$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e03b701f-5218-31be-83f9-c7f36c6eb80e.roa File: e03b701f-5218-31be-83f9-c7f36c6eb80e.roa (raw, json) Hash identifier: TW4Ryr44OgWmJx8J2Fn2qpO4Cce6gKt9Qe+gSTUyMdY= Subject key identifier: CD:A5:79:B2:0B:25:1C:DF:FF:C4:9D:32:10:25:87:B0:B8:0D:00:FD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B23319574330322B0894E6420 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e03b701f-5218-31be-83f9-c7f36c6eb80e.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 15169 IP address blocks: 192.178.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:95:74:33:03:22:b0:89:4e:64:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=8436e3d3-6040-4723-b81a-03a7ddc413f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c1:0a:3f:92:f7:65:90:d7:3e:c8:7c:82:d9: c5:c2:e2:80:02:48:21:30:90:97:b8:6a:cb:ca:51: b7:05:e9:b4:9f:12:44:e2:70:95:d0:65:25:32:af: 58:0f:05:d3:33:d6:b1:e2:c6:14:4f:bc:6c:e2:35: 54:09:27:ba:14:0d:10:70:a6:af:0a:cb:35:82:f9: a3:c9:77:51:ab:3b:e0:5b:e2:17:bd:5d:cb:8c:4c: 89:38:9f:e5:a3:8e:9d:83:fb:a1:0e:ac:31:b9:50: 8f:b0:c4:f6:69:a9:67:5f:4c:f7:97:8c:2e:c5:27: 0a:f3:2c:19:89:01:7e:b3:3b:d6:06:81:6c:a4:5e: 31:06:07:b5:f5:63:4a:46:b1:16:aa:08:db:8d:2d: 94:4c:d9:18:67:ee:87:82:25:d2:29:c7:16:fa:8c: 15:8e:eb:5a:1d:1f:1a:fc:8b:04:5c:0d:06:7e:12: 68:db:51:1d:32:c3:a1:20:8c:d5:20:e3:24:3b:92: 4a:d3:eb:9c:80:14:6f:a6:69:5d:be:f2:61:c4:3d: 4c:3b:b0:8a:3c:6d:f9:4b:4f:15:8f:06:68:10:0f: f9:68:8b:37:25:d0:21:f5:9f:d0:ca:ef:f4:c4:b8: 23:5d:a4:fc:fe:b4:5a:10:4f:61:a9:c7:15:b1:d2: 48:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A5:79:B2:0B:25:1C:DF:FF:C4:9D:32:10:25:87:B0:B8:0D:00:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e03b701f-5218-31be-83f9-c7f36c6eb80e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:28:ff:a9:eb:bf:97:c6:dd:cc:ba:20:c8:b3:58:b9:a9:c9: 0b:95:e8:4b:a1:14:a3:cf:aa:61:d2:9c:52:ec:b4:22:f3:57: b6:ab:3d:5b:c1:f4:60:76:e2:19:85:d4:3b:3b:27:27:78:c6: a4:5f:33:06:ff:a3:84:42:b6:d6:53:e3:41:14:e7:10:27:4d: 3e:6d:3e:8c:5f:13:11:ae:2d:93:85:2b:d1:84:70:78:e7:5b: 92:9a:54:03:27:26:a9:12:7e:d6:8e:16:99:6a:52:25:99:f7: 0f:71:9a:d5:f5:07:69:90:28:ef:92:55:39:8c:e6:24:d1:04: c8:45:f9:ca:17:47:ec:2e:2c:00:b7:0f:0c:80:1d:63:aa:ed: 97:0b:1d:78:7e:80:ac:51:07:fe:bc:e2:b8:ee:9a:2c:be:9c: 31:09:55:c6:4e:3c:42:1d:8b:37:92:af:08:1b:57:78:07:ff: 13:87:d2:71:2a:dd:fd:20:ae:49:07:0e:89:67:82:03:fd:3d: 22:30:0d:b0:df:9c:71:e6:37:07:04:3a:06:1b:d3:02:e4:88: 92:0f:48:ca:18:8c:75:e7:57:66:a0:4d:37:49:4e:2e:de:a7: 0d:73:1e:37:cd:b2:76:5c:de:49:04:03:70:5d:ec:e8:f7:7a: f0:94:81:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZV0MwMisIlOZCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk ODQzNmUzZDMtNjA0MC00NzIzLWI4MWEtMDNhN2RkYzQxM2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8EKP5L3ZZDXPsh8gtnFwuKAAkghMJCXuGrL ylG3Bem0nxJE4nCV0GUlMq9YDwXTM9ax4sYUT7xs4jVUCSe6FA0QcKavCss1gvmj yXdRqzvgW+IXvV3LjEyJOJ/lo46dg/uhDqwxuVCPsMT2aalnX0z3l4wuxScK8ywZ iQF+szvWBoFspF4xBge19WNKRrEWqgjbjS2UTNkYZ+6HgiXSKccW+owVjutaHR8a /IsEXA0GfhJo21EdMsOhIIzVIOMkO5JK0+ucgBRvpmldvvJhxD1MO7CKPG35S08V jwZoEA/5aIs3JdAh9Z/Qyu/0xLgjXaT8/rRaEE9hqccVsdJIMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2lebILJRzf/8SdMhAlh7C4DQD9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTAzYjcwMWYtNTIxOC0z MWJlLTgzZjktYzdmMzZjNmViODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMo/6nrv5fG3cy6IMizWLmpyQuV6EuhFKPPqmHSnFLstCLzV7arPVvB 9GB24hmF1Ds7Jyd4xqRfMwb/o4RCttZT40EU5xAnTT5tPoxfExGuLZOFK9GEcHjn W5KaVAMnJqkSftaOFplqUiWZ9w9xmtX1B2mQKO+SVTmM5iTRBMhF+coXR+wuLAC3 DwyAHWOq7ZcLHXh+gKxRB/684rjumiy+nDEJVcZOPEIdizeSrwgbV3gH/xOH0nEq 3f0grkkHDolnggP9PSIwDbDfnHHmNwcEOgYb0wLkiJIPSMoYjHXnV2agTTdJTi7e pw1zHjfNsnZc3kkEA3Bd7Oj3evCUgbw= -----END CERTIFICATE-----Generated at Wed Nov 5 00:51:57 2025 by rpki-client