$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7584c72d-0320-345d-86d9-7f5c25ec082a.roa File: 7584c72d-0320-345d-86d9-7f5c25ec082a.roa (raw, json) Hash identifier: uAR6/d/JY/Jj7O7e42q9EHbsq0/EFyxwtV9Pl2mhah4= Subject key identifier: 6A:45:42:7D:0C:5F:2B:89:48:79:0E:C2:B8:73:DB:A3:5F:64:32:FE Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B2331926E1246AAC235E92B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7584c72d-0320-345d-86d9-7f5c25ec082a.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:92:6e:12:46:aa:c2:35:e9:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=8a08df69-bc8d-4ef0-8198-eafa147f5e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:05:03:ea:2d:7a:52:c5:b0:1b:74:7d:85:e7: f0:bd:fb:b6:96:8e:7c:16:10:18:98:72:14:d1:41: 77:44:16:e8:2f:39:69:50:ac:08:15:c3:03:2b:ce: 51:f6:9f:81:f8:9e:77:6c:6d:66:0f:bc:71:4c:23: 5c:54:b4:84:48:7c:55:a3:4d:11:5c:f7:47:9d:69: 0f:bc:81:68:87:1b:99:74:6d:1a:bf:2e:ab:40:15: 21:8e:27:ca:b2:ad:36:4f:b6:5c:c4:b9:73:14:44: 08:29:13:a4:00:71:33:4f:a3:35:24:34:a9:ba:55: 89:62:4b:fd:fa:4e:db:57:95:c8:07:96:a0:8a:f9: 2e:67:46:16:72:d7:ba:be:93:3c:4e:ee:fe:b8:c3: a9:81:2b:3e:9c:0f:da:20:bd:d7:f6:8b:ab:61:d7: a1:55:52:a0:c9:58:57:f4:0c:cb:e6:73:e7:33:28: ef:80:31:e7:f6:6e:7d:e4:94:35:53:e9:4c:0e:1b: 81:00:2d:97:6a:eb:14:78:9a:91:fb:2c:c4:7a:9e: 6c:16:17:68:52:8e:48:e7:22:e1:a4:0a:f7:b7:d1: 41:08:a8:c3:55:27:b6:5e:49:19:89:1c:1e:63:6b: db:bb:7b:39:f4:16:05:7d:c4:9c:63:92:de:15:bd: 10:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:45:42:7D:0C:5F:2B:89:48:79:0E:C2:B8:73:DB:A3:5F:64:32:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7584c72d-0320-345d-86d9-7f5c25ec082a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:47:de:d6:5b:9f:42:b0:dc:c8:ca:cd:d2:c9:17:89:4a:4c: a7:78:0d:38:85:a3:13:2f:87:62:db:61:82:d1:c8:a9:e6:ff: 32:df:b4:9f:9d:b8:1b:8a:c2:3a:84:a8:ca:71:79:ef:8f:a4: cd:47:4a:6f:d0:b2:23:b1:92:45:42:c9:85:0b:22:a0:ec:1f: d9:6f:d7:fc:d9:61:b0:8b:f5:15:3f:cb:f9:61:85:45:81:0f: 92:90:74:46:de:dd:75:84:fa:f4:0f:cd:29:9b:60:6c:20:d0: ab:87:e0:53:82:23:d3:bb:8e:da:f1:11:54:ea:5e:04:70:1c: 50:9a:50:09:71:10:19:ad:f4:16:d7:3a:53:2f:f7:f0:19:0f: 76:8b:e9:b5:ce:37:60:f2:bf:14:ac:2a:9f:e3:2f:75:39:62: 31:0e:a7:9d:54:fe:37:10:56:14:82:d8:6e:6c:f4:2e:26:17: 1d:91:4c:ef:d0:6d:d7:95:4b:b0:bb:69:a0:cf:ad:3c:30:7c: a0:bf:29:1d:2a:59:b1:ac:5c:95:53:f4:91:79:ed:17:eb:ae: 56:b5:48:4b:db:35:21:eb:33:47:c9:ec:13:ed:fc:87:37:e1: 21:0f:ee:4e:ee:62:9b:5b:cf:d1:46:f4:8b:7c:48:ee:73:23: 02:a6:e2:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZJuEkaqwjXpKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk OGEwOGRmNjktYmM4ZC00ZWYwLTgxOTgtZWFmYTE0N2Y1ZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwUD6i16UsWwG3R9hefwvfu2lo58FhAYmHIU 0UF3RBboLzlpUKwIFcMDK85R9p+B+J53bG1mD7xxTCNcVLSESHxVo00RXPdHnWkP vIFohxuZdG0avy6rQBUhjifKsq02T7ZcxLlzFEQIKROkAHEzT6M1JDSpulWJYkv9 +k7bV5XIB5agivkuZ0YWcte6vpM8Tu7+uMOpgSs+nA/aIL3X9ourYdehVVKgyVhX 9AzL5nPnMyjvgDHn9m595JQ1U+lMDhuBAC2XausUeJqR+yzEep5sFhdoUo5I5yLh pAr3t9FBCKjDVSe2XkkZiRweY2vbu3s59BYFfcScY5LeFb0QeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpFQn0MXyuJSHkOwrhz26NfZDL+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzU4NGM3MmQtMDMyMC0z NDVkLTg2ZDktN2Y1YzI1ZWMwODJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhH3tZbn0Kw3MjKzdLJF4lKTKd4DTiFoxMvh2LbYYLRyKnm/zLftJ+d uBuKwjqEqMpxee+PpM1HSm/QsiOxkkVCyYULIqDsH9lv1/zZYbCL9RU/y/lhhUWB D5KQdEbe3XWE+vQPzSmbYGwg0KuH4FOCI9O7jtrxEVTqXgRwHFCaUAlxEBmt9BbX OlMv9/AZD3aL6bXON2DyvxSsKp/jL3U5YjEOp51U/jcQVhSC2G5s9C4mFx2RTO/Q bdeVS7C7aaDPrTwwfKC/KR0qWbGsXJVT9JF57Rfrrla1SEvbNSHrM0fJ7BPt/Ic3 4SEP7k7uYptbz9FG9It8SO5zIwKm4s4= -----END CERTIFICATE-----Generated at Wed Nov 5 01:18:35 2025 by rpki-client