$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8798177b-2499-386b-aa9b-b44131f0b135.roa File: 8798177b-2499-386b-aa9b-b44131f0b135.roa (raw, json) Hash identifier: 233F4jnaGqCNYNjt+CPawbZpN3WfwZcYVyN42tFFrBM= Subject key identifier: 6B:4F:FD:3A:64:30:64:2C:03:F1:05:BD:19:31:D0:E1:A5:28:FF:04 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B23319588CD6AD082477A8740 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8798177b-2499-386b-aa9b-b44131f0b135.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:95:88:cd:6a:d0:82:47:7a:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=90908abf-b8cb-4aac-bef4-0622dac80015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:d0:2f:0f:9b:e6:8c:b2:62:9a:da:da:16: c5:f2:20:36:e4:20:e0:18:00:12:84:94:86:ba:cc: 49:48:a7:a6:38:1f:b1:b4:2d:73:5a:7d:6f:3f:55: 2d:24:76:6b:0d:2b:8e:fb:a1:2d:85:c7:55:ec:73: 2a:02:3b:25:d1:fb:f8:f8:a7:62:57:f8:37:9b:56: 32:c0:34:1f:67:57:6d:69:d8:03:ae:72:f7:8d:c0: f6:52:9a:3f:0b:ad:47:a5:f9:fe:ab:52:af:c1:67: db:a6:f1:5e:53:aa:cd:b1:ac:c2:cd:56:06:57:e0: 8f:b4:79:87:60:83:79:86:34:ba:65:d7:e9:ba:75: c1:52:ad:b9:f0:78:dd:68:f8:bf:a6:66:92:5d:f7: 9e:a5:db:3d:e9:7d:2a:4f:0c:5c:7a:5f:83:f0:2f: 3c:ac:d4:c7:58:f2:b8:73:bf:96:ee:f9:0b:0f:51: e1:d2:9f:9b:1d:ec:ab:f6:1b:a9:e3:00:24:90:f7: 67:07:7f:b5:fd:31:b0:8f:61:ff:c1:53:1e:3d:d4: 5e:67:88:df:6f:2f:4a:d3:a9:7a:a3:12:1d:d8:5e: e0:23:9e:1d:7b:54:97:50:f9:8b:c6:e9:4d:04:51: 16:cd:f4:a7:a7:78:33:12:4f:e2:d0:be:05:4f:f4: 16:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4F:FD:3A:64:30:64:2C:03:F1:05:BD:19:31:D0:E1:A5:28:FF:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8798177b-2499-386b-aa9b-b44131f0b135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:42:45:48:ea:f6:9d:54:61:c9:5f:c0:2a:cc:df:41:58:aa: 1e:c6:cd:1e:21:9e:af:8a:c4:12:c2:e5:0e:92:a8:c3:ab:1d: 2d:ba:02:5d:f0:be:bc:8f:ec:55:a0:51:6a:c3:26:c3:3d:0d: d5:33:8a:47:af:5e:ee:86:48:49:cc:92:43:3e:4b:72:14:c9: 78:4d:95:67:fc:fa:5b:0d:8b:f6:87:b3:b0:a2:6b:b3:3b:4f: cd:87:91:81:d5:fa:ca:53:ab:71:91:b6:49:8f:37:ba:ac:fc: 7e:0d:9f:d7:a6:f1:71:46:56:d0:38:af:aa:a2:65:5c:47:3b: 01:9e:50:bd:df:4f:95:41:fc:eb:90:2b:3e:2b:e3:17:47:a7: fc:56:a6:d2:0e:66:d7:67:f8:79:3e:69:fc:d4:cc:c7:4a:1e: 15:fa:bd:01:67:9a:15:d1:7a:52:40:62:9d:44:cf:9f:d0:f4: 40:8c:1e:2e:10:fd:c9:5b:fd:90:2d:4f:df:5b:fd:36:aa:f9: f1:e1:41:a6:82:ef:08:2f:39:69:70:6e:0c:4b:a1:95:7a:3a: c4:63:50:fb:65:38:e1:5a:cc:55:b1:91:f4:f7:ed:fb:d9:11: 1f:84:ba:90:22:85:e7:55:04:ec:bd:31:15:b7:66:86:70:34: c7:f7:5a:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZWIzWrQgkd6h0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk OTA5MDhhYmYtYjhjYi00YWFjLWJlZjQtMDYyMmRhYzgwMDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrLQLw+b5oyyYpra2hbF8iA25CDgGAAShJSG usxJSKemOB+xtC1zWn1vP1UtJHZrDSuO+6EthcdV7HMqAjsl0fv4+KdiV/g3m1Yy wDQfZ1dtadgDrnL3jcD2Upo/C61Hpfn+q1KvwWfbpvFeU6rNsazCzVYGV+CPtHmH YIN5hjS6ZdfpunXBUq258HjdaPi/pmaSXfeepds96X0qTwxcel+D8C88rNTHWPK4 c7+W7vkLD1Hh0p+bHeyr9hup4wAkkPdnB3+1/TGwj2H/wVMePdReZ4jfby9K06l6 oxId2F7gI54de1SXUPmLxulNBFEWzfSnp3gzEk/i0L4FT/QWcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtP/TpkMGQsA/EFvRkx0OGlKP8EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODc5ODE3N2ItMjQ5OS0z ODZiLWFhOWItYjQ0MTMxZjBiMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxCRUjq9p1UYclfwCrM30FYqh7GzR4hnq+KxBLC5Q6SqMOrHS26Al3w vryP7FWgUWrDJsM9DdUzikevXu6GSEnMkkM+S3IUyXhNlWf8+lsNi/aHs7Cia7M7 T82HkYHV+spTq3GRtkmPN7qs/H4Nn9em8XFGVtA4r6qiZVxHOwGeUL3fT5VB/OuQ Kz4r4xdHp/xWptIOZtdn+Hk+afzUzMdKHhX6vQFnmhXRelJAYp1Ez5/Q9ECMHi4Q /clb/ZAtT99b/Taq+fHhQaaC7wgvOWlwbgxLoZV6OsRjUPtlOOFazFWxkfT37fvZ ER+EupAihedVBOy9MRW3ZoZwNMf3WgA= -----END CERTIFICATE-----Generated at Tue Nov 4 23:27:08 2025 by rpki-client