$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/758bc817-499b-307d-a85a-6a5340b1c81c.roa File: 758bc817-499b-307d-a85a-6a5340b1c81c.roa (raw, json) Hash identifier: AerGC8ZOhM4ugtlSR60Y5ByUmnRHasl/6lXVcU0sMgA= Subject key identifier: DD:2E:4D:58:68:22:23:E0:1D:4D:C5:C2:DA:A7:73:FA:BE:C3:19:88 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B233195389680F8D66B2F3B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/758bc817-499b-307d-a85a-6a5340b1c81c.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:95:38:96:80:f8:d6:6b:2f:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=a006b6f3-622d-4525-8e73-b43ada84aaae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:97:50:14:ca:15:5c:06:44:6e:aa:de:58:24: d7:65:76:a9:c7:12:bb:6f:49:74:7e:8f:e0:d5:56: eb:7f:fe:d7:3f:98:51:2e:70:2c:5e:69:be:8c:0e: b9:0e:e8:c3:f7:ac:13:08:ad:d7:37:37:d8:e0:2d: 23:ae:67:74:15:76:fa:99:70:14:46:e5:81:c8:76: ec:26:33:cd:62:d8:25:bd:7b:2f:1d:a1:a3:74:c6: a8:11:8c:e4:63:2a:bd:45:32:17:6e:a5:f5:be:87: 23:b3:c2:f9:51:ce:15:1a:f7:39:6d:9f:b3:24:cd: 7d:88:72:98:7b:7c:ad:0f:92:33:a7:c0:59:6d:1b: d6:4e:d0:ad:e1:52:5c:e2:1e:f2:e5:bb:b4:46:6f: 41:7e:7a:98:96:32:bf:53:a6:8b:d0:64:db:59:02: b1:60:c5:1e:0d:7c:a1:ef:95:92:26:52:d5:42:aa: f8:33:ba:5a:97:e3:ae:b7:d5:65:55:09:36:e4:50: c0:2a:d1:98:73:c1:c3:7c:bd:70:5c:6b:b2:1d:93: 6d:c0:d9:56:e1:66:e6:2f:f7:d4:78:ca:3d:05:c5: 6c:56:ac:ab:2c:3d:5c:24:e8:b5:a9:75:5b:d6:51: 65:ae:ea:56:89:9c:d4:5f:dc:53:80:4a:1c:d6:a1: 3b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2E:4D:58:68:22:23:E0:1D:4D:C5:C2:DA:A7:73:FA:BE:C3:19:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/758bc817-499b-307d-a85a-6a5340b1c81c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:31:70:94:06:34:40:ce:b4:07:35:f2:58:dd:4a:57:cd:48: 16:d9:fc:dd:8d:46:fe:41:3f:fb:fa:e3:39:a2:4f:eb:10:d2: e3:12:d9:67:c4:ef:3d:4e:c3:cd:3b:e2:25:16:bf:ae:85:20: 68:1c:95:08:39:5e:5b:0f:9e:09:37:f8:64:b6:55:b4:58:d1: c1:9a:50:80:5e:78:95:b6:cd:44:d5:f8:34:d2:a9:15:15:71: 0c:a3:88:3a:76:39:0b:8b:8a:98:fe:de:f9:70:34:37:8f:d1: cf:38:68:f7:12:a6:10:59:73:17:61:be:f5:05:06:42:b3:b3: 38:fa:fb:bf:32:af:e5:81:f8:c1:3b:c9:2f:64:30:9b:5b:e1: 5d:4c:08:83:9e:e5:8d:2d:87:09:dd:c5:39:f4:4d:23:ad:41: b4:ea:0b:e2:86:74:08:ca:60:2b:76:1c:48:e0:1c:fa:20:f2: 9a:94:17:a8:5c:73:94:8e:c1:87:2c:37:f3:5f:67:ee:f6:c5: bc:67:84:c6:8e:85:b9:66:b6:bc:ac:96:2e:24:ac:71:5f:54: 9e:f4:4f:bc:f3:c8:33:fa:e1:5e:e3:5d:e0:4c:b5:8d:31:00: d8:b3:2b:41:8a:f9:11:a9:bc:71:fa:d2:a7:e4:de:7e:78:4e: 10:ef:cd:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZU4loD41msvO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk YTAwNmI2ZjMtNjIyZC00NTI1LThlNzMtYjQzYWRhODRhYWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppdQFMoVXAZEbqreWCTXZXapxxK7b0l0fo/g 1Vbrf/7XP5hRLnAsXmm+jA65DujD96wTCK3XNzfY4C0jrmd0FXb6mXAURuWByHbs JjPNYtglvXsvHaGjdMaoEYzkYyq9RTIXbqX1vocjs8L5Uc4VGvc5bZ+zJM19iHKY e3ytD5Izp8BZbRvWTtCt4VJc4h7y5bu0Rm9BfnqYljK/U6aL0GTbWQKxYMUeDXyh 75WSJlLVQqr4M7pal+Out9VlVQk25FDAKtGYc8HDfL1wXGuyHZNtwNlW4WbmL/fU eMo9BcVsVqyrLD1cJOi1qXVb1lFlrupWiZzUX9xTgEoc1qE78wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0uTVhoIiPgHU3Fwtqnc/q+wxmIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzU4YmM4MTctNDk5Yi0z MDdkLWE4NWEtNmE1MzQwYjFjODFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8xcJQGNEDOtAc18ljdSlfNSBbZ/N2NRv5BP/v64zmiT+sQ0uMS2WfE 7z1Ow8074iUWv66FIGgclQg5XlsPngk3+GS2VbRY0cGaUIBeeJW2zUTV+DTSqRUV cQyjiDp2OQuLipj+3vlwNDeP0c84aPcSphBZcxdhvvUFBkKzszj6+78yr+WB+ME7 yS9kMJtb4V1MCIOe5Y0thwndxTn0TSOtQbTqC+KGdAjKYCt2HEjgHPog8pqUF6hc c5SOwYcsN/NfZ+72xbxnhMaOhblmtrysli4krHFfVJ70T7zzyDP64V7jXeBMtY0x ANizK0GK+RGpvHH60qfk3n54ThDvzYA= -----END CERTIFICATE-----Generated at Tue Nov 4 23:32:19 2025 by rpki-client