$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8a28810-00a3-3777-9ee5-fcb9b672c4d3.roa File: b8a28810-00a3-3777-9ee5-fcb9b672c4d3.roa (raw, json) Hash identifier: W8GEx7UEqtqP3DTuq2tT7bmeLTbVTO7Hn4Fe2jJHlR8= Subject key identifier: 3E:65:DD:E5:DE:9F:1D:F0:65:15:23:09:69:24:1D:E2:D9:3B:B6:D0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B233193BDA48AE4D84CC59040 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8a28810-00a3-3777-9ee5-fcb9b672c4d3.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:93:bd:a4:8a:e4:d8:4c:c5:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=2efb9cd8-8135-472c-a064-6f3508029407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:13:01:4e:3c:05:67:7a:30:52:4c:6b:d5:e4: 11:d4:e3:ab:29:cf:8d:e9:12:b0:1f:c8:0d:3f:a9: dd:81:0c:f9:c5:b9:57:f6:04:86:a2:72:c2:d1:2f: b5:55:df:a7:eb:60:42:6c:f1:1b:27:33:f9:6c:41: b7:75:77:55:38:48:21:c9:51:b1:42:5a:b6:f8:97: b5:f5:d4:0c:c5:b5:87:a0:ec:be:0b:0b:b6:11:da: f6:02:63:ab:6b:48:75:21:8c:f0:33:d2:e4:c3:58: f8:4d:13:cc:37:64:90:74:67:52:ba:60:38:10:7b: 75:17:45:fe:ff:ca:0e:9b:db:64:82:5a:0d:89:c0: 78:ac:8d:8a:c8:ac:39:24:03:95:c0:9f:14:85:7d: 8d:e1:6c:5c:60:9a:f8:1b:06:ec:3c:61:86:29:45: 00:32:b3:36:76:24:47:0d:9e:9b:3a:d8:1e:05:ab: 07:52:58:fb:6b:0d:03:3d:cf:f0:1d:b4:b9:11:52: 90:dd:2d:0f:cc:88:7a:fb:22:66:b9:9a:44:e9:44: 39:61:60:49:ce:c8:a0:1a:9e:f2:14:31:dd:f8:27: 43:e3:43:1a:9a:66:24:2b:c9:1e:99:6b:37:bc:5f: 7d:9c:60:03:06:b6:25:8d:2c:c1:fa:d0:9b:8d:aa: bf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:65:DD:E5:DE:9F:1D:F0:65:15:23:09:69:24:1D:E2:D9:3B:B6:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8a28810-00a3-3777-9ee5-fcb9b672c4d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:93:69:25:17:c4:6b:ef:ef:8f:5c:78:4b:73:79:2e:97:6a: b8:68:ad:83:28:13:10:56:f1:42:da:eb:e0:0f:4c:fc:86:80: af:54:a5:83:ed:5d:cf:f9:06:24:b8:a0:49:69:e2:4e:48:8c: 8f:c4:72:7d:a9:c7:80:2a:b9:73:c1:25:e5:fc:41:c8:81:f1: 14:c0:17:b9:31:fc:c7:b6:be:46:60:8c:89:8f:87:03:e3:ed: 08:42:6e:39:08:30:98:6e:3e:e5:50:85:b1:1d:b7:df:43:91: f3:44:b4:5e:79:ca:52:bf:eb:be:a3:8c:b1:4b:b1:6b:ae:ff: 6a:3b:11:81:41:7b:be:90:c8:fb:42:7e:4b:96:f2:67:b3:cc: b9:94:bb:3d:30:96:4a:7f:31:81:61:65:77:0c:48:68:88:32: 55:2a:8b:19:3d:4d:30:65:65:f0:eb:71:26:1d:ac:b1:3f:49: 48:b0:35:63:03:18:df:d7:68:ec:46:14:1c:65:8b:ed:72:76: 7c:d9:e9:25:27:c8:61:73:9a:4d:26:2f:ba:69:f0:b5:aa:82: 67:d0:e8:6a:55:10:cd:3b:82:f4:3a:ae:a3:48:df:54:d3:3c: bf:ab:26:29:a7:99:d3:ee:c8:df:db:08:6d:0d:10:5a:f6:d4: c7:96:db:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZO9pIrk2EzFkEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk MmVmYjljZDgtODEzNS00NzJjLWEwNjQtNmYzNTA4MDI5NDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBMBTjwFZ3owUkxr1eQR1OOrKc+N6RKwH8gN P6ndgQz5xblX9gSGonLC0S+1Vd+n62BCbPEbJzP5bEG3dXdVOEghyVGxQlq2+Je1 9dQMxbWHoOy+Cwu2Edr2AmOra0h1IYzwM9Lkw1j4TRPMN2SQdGdSumA4EHt1F0X+ /8oOm9tkgloNicB4rI2KyKw5JAOVwJ8UhX2N4WxcYJr4GwbsPGGGKUUAMrM2diRH DZ6bOtgeBasHUlj7aw0DPc/wHbS5EVKQ3S0PzIh6+yJmuZpE6UQ5YWBJzsigGp7y FDHd+CdD40MammYkK8kemWs3vF99nGADBrYljSzB+tCbjaq/IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5l3eXenx3wZRUjCWkkHeLZO7bQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjhhMjg4MTAtMDBhMy0z Nzc3LTllZTUtZmNiOWI2NzJjNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCTaSUXxGvv749ceEtzeS6XarhorYMoExBW8ULa6+APTPyGgK9UpYPt Xc/5BiS4oElp4k5IjI/Ecn2px4AquXPBJeX8QciB8RTAF7kx/Me2vkZgjImPhwPj 7QhCbjkIMJhuPuVQhbEdt99DkfNEtF55ylK/676jjLFLsWuu/2o7EYFBe76QyPtC fkuW8mezzLmUuz0wlkp/MYFhZXcMSGiIMlUqixk9TTBlZfDrcSYdrLE/SUiwNWMD GN/XaOxGFBxli+1ydnzZ6SUnyGFzmk0mL7pp8LWqgmfQ6GpVEM07gvQ6rqNI31TT PL+rJimnmdPuyN/bCG0NEFr21MeW22g= -----END CERTIFICATE-----Generated at Wed Nov 5 00:57:09 2025 by rpki-client