$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dbb7ae59-1c41-395b-be61-edc77e8c8141.roa File: dbb7ae59-1c41-395b-be61-edc77e8c8141.roa (raw, json) Hash identifier: 0dLDD0IgkFG0K3kBUV1RXjV6U9EYn3eSen9eeSWC/UY= Subject key identifier: D6:4C:70:F7:46:CC:8C:63:7C:C9:FE:8B:16:09:7E:24:C0:45:D9:0E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B2331959C55B05B7E22819100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dbb7ae59-1c41-395b-be61-edc77e8c8141.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:95:9c:55:b0:5b:7e:22:81:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=24cea065-7ee9-435c-96ae-ecba1d6cba61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:af:9b:fe:42:6b:e0:f9:50:89:91:1d:73:22: de:fd:35:61:5d:68:d9:97:b1:05:06:3b:7b:c8:06: 5d:c8:16:1a:90:89:87:e5:d6:29:2e:b6:87:c6:f6: 87:8d:c7:ea:cd:c6:be:6e:71:dc:27:a3:6d:2c:cd: 73:f7:e6:1a:3f:4a:48:ee:9d:40:e3:4e:7c:e3:0b: 88:a8:1f:7a:2b:81:2d:78:d7:a8:42:ef:55:c3:e2: eb:28:23:81:9b:64:76:a5:29:ba:e0:a6:e2:22:4a: 3b:df:45:4a:a6:33:37:8e:9a:e7:51:bc:41:c1:f7: 0d:de:6b:ef:c3:a1:ff:ac:53:dc:37:69:04:22:8c: 26:c8:a5:88:91:68:47:7c:bd:f6:b3:68:93:e9:06: 87:bc:02:eb:b2:8a:4b:d4:9f:2c:9e:c1:54:88:91: 5d:64:ce:b8:d5:43:69:13:32:b6:be:79:26:7d:de: 39:17:2f:ab:f9:ce:c6:3d:59:29:dd:b4:3c:4f:52: 5f:38:9f:f6:0d:cf:64:5e:38:35:64:68:a7:1d:9a: 4d:8d:29:6d:ac:07:c8:42:d5:36:dc:b6:c7:29:cc: b1:2b:c2:c4:57:71:a3:84:de:8d:ff:77:06:90:37: 97:02:ab:c9:9a:23:92:32:28:b1:16:0d:bc:88:50: ee:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4C:70:F7:46:CC:8C:63:7C:C9:FE:8B:16:09:7E:24:C0:45:D9:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dbb7ae59-1c41-395b-be61-edc77e8c8141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:98:26:93:a1:fd:41:c5:69:bc:1d:76:db:aa:e0:87:d1:8f: 14:41:a4:84:32:83:c2:c1:f4:bd:2b:92:d6:0c:22:d5:e0:0f: eb:3b:c8:96:71:58:a3:2b:29:e3:6e:50:a5:89:d1:34:e9:9d: bc:a1:df:ea:ec:5d:d5:f4:de:86:b4:98:56:2d:01:e6:9d:13: ac:e7:a4:e7:69:e9:4d:3a:82:cd:99:60:cc:f3:eb:b9:00:b3: 29:8b:0c:f7:75:80:a9:e0:7e:0d:30:19:ce:b2:46:e5:d7:b9: 22:39:42:88:98:e0:3f:29:8a:67:a5:c9:d3:da:bf:5d:22:15: 0e:57:33:10:fb:83:4f:99:8e:21:f8:32:36:71:8d:b9:86:b6: f8:49:b6:80:c3:12:ef:6f:e5:a9:94:5e:cc:75:e0:8c:d6:5e: bf:3f:32:11:02:85:2c:86:52:7f:e5:d0:cb:a8:2a:ee:c3:23: 62:0e:0c:5e:8a:a8:47:c9:3d:e1:0d:61:ea:83:55:16:d5:c4: f3:16:c2:33:c3:17:a0:77:03:6f:d4:04:0d:47:1e:a4:86:d9: 99:49:e5:ea:19:fb:9f:e2:bb:09:83:af:60:7a:8e:c2:e5:45: e7:a5:9b:51:58:06:ad:76:53:f9:67:d6:e7:c8:7a:9a:d6:32: 4e:e1:de:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZWcVbBbfiKBkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk MjRjZWEwNjUtN2VlOS00MzVjLTk2YWUtZWNiYTFkNmNiYTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6+b/kJr4PlQiZEdcyLe/TVhXWjZl7EFBjt7 yAZdyBYakImH5dYpLraHxvaHjcfqzca+bnHcJ6NtLM1z9+YaP0pI7p1A40584wuI qB96K4EteNeoQu9Vw+LrKCOBm2R2pSm64KbiIko730VKpjM3jprnUbxBwfcN3mvv w6H/rFPcN2kEIowmyKWIkWhHfL32s2iT6QaHvALrsopL1J8snsFUiJFdZM641UNp EzK2vnkmfd45Fy+r+c7GPVkp3bQ8T1JfOJ/2Dc9kXjg1ZGinHZpNjSltrAfIQtU2 3LbHKcyxK8LEV3GjhN6N/3cGkDeXAqvJmiOSMiixFg28iFDuTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZMcPdGzIxjfMn+ixYJfiTARdkOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGJiN2FlNTktMWM0MS0z OTViLWJlNjEtZWRjNzdlOGM4MTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSYJpOh/UHFabwddtuq4IfRjxRBpIQyg8LB9L0rktYMItXgD+s7yJZx WKMrKeNuUKWJ0TTpnbyh3+rsXdX03oa0mFYtAeadE6znpOdp6U06gs2ZYMzz67kA symLDPd1gKngfg0wGc6yRuXXuSI5QoiY4D8pimelydPav10iFQ5XMxD7g0+ZjiH4 MjZxjbmGtvhJtoDDEu9v5amUXsx14IzWXr8/MhEChSyGUn/l0MuoKu7DI2IODF6K qEfJPeENYeqDVRbVxPMWwjPDF6B3A2/UBA1HHqSG2ZlJ5eoZ+5/iuwmDr2B6jsLl Reelm1FYBq12U/ln1ufIeprWMk7h3ls= -----END CERTIFICATE-----Generated at Tue Nov 4 21:40:39 2025 by rpki-client