$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d28d11f-1808-33fb-9b0b-9b8749bff03b.roa File: 1d28d11f-1808-33fb-9b0b-9b8749bff03b.roa (raw, json) Hash identifier: FvTNGbe5IoMrJhDvV1koXpSoaMjpAaaPkKOPL63p5Kg= Subject key identifier: A3:96:8F:E6:DF:11:C3:FD:75:E7:C0:12:85:B3:37:7A:06:05:B8:6B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849631ECF6BBA7732AA6D3D6D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d28d11f-1808-33fb-9b0b-9b8749bff03b.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 192.178.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:cf:6b:ba:77:32:aa:6d:3d:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=aa922cc4-989d-4b1a-b669-285181f259f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4a:da:16:2d:57:fa:cd:a3:f5:9d:01:f6:59: c8:d7:b2:12:08:9e:b9:c4:35:1e:02:94:d2:a2:50: ae:f8:8b:88:2e:b0:ce:94:b0:35:06:b4:2c:e8:7b: 71:cb:f7:73:62:18:dd:27:6c:19:1a:59:35:cb:4f: 30:52:37:83:39:15:15:9f:83:68:42:93:d5:f1:0a: 26:5e:a5:77:83:f2:d8:af:18:56:78:23:b5:d1:0d: 8a:44:ee:f7:1c:00:d8:65:b1:8d:29:a7:aa:e3:2f: 5b:25:14:dc:27:6f:b2:c0:fd:48:ea:7b:2e:fe:58: 03:66:d0:c2:83:96:04:9b:33:d8:46:89:5d:5b:ad: e5:4c:71:8b:d1:f5:4f:f8:86:46:5d:57:a9:e5:a6: b2:ae:04:ea:20:78:2e:ee:20:41:eb:3b:60:19:7c: a9:ae:c0:ba:cd:fd:20:45:7c:84:6e:8a:fe:0a:d6: 1d:3a:bb:2e:be:b1:da:02:05:86:a4:12:28:b5:99: 53:fc:30:0f:f1:79:90:21:6f:36:56:93:40:02:f6: 40:4e:0b:2b:9b:97:29:b0:ff:11:e1:18:d6:07:31: a1:a2:b2:bc:f8:d4:97:e7:67:4c:ea:ae:e2:cc:e1: 77:c5:38:3a:49:a4:aa:54:00:38:31:1c:77:23:0f: 00:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:96:8F:E6:DF:11:C3:FD:75:E7:C0:12:85:B3:37:7A:06:05:B8:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d28d11f-1808-33fb-9b0b-9b8749bff03b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:78:88:af:85:9c:f0:79:06:98:37:d9:57:3e:81:35:0f:ab: 9f:26:24:23:6e:66:e4:7f:07:03:6c:e7:e9:6e:57:86:1c:78: 8e:5f:25:10:33:76:14:23:22:4e:93:5e:6f:99:0c:42:43:f1: ea:42:7a:da:e5:8b:46:37:2e:17:63:5a:c0:81:67:34:86:5e: ad:6d:00:60:c3:e0:c5:13:98:2a:c0:c0:e7:98:1f:f5:f1:66: ce:c6:bd:3c:fa:dd:aa:68:20:7f:e6:56:27:48:53:4c:e6:30: f0:52:c0:8e:1e:ec:d1:dd:9e:6c:33:7d:fc:dd:5f:5d:c2:f6: 5a:d6:9e:99:ac:94:22:ef:55:00:33:78:0a:96:0e:a4:40:cc: d9:b6:7a:ee:5e:90:df:7e:23:38:94:98:8c:52:8c:9a:e0:56: c8:de:55:24:50:dc:d3:42:13:99:f6:5a:9a:05:97:1e:06:e1: dd:e1:cf:15:65:16:85:27:b3:5a:04:36:f4:c5:69:70:ed:7f: 7e:84:5c:b1:14:f6:e1:4c:bb:99:d8:11:89:96:64:80:83:bb: f2:fa:43:ca:48:e8:67:ad:d0:2f:67:1c:c9:55:09:1b:d2:fc: 29:a6:0b:76:4d:65:83:bc:68:1b:52:51:c4:22:69:7c:16:dd: c0:4e:8e:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHs9runcyqm09bYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk YWE5MjJjYzQtOTg5ZC00YjFhLWI2NjktMjg1MTgxZjI1OWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkraFi1X+s2j9Z0B9lnI17ISCJ65xDUeApTS olCu+IuILrDOlLA1BrQs6Htxy/dzYhjdJ2wZGlk1y08wUjeDORUVn4NoQpPV8Qom XqV3g/LYrxhWeCO10Q2KRO73HADYZbGNKaeq4y9bJRTcJ2+ywP1I6nsu/lgDZtDC g5YEmzPYRoldW63lTHGL0fVP+IZGXVep5aayrgTqIHgu7iBB6ztgGXyprsC6zf0g RXyEbor+CtYdOrsuvrHaAgWGpBIotZlT/DAP8XmQIW82VpNAAvZATgsrm5cpsP8R 4RjWBzGhorK8+NSX52dM6q7izOF3xTg6SaSqVAA4MRx3Iw8AIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOWj+bfEcP9defAEoWzN3oGBbhrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWQyOGQxMWYtMTgwOC0z M2ZiLTliMGItOWI4NzQ5YmZmMDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx4iK+FnPB5Bpg32Vc+gTUPq58mJCNuZuR/BwNs5+luV4YceI5fJRAz dhQjIk6TXm+ZDEJD8epCetrli0Y3LhdjWsCBZzSGXq1tAGDD4MUTmCrAwOeYH/Xx Zs7GvTz63apoIH/mVidIU0zmMPBSwI4e7NHdnmwzffzdX13C9lrWnpmslCLvVQAz eAqWDqRAzNm2eu5ekN9+IziUmIxSjJrgVsjeVSRQ3NNCE5n2WpoFlx4G4d3hzxVl FoUns1oENvTFaXDtf36EXLEU9uFMu5nYEYmWZICDu/L6Q8pI6Get0C9nHMlVCRvS /CmmC3ZNZYO8aBtSUcQiaXwW3cBOjlc= -----END CERTIFICATE-----Generated at Sat Apr 26 19:51:06 2025 by rpki-client