$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bbd41846-8a02-377d-95ea-451b2a008e18.roa File: bbd41846-8a02-377d-95ea-451b2a008e18.roa (raw, json) Hash identifier: kty2TfaGMmV2nntC7YM4cPPIEk5vvwD/F89idW7Qo8Y= Subject key identifier: F5:CF:B4:C6:FB:79:95:A0:2A:28:57:6F:06:77:11:2E:4B:9F:BC:35 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B2331929493F0EBCEB1571800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bbd41846-8a02-377d-95ea-451b2a008e18.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:92:94:93:f0:eb:ce:b1:57:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=eb506a9a-5b9d-4dca-b8e5-f254513953c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5e:89:11:e1:ba:2f:c5:c9:0b:27:21:96:dc: 6c:79:10:47:26:48:ec:e9:35:ef:50:20:18:9e:4a: d2:22:81:67:f5:77:75:d5:e0:9c:31:e0:af:60:be: 5d:58:bc:89:ed:06:1c:41:6f:0f:36:ff:bc:12:9f: d8:b7:6c:52:14:d8:0b:5a:ac:e1:c3:76:09:7d:98: 71:3a:30:94:37:4b:62:64:9f:6c:cf:8b:0b:a7:4d: 08:f5:7c:d2:bf:51:42:97:b0:38:c7:ae:c5:b4:9e: 85:e1:d2:79:a8:86:33:31:0e:d0:31:aa:6d:d7:9c: ee:3c:f6:8d:11:27:c7:aa:54:65:74:7a:8e:24:4a: 4c:9e:5e:ae:41:c8:66:2c:48:23:2e:6f:c6:d5:5a: 33:90:00:1c:cd:d8:72:f1:92:aa:1b:d7:c3:02:57: d7:ff:03:f1:95:c5:60:a1:0c:1d:57:53:d0:45:8c: b1:d8:a7:ca:fa:06:f4:a9:c5:f8:96:13:55:bb:aa: 65:36:39:0f:5d:ab:a1:cb:83:7e:4f:a2:9c:6a:88: 17:c2:d5:cf:dd:89:b6:e6:5d:e2:59:e2:9b:7e:a9: ed:fa:d4:c3:19:ce:de:b6:a2:29:dc:57:0f:9a:37: 05:e0:86:8d:3e:a6:6d:5d:eb:31:8d:bf:3a:83:4a: 4d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CF:B4:C6:FB:79:95:A0:2A:28:57:6F:06:77:11:2E:4B:9F:BC:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bbd41846-8a02-377d-95ea-451b2a008e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:82:35:c8:44:eb:d6:05:ab:0a:25:e9:cf:67:58:21:cd:4b: 91:ea:f1:65:4f:ad:dc:ca:16:ef:5e:77:e8:92:64:39:82:3a: 8a:0f:a0:89:f5:ce:91:86:85:22:55:f2:7b:f2:5a:b1:57:d1: b2:35:2e:42:97:7f:b1:2f:d3:f2:7b:59:71:79:cb:ef:11:d8: 0a:fd:79:70:f3:51:9e:48:a7:2c:15:4a:21:a9:d8:ff:ea:8f: 1f:a5:a7:f2:42:9f:d4:75:94:c0:94:d9:19:45:fc:8d:68:36: 46:54:b1:99:c4:7a:0e:97:ce:2d:8c:e5:91:80:88:d2:4c:21: 22:67:00:4d:f9:8e:54:36:51:29:7a:9a:e7:3d:d6:84:c6:c2: 72:f1:29:b5:91:f9:b3:73:c3:60:04:f3:03:94:f8:dd:d8:0a: c5:fb:c0:d6:17:3e:38:82:5e:46:2c:b7:34:85:e3:dd:79:81: 08:da:37:ef:de:ca:0c:1a:b5:a8:49:17:be:2f:19:9d:07:ff: 9d:58:30:c9:62:f2:45:f9:9d:b7:b6:44:93:63:82:cc:62:a9: 61:67:87:cd:79:ae:91:a0:0d:9f:fc:19:77:df:7d:dc:eb:d3: 4e:f9:59:96:aa:56:20:34:30:b4:3c:b2:e1:c2:9c:40:5d:18: f8:0a:2d:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZKUk/DrzrFXGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk ZWI1MDZhOWEtNWI5ZC00ZGNhLWI4ZTUtZjI1NDUxMzk1M2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh16JEeG6L8XJCychltxseRBHJkjs6TXvUCAY nkrSIoFn9Xd11eCcMeCvYL5dWLyJ7QYcQW8PNv+8Ep/Yt2xSFNgLWqzhw3YJfZhx OjCUN0tiZJ9sz4sLp00I9XzSv1FCl7A4x67FtJ6F4dJ5qIYzMQ7QMapt15zuPPaN ESfHqlRldHqOJEpMnl6uQchmLEgjLm/G1VozkAAczdhy8ZKqG9fDAlfX/wPxlcVg oQwdV1PQRYyx2KfK+gb0qcX4lhNVu6plNjkPXauhy4N+T6KcaogXwtXP3Ym25l3i WeKbfqnt+tTDGc7etqIp3FcPmjcF4IaNPqZtXesxjb86g0pNoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXPtMb7eZWgKihXbwZ3ES5Ln7w1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmJkNDE4NDYtOGEwMi0z NzdkLTk1ZWEtNDUxYjJhMDA4ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyCNchE69YFqwol6c9nWCHNS5Hq8WVPrdzKFu9ed+iSZDmCOooPoIn1 zpGGhSJV8nvyWrFX0bI1LkKXf7Ev0/J7WXF5y+8R2Ar9eXDzUZ5IpywVSiGp2P/q jx+lp/JCn9R1lMCU2RlF/I1oNkZUsZnEeg6Xzi2M5ZGAiNJMISJnAE35jlQ2USl6 muc91oTGwnLxKbWR+bNzw2AE8wOU+N3YCsX7wNYXPjiCXkYstzSF4915gQjaN+/e ygwatahJF74vGZ0H/51YMMli8kX5nbe2RJNjgsxiqWFnh815rpGgDZ/8GXfffdzr 0075WZaqViA0MLQ8suHCnEBdGPgKLTs= -----END CERTIFICATE-----Generated at Tue Nov 4 21:41:33 2025 by rpki-client