$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a3cbb92-a227-38ac-ab9b-531da381fcd9.roa File: 5a3cbb92-a227-38ac-ab9b-531da381fcd9.roa (raw, json) Hash identifier: onhMtiJJvhQ61JRvs+7Lkmzq0KTBea+U/7FDgXp9mJ8= Subject key identifier: FF:AA:33:09:07:C6:AB:74:53:EA:ED:D5:AC:86:EA:C5:38:31:5A:43 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B233192A4D8E148A70AE05E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a3cbb92-a227-38ac-ab9b-531da381fcd9.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:92:a4:d8:e1:48:a7:0a:e0:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=9e80a6d1-48a6-4888-acff-5a6da1b7fdb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9c:f1:a8:b5:02:05:98:d3:4f:25:d0:b4:1a: 6e:50:2e:6a:35:7c:0e:0a:83:6e:a4:26:52:cb:a7: 84:37:20:43:ed:72:15:8f:4d:b1:8c:c2:ae:b7:8e: ad:93:34:8d:c6:0f:d3:45:dd:79:2a:6e:5d:8d:40: eb:bb:c9:ae:0d:ae:eb:53:28:51:df:11:a1:8a:76: 94:69:87:44:58:db:07:cc:9c:d6:7c:1c:e7:ca:98: d5:3f:a9:c2:3c:6e:13:53:03:5e:6d:c8:25:a2:f9: 98:39:80:d2:59:a7:6b:af:57:73:6e:4e:1a:14:d2: d0:14:e8:5c:b2:c9:06:58:09:3a:a1:47:33:3c:1f: 5c:63:f4:5b:31:93:76:e2:ae:6c:71:61:da:aa:99: e8:3d:ea:64:de:b8:d1:a6:82:0f:ea:90:f2:ee:82: 4c:64:e0:8d:79:25:b0:34:40:31:c9:6e:66:db:d1: 79:f9:ba:44:20:5d:0c:78:6f:cf:c6:37:64:30:c6: 84:82:7e:f6:bf:8d:03:84:83:59:0e:13:9a:53:21: 5d:99:ef:80:a3:18:94:2e:4d:d6:19:df:47:8a:97: 68:09:90:6d:72:e4:e0:52:39:b2:94:58:25:5e:c2: a1:9a:90:dd:c3:11:0b:3d:19:ca:ec:e5:f3:4d:a1: 99:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AA:33:09:07:C6:AB:74:53:EA:ED:D5:AC:86:EA:C5:38:31:5A:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a3cbb92-a227-38ac-ab9b-531da381fcd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:8f:c8:cf:05:f9:b8:2a:98:ea:2e:5d:e9:b7:01:ba:91:77: 78:30:5c:d4:7d:4c:85:37:d5:31:ce:af:86:d4:88:de:90:12: 4b:5d:cc:e0:f2:b6:bf:3e:8a:79:48:e6:45:d6:2a:31:ec:6d: 4f:88:e6:8c:7a:16:d9:ee:83:98:a4:a8:9e:36:da:0f:5d:e3: 92:45:11:d6:9e:8f:ee:c1:fa:7a:5c:80:f2:16:d1:91:7c:6d: 31:dc:87:5b:1d:bd:3e:35:90:2c:60:47:05:1e:2d:fb:12:af: 86:bb:78:f3:49:51:aa:33:8c:6b:e3:c2:c7:9d:ef:4d:89:a0: a8:10:ac:dd:0a:5e:42:f7:66:2e:b0:53:4f:3a:46:a5:04:08: 51:41:d0:5d:6f:b7:dc:24:16:32:1f:4a:50:23:c2:46:64:30: d0:b2:17:68:5d:6a:f7:18:b6:66:aa:8b:15:8e:f9:83:ee:97: f8:29:05:42:c3:30:7d:e8:02:fd:e5:dd:ce:3d:3c:de:28:70: f9:50:b9:b6:e1:e5:72:ea:d5:ec:97:23:e4:94:0f:84:76:02: b3:b5:72:96:d4:0c:bf:92:4c:f0:af:c5:e4:e9:f1:15:86:46: cc:d3:07:16:60:51:c6:0f:e4:35:55:69:3f:e1:0c:47:7d:c9: b3:c7:4f:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZKk2OFIpwrgXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk OWU4MGE2ZDEtNDhhNi00ODg4LWFjZmYtNWE2ZGExYjdmZGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpzxqLUCBZjTTyXQtBpuUC5qNXwOCoNupCZS y6eENyBD7XIVj02xjMKut46tkzSNxg/TRd15Km5djUDru8muDa7rUyhR3xGhinaU aYdEWNsHzJzWfBznypjVP6nCPG4TUwNebcglovmYOYDSWadrr1dzbk4aFNLQFOhc sskGWAk6oUczPB9cY/RbMZN24q5scWHaqpnoPepk3rjRpoIP6pDy7oJMZOCNeSWw NEAxyW5m29F5+bpEIF0MeG/PxjdkMMaEgn72v40DhINZDhOaUyFdme+AoxiULk3W Gd9HipdoCZBtcuTgUjmylFglXsKhmpDdwxELPRnK7OXzTaGZbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+qMwkHxqt0U+rt1ayG6sU4MVpDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWEzY2JiOTItYTIyNy0z OGFjLWFiOWItNTMxZGEzODFmY2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACPyM8F+bgqmOouXem3AbqRd3gwXNR9TIU31THOr4bUiN6QEktdzODy tr8+inlI5kXWKjHsbU+I5ox6Ftnug5ikqJ422g9d45JFEdaej+7B+npcgPIW0ZF8 bTHch1sdvT41kCxgRwUeLfsSr4a7ePNJUaozjGvjwsed702JoKgQrN0KXkL3Zi6w U086RqUECFFB0F1vt9wkFjIfSlAjwkZkMNCyF2hdavcYtmaqixWO+YPul/gpBULD MH3oAv3l3c49PN4ocPlQubbh5XLq1eyXI+SUD4R2ArO1cpbUDL+STPCvxeTp8RWG RszTBxZgUcYP5DVVaT/hDEd9ybPHT8k= -----END CERTIFICATE-----Generated at Wed Nov 5 00:58:44 2025 by rpki-client