a:76:92:1a:4c:f8:20:bd:07:e1:a9:3f:33:09: b8:a0:04:9b:44:72:b0:e6:bf:17:e3:95:3b:60:86: f0:82:ec:ba:6e:6f:61:8c:5c:70:93:c2:da:e0:28: 93:92:07:0e:c1:46:c8:c1:42:35:26:93:5c:5b:93: 1c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BC:6F:67:D4:3A:C2:4C:B9:14:63:D2:56:97:4E:02:E2:30:76:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5516c42c-43b7-30c5-b6fb-85bd6056d05a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:b3:95:3f:ea:6f:03:61:b0:ab:b2:b0:bb:24:22:a7:e8:70: be:ac:ff:c1:10:4d:fb:31:39:6e:bf:6e:5f:a4:5b:1c:4c:d5: 75:95:45:fd:ad:28:87:dc:18:d5:60:1f:39:2c:b9:5d:97:a7: 55:d7:f0:11:23:a3:21:f0:fb:d0:92:23:b6:87:55:7e:84:e5: 15:9f:e2:01:72:3a:df:f0:07:10:69:ef:02:f5:a8:d4:8a:22: 55:96:2f:6e:73:9d:f5:de:c3:47:95:09:b3:96:a5:d6:04:29: e9:2e:7e:0f:47:6e:b7:5c:0f:35:c6:c6:8f:27:80:73:66:52: 8f:8e:3c:18:ba:f7:35:37:c3:b0:1e:75:bc:ea:5f:8e:f7:dc: 30:9d:af:a3:e7:3d:5c:11:44:d3:a5:05:f4:4c:33:68:e6:f4: 9f:ae:05:3e:24:d1:0c:cf:a9:41:27:db:a0:d9:12:c1:7f:22: db:89:16:fa:49:04:48:24:68:76:f1:61:a6:bc:91:8d:f2:0c: 9c:b8:4d:50:f6:92:ed:ce:f7:bd:50:04:7b:27:99:e5:a7:b9: 52:a4:e1:73:13:be:ee:a1:a5:69:d1:8e:a2:68:25:06:22:87: f2:f1:45:db:67:72:26:60:6b:0c:64:61:a1:3b:fc:d8:45:0d: 43:b0:68:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYWKvPvo+w+E1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NmIzYWU1M2QtMTA4Mi00MGIxLTlmNGEtNjM0NDhhM2NiMGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+MtU0uFzzxk0cVw18mpT1UMoOn1sOcmD2In vi4Tyeps9kMKA5gQKjRX3UFzhhiW9vvDthOgUmSATeL1f+7HGlfl2ygVFaBmcblz 5x5mgFzyll1zII6msDchFUk7oraYfQJep0A1DNfALoXJcPtYW2cVjgaxKGAmzgg1 qQsKyl3waxPP1YNRmq+NBqCQ/1VER4JAQuNU9pGbTSN9gFBhstgUY8BwMIQlZelE DknnffMt0RvB6WSl3bJM4i/uV7kzDaxpOnaSGkz4IL0H4ak/Mwm4oASbRHKw5r8X 45U7YIbwguy6bm9hjFxwk8La4CiTkgcOwUbIwUI1JpNcW5MchwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGS8b2fUOsJMuRRj0laXTgLiMHYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTUxNmM0MmMtNDNiNy0z MGM1LWI2ZmItODViZDYwNTZkMDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLIpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKzlT/qbwNhsKuysLskIqfocL6s/8EQTfsxOW6/bl+kWxxM1XWVRf2t KIfcGNVgHzksuV2Xp1XX8BEjoyHw+9CSI7aHVX6E5RWf4gFyOt/wBxBp7wL1qNSK IlWWL25znfXew0eVCbOWpdYEKekufg9HbrdcDzXGxo8ngHNmUo+OPBi69zU3w7Ae dbzqX4733DCdr6PnPVwRRNOlBfRMM2jm9J+uBT4k0QzPqUEn26DZEsF/ItuJFvpJ BEgkaHbxYaa8kY3yDJy4TVD2ku3O971QBHsnmeWnuVKk4XMTvu6hpWnRjqJoJQYi h/LxRdtnciZgawxkYaE7/NhFDUOwaMQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:02:50 2025 by rpki-client