$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9af36d84-ca49-3b10-a12a-084e91373650.roa File: 9af36d84-ca49-3b10-a12a-084e91373650.roa (raw, json) Hash identifier: /46cPVs/f9RugFW7oFEE6Xb3FzHFCvRxBnYp85TEZIM= Subject key identifier: 5A:08:12:E3:31:A0:66:E1:7B:67:B5:6E:22:7E:E7:D1:F6:C9:BE:05 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B233191BA1A8057297FC97300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9af36d84-ca49-3b10-a12a-084e91373650.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:91:ba:1a:80:57:29:7f:c9:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=de9255a2-8fc5-477c-b72e-f1b40cbafa19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d3:38:07:06:4e:5e:41:ae:e1:71:91:af:56: b4:cd:27:6f:d5:4a:a0:98:e4:36:3c:f9:ea:eb:e2: 72:3a:fa:9f:a9:ce:26:96:1d:38:39:35:5c:ba:34: b1:80:96:ee:c5:49:12:35:db:06:73:5d:f9:c0:0e: c9:30:9f:80:91:88:f6:09:85:ab:1d:14:e4:0d:c0: 0d:b7:2d:5e:1b:c8:21:24:b3:ed:eb:57:29:63:bb: d8:2c:9f:82:bf:df:54:35:68:7a:91:13:db:7d:6c: 58:08:a8:a5:83:ab:01:41:20:12:09:e3:6f:64:f2: 32:d1:6d:56:fe:80:dd:2b:84:94:94:6c:74:1a:26: 22:ae:fe:53:a9:9e:20:12:0b:ec:8d:4d:a4:49:ec: 45:97:57:4d:94:bc:a5:d0:96:bb:26:02:e2:e0:b3: 55:cf:c0:4e:cc:6f:0e:ba:d8:e2:1d:99:d5:47:c5: 2d:e7:e1:89:36:39:80:c4:cb:ed:6b:7b:dd:1f:83: 50:a8:4b:31:d6:af:32:3f:38:36:5f:ff:71:e1:70: f0:47:83:02:93:ce:93:30:82:73:94:df:d9:29:01: d2:d1:05:72:3c:d4:ca:3b:6b:12:80:6c:4f:0a:63: 3c:37:69:5d:de:eb:29:d5:f3:6c:a2:0c:08:9f:1d: 78:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:08:12:E3:31:A0:66:E1:7B:67:B5:6E:22:7E:E7:D1:F6:C9:BE:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9af36d84-ca49-3b10-a12a-084e91373650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:00:7e:10:5f:d3:a0:88:22:6b:78:6b:ab:e4:be:31:fc:25: a2:e2:33:dd:4d:5f:79:25:f8:d8:a5:93:db:27:59:13:3b:42: 47:55:3f:3b:87:b9:83:29:df:4c:82:38:62:2c:06:83:e9:5e: 22:04:02:4c:bc:5a:25:e2:c3:72:2c:92:d3:68:a8:23:0c:86: 61:7b:dd:f1:77:6a:74:b7:93:6d:75:cc:ab:37:12:d1:27:bc: 45:a6:46:ab:e0:be:23:d5:4c:d2:27:e9:aa:ee:89:52:a6:25: cb:fe:c7:6b:2f:60:ed:b9:b1:27:6c:fa:2b:f7:9f:69:92:b6: ff:ff:30:ff:cf:2b:f7:29:4e:66:31:57:d1:dc:f4:08:84:4d: 2a:e7:73:76:fd:92:15:33:25:20:2c:45:a0:cc:bc:5c:ce:69: 59:44:25:af:f6:e2:af:68:fb:07:93:14:32:da:21:ed:d6:4a: da:8c:04:47:71:09:48:ef:27:60:a0:22:38:b7:4d:c5:f2:78: 7d:ae:1f:9f:2a:9c:d8:3e:4c:c4:02:88:b2:e3:fc:87:53:ab: fc:a0:9f:e1:b3:8a:91:ad:73:a8:aa:dd:bc:ad:ba:24:5c:3a: e6:91:f6:16:16:49:5d:33:a5:05:d1:c6:42:f5:71:da:a5:d2: cf:68:18:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZG6GoBXKX/JcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk ZGU5MjU1YTItOGZjNS00NzdjLWI3MmUtZjFiNDBjYmFmYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotM4BwZOXkGu4XGRr1a0zSdv1UqgmOQ2PPnq 6+JyOvqfqc4mlh04OTVcujSxgJbuxUkSNdsGc135wA7JMJ+AkYj2CYWrHRTkDcAN ty1eG8ghJLPt61cpY7vYLJ+Cv99UNWh6kRPbfWxYCKilg6sBQSASCeNvZPIy0W1W /oDdK4SUlGx0GiYirv5TqZ4gEgvsjU2kSexFl1dNlLyl0Ja7JgLi4LNVz8BOzG8O utjiHZnVR8Ut5+GJNjmAxMvta3vdH4NQqEsx1q8yPzg2X/9x4XDwR4MCk86TMIJz lN/ZKQHS0QVyPNTKO2sSgGxPCmM8N2ld3usp1fNsogwInx146QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoIEuMxoGbhe2e1biJ+59H2yb4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWFmMzZkODQtY2E0OS0z YjEwLWExMmEtMDg0ZTkxMzczNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIAfhBf06CIImt4a6vkvjH8JaLiM91NX3kl+Nilk9snWRM7QkdVPzuH uYMp30yCOGIsBoPpXiIEAky8WiXiw3IsktNoqCMMhmF73fF3anS3k211zKs3EtEn vEWmRqvgviPVTNIn6aruiVKmJcv+x2svYO25sSds+iv3n2mStv//MP/PK/cpTmYx V9Hc9AiETSrnc3b9khUzJSAsRaDMvFzOaVlEJa/24q9o+weTFDLaIe3WStqMBEdx CUjvJ2CgIji3TcXyeH2uH58qnNg+TMQCiLLj/IdTq/ygn+GzipGtc6iq3bytuiRc OuaR9hYWSV0zpQXRxkL1cdql0s9oGNM= -----END CERTIFICATE-----Generated at Tue Nov 4 23:30:16 2025 by rpki-client