$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c958721-6f49-3f33-bbd4-e74c6bab23a2.roa File: 5c958721-6f49-3f33-bbd4-e74c6bab23a2.roa (raw, json) Hash identifier: jVi6r9DhlpSmUO1qj1dYemTlGijroW7m0xiDjqzxQvo= Subject key identifier: 4F:FB:FE:7D:A8:34:41:7F:9D:0F:96:F5:40:3F:E7:3D:4E:0E:1A:87 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B23319649D2D9934FC4E8D980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c958721-6f49-3f33-bbd4-e74c6bab23a2.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:96:49:d2:d9:93:4f:c4:e8:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=22103473-973c-424d-9a4a-badf92f97fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6c:3d:53:de:46:1b:b0:32:52:f9:e0:b9:0d: 72:6e:21:47:54:0c:8b:e3:4a:61:fa:b4:cf:46:18: 63:06:4d:50:e5:f7:01:e8:f0:5b:28:01:11:3b:6d: 67:da:46:98:4b:a2:09:75:ab:db:7b:05:23:c0:97: d1:14:f3:49:f5:5d:ac:c7:7a:87:6b:79:9c:54:af: 98:41:c2:93:4f:77:6f:17:91:2c:32:80:36:8e:0a: 68:3a:7d:94:3a:26:ba:ee:65:64:e8:72:47:06:0e: c1:7f:14:93:8a:25:6c:b2:0f:e3:b2:8a:4f:7e:8e: 2b:b4:82:45:43:1b:66:58:df:7c:f9:c4:e7:0d:23: 4e:6b:f9:13:f9:8a:09:6b:dd:e8:9a:7c:6b:93:9f: b9:5b:18:61:68:23:3c:06:53:17:81:85:d7:0e:6b: 5a:34:88:94:2f:f0:24:72:d3:60:f1:6d:f6:05:16: b0:89:75:ee:b0:8b:90:94:c9:f4:a1:00:f7:52:88: 21:8c:11:1b:99:9a:4e:52:8d:83:d2:a9:61:d6:57: 49:11:c6:c6:09:0a:67:59:52:9d:24:d9:e8:0a:7c: f0:90:01:07:23:4d:de:65:37:1b:3d:8b:0b:d6:14: ad:3b:e1:58:bc:a5:0f:4f:62:5e:14:06:c2:02:26: e2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FB:FE:7D:A8:34:41:7F:9D:0F:96:F5:40:3F:E7:3D:4E:0E:1A:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5c958721-6f49-3f33-bbd4-e74c6bab23a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f4:1b:b0:c6:9f:ff:47:6a:25:ea:29:8f:72:25:b3:2a:87: d4:d7:be:a8:20:76:c0:ae:1c:2d:59:09:26:fa:b9:dc:5a:67: 07:3e:94:44:6a:9c:38:79:7c:16:fe:d5:5b:3e:72:30:d9:0d: 0f:47:50:ff:92:7d:5f:37:28:7f:91:eb:a5:ea:34:6e:73:56: 62:99:ea:dd:11:d1:c2:c1:b1:f4:2f:73:b1:5e:73:cc:5d:4c: 41:d0:be:7b:cc:2e:da:05:1f:0b:02:2b:99:73:60:48:74:32: 73:e5:62:63:9d:c4:24:60:c4:dc:f6:90:99:4e:c7:0e:48:73: 46:54:c8:c1:5c:5a:af:90:be:6c:91:b2:50:86:bf:93:2a:17: 3e:df:7a:09:39:69:a4:e4:d0:b8:10:5d:cf:c6:a8:3f:ac:0d: 4d:33:a2:ad:21:20:11:1d:80:1b:36:99:bf:7d:1c:85:48:bd: 47:a7:88:6f:c0:dd:d2:9b:4a:06:80:60:6b:4d:eb:7e:24:18: 71:e1:0c:57:d0:a0:8e:06:a5:6c:04:8b:e5:86:8c:ad:b7:bc: 30:2f:83:26:07:bd:82:55:58:bc:78:ea:75:cf:2c:dd:a2:a2: 6d:16:3c:3c:f5:cf:7c:53:5c:5c:c8:2f:e9:b4:45:26:e3:69: 67:36:d1:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZZJ0tmTT8To2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk MjIxMDM0NzMtOTczYy00MjRkLTlhNGEtYmFkZjkyZjk3ZmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmw9U95GG7AyUvnguQ1ybiFHVAyL40ph+rTP RhhjBk1Q5fcB6PBbKAERO21n2kaYS6IJdavbewUjwJfRFPNJ9V2sx3qHa3mcVK+Y QcKTT3dvF5EsMoA2jgpoOn2UOia67mVk6HJHBg7BfxSTiiVssg/jsopPfo4rtIJF QxtmWN98+cTnDSNOa/kT+YoJa93omnxrk5+5WxhhaCM8BlMXgYXXDmtaNIiUL/Ak ctNg8W32BRawiXXusIuQlMn0oQD3UoghjBEbmZpOUo2D0qlh1ldJEcbGCQpnWVKd JNnoCnzwkAEHI03eZTcbPYsL1hStO+FYvKUPT2JeFAbCAibi4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/7/n2oNEF/nQ+W9UA/5z1ODhqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWM5NTg3MjEtNmY0OS0z ZjMzLWJiZDQtZTc0YzZiYWIyM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT0G7DGn/9HaiXqKY9yJbMqh9TXvqggdsCuHC1ZCSb6udxaZwc+lERq nDh5fBb+1Vs+cjDZDQ9HUP+SfV83KH+R66XqNG5zVmKZ6t0R0cLBsfQvc7Fec8xd TEHQvnvMLtoFHwsCK5lzYEh0MnPlYmOdxCRgxNz2kJlOxw5Ic0ZUyMFcWq+QvmyR slCGv5MqFz7fegk5aaTk0LgQXc/GqD+sDU0zoq0hIBEdgBs2mb99HIVIvUeniG/A 3dKbSgaAYGtN634kGHHhDFfQoI4GpWwEi+WGjK23vDAvgyYHvYJVWLx46nXPLN2i om0WPDz1z3xTXFzIL+m0RSbjaWc20Xs= -----END CERTIFICATE-----Generated at Tue Nov 4 21:40:41 2025 by rpki-client