$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c617d4d0-3bce-3aea-991a-8137e06ec0a3.roa File: c617d4d0-3bce-3aea-991a-8137e06ec0a3.roa (raw, json) Hash identifier: WCV32S2LfPei/66+kMRVWRTbn1MAFqysJO7DUcey8GU= Subject key identifier: 6E:22:2C:ED:D5:34:45:21:70:F0:49:98:84:1B:41:83:E7:3D:BE:B6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B2331918DAB74AB0C85322080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c617d4d0-3bce-3aea-991a-8137e06ec0a3.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:91:8d:ab:74:ab:0c:85:32:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=bc767fab-9c5e-422e-b160-930b3d4fdfba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a1:99:f1:a5:eb:26:f8:47:9e:fc:78:b5:e7: 9b:f6:7e:7f:dd:7b:06:db:e7:5e:37:3b:69:5e:88: a0:44:40:ed:22:cb:20:4e:ce:65:e4:a2:50:7b:6e: 4f:bc:27:f7:24:cd:42:88:95:2e:ba:6a:68:42:1c: 2d:21:df:9c:7d:b5:dc:83:7d:6a:8d:85:32:83:5b: 31:42:a8:ba:92:fa:70:9f:6d:01:ba:b6:19:39:08: 46:f3:82:c7:12:cd:4b:4d:14:fd:4f:30:b6:cd:2e: d0:eb:d2:62:df:1e:be:f2:d0:eb:a3:7e:ca:38:2c: bf:e1:77:b9:6a:fa:e6:08:f6:6f:cd:ec:73:7c:5a: cc:46:1d:3f:de:48:b4:de:45:c5:03:a8:a5:47:53: ec:78:90:a9:30:55:77:58:ae:16:93:b1:6c:f8:71: f2:67:e1:fa:37:cc:72:96:7a:64:49:32:8a:8e:cb: a2:b7:5d:3f:6d:24:68:77:f9:3b:12:62:d0:3a:4a: b8:4a:38:56:e8:4b:0e:06:c9:de:ce:31:8c:f2:d5: 65:b6:da:62:54:9a:8b:09:83:39:15:a5:4f:c0:a4: 74:14:83:ba:93:ac:1e:f1:55:7b:ce:28:4d:1d:8a: 52:91:5d:cf:ff:f9:57:1d:b5:1c:a5:47:a5:b6:c6: 19:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:22:2C:ED:D5:34:45:21:70:F0:49:98:84:1B:41:83:E7:3D:BE:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c617d4d0-3bce-3aea-991a-8137e06ec0a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:3b:d9:14:4a:66:bd:63:52:96:fe:0f:6e:f3:1a:6e:e5:fa: ba:67:b8:92:59:b0:94:7b:88:ba:54:07:e6:49:e2:04:7e:1a: f0:33:7f:52:a6:f6:81:21:42:23:6f:4a:24:7b:2e:88:31:83: f8:68:0d:28:77:e4:58:7b:f9:58:f4:a7:11:b5:a3:23:75:31: 30:53:17:fb:8c:01:8b:57:dc:dc:6e:e5:26:4d:c7:a5:78:d7: 79:19:06:d5:c2:b1:af:97:46:96:a7:a3:18:33:71:34:cf:0d: b5:99:25:35:61:c4:59:83:4d:49:10:cf:e9:7c:e3:f8:77:a7: 5b:6c:94:50:76:7f:e1:93:9d:05:b4:6b:d7:6c:18:84:b6:3f: 13:91:a2:35:3b:20:3c:48:6a:03:99:f8:5d:c1:49:e6:b7:bd: d4:a9:fd:be:ac:d6:81:6a:85:26:85:12:aa:ee:72:16:31:39: c6:36:32:a0:56:13:0f:fa:4d:07:f3:05:a9:77:a4:40:af:06: 71:a2:dc:db:6b:03:82:89:93:d7:be:39:dc:67:06:b1:8f:a7: e7:16:9c:b5:2d:d3:c7:da:78:99:cc:b6:8e:74:8d:0e:f0:6f: c3:77:48:8e:f2:1e:8e:5d:ef:56:3f:e5:93:88:81:f3:a5:16: 3b:20:09:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZGNq3SrDIUyIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk YmM3NjdmYWItOWM1ZS00MjJlLWIxNjAtOTMwYjNkNGZkZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaGZ8aXrJvhHnvx4teeb9n5/3XsG2+deNztp XoigREDtIssgTs5l5KJQe25PvCf3JM1CiJUuumpoQhwtId+cfbXcg31qjYUyg1sx Qqi6kvpwn20BurYZOQhG84LHEs1LTRT9TzC2zS7Q69Ji3x6+8tDro37KOCy/4Xe5 avrmCPZvzexzfFrMRh0/3ki03kXFA6ilR1PseJCpMFV3WK4Wk7Fs+HHyZ+H6N8xy lnpkSTKKjsuit10/bSRod/k7EmLQOkq4SjhW6EsOBsnezjGM8tVlttpiVJqLCYM5 FaVPwKR0FIO6k6we8VV7zihNHYpSkV3P//lXHbUcpUeltsYZxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4iLO3VNEUhcPBJmIQbQYPnPb62MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzYxN2Q0ZDAtM2JjZS0z YWVhLTk5MWEtODEzN2UwNmVjMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEM72RRKZr1jUpb+D27zGm7l+rpnuJJZsJR7iLpUB+ZJ4gR+GvAzf1Km 9oEhQiNvSiR7Logxg/hoDSh35Fh7+Vj0pxG1oyN1MTBTF/uMAYtX3Nxu5SZNx6V4 13kZBtXCsa+XRpanoxgzcTTPDbWZJTVhxFmDTUkQz+l84/h3p1tslFB2f+GTnQW0 a9dsGIS2PxORojU7IDxIagOZ+F3BSea3vdSp/b6s1oFqhSaFEqruchYxOcY2MqBW Ew/6TQfzBal3pECvBnGi3NtrA4KJk9e+OdxnBrGPp+cWnLUt08faeJnMto50jQ7w b8N3SI7yHo5d71Y/5ZOIgfOlFjsgCf0= -----END CERTIFICATE-----Generated at Tue Nov 4 21:40:37 2025 by rpki-client