$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d72bec8-a1a0-3a48-b226-ac1996fbd649.roa File: 2d72bec8-a1a0-3a48-b226-ac1996fbd649.roa (raw, json) Hash identifier: xf4tViZ9bfKfWzd7GOEoXX5lyA+J/oGSNC60MTo5y08= Subject key identifier: E4:01:11:72:09:8C:AD:FE:D6:04:03:59:21:18:98:FD:05:AF:2A:80 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849C20B495986A123E04F655060 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d72bec8-a1a0-3a48-b226-ac1996fbd649.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 15169 IP address blocks: 192.178.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0b:49:59:86:a1:23:e0:4f:65:50:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=c587be2f-aae4-46e0-8270-b2c447148d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e8:22:c1:e3:c3:4a:35:92:23:55:a0:1b:ed: 93:43:28:fc:47:8e:8c:5b:d6:13:cd:37:0f:be:0f: 31:16:19:f2:bc:e1:a6:2e:c7:0a:43:d9:14:8e:09: 61:b4:1d:11:00:2f:1e:0e:03:aa:86:a1:81:3d:8c: 84:46:94:86:d4:76:de:7f:fb:1a:14:9f:2b:03:1b: 53:5a:77:1b:3c:29:98:9e:75:e6:b4:f2:ae:17:c9: a1:3a:3b:4e:67:21:30:55:f4:60:d7:c7:da:60:75: af:2a:0d:9c:91:2d:83:9b:cd:24:6b:0e:68:60:c6: b4:85:d4:c1:54:d0:5d:34:a9:ec:66:cb:b5:78:f3: c6:f2:c0:d3:19:f4:8d:0d:b3:fc:ea:8a:36:96:37: b7:bf:c6:fd:6a:6b:2b:80:c1:dd:53:33:e3:cc:9c: 8a:40:77:52:b1:1f:a3:76:cb:8b:e6:ae:4c:40:f8: 30:20:47:9d:3f:6b:28:3e:de:09:3c:33:63:ce:63: 83:fe:a9:9f:72:23:cd:99:7a:25:97:0f:4a:fc:68: d1:45:7b:ee:76:91:dc:bf:21:67:a7:3b:04:8f:93: 27:fd:ac:9e:d4:84:c8:84:25:c7:df:15:38:1c:2e: d1:ef:ab:08:a8:99:14:a4:35:00:32:ea:55:cc:42: ef:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:01:11:72:09:8C:AD:FE:D6:04:03:59:21:18:98:FD:05:AF:2A:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d72bec8-a1a0-3a48-b226-ac1996fbd649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:62:a8:5a:a3:50:b4:e3:84:fb:b2:b3:e9:1b:65:af:fc:e9: b1:ea:0d:70:f4:bf:e7:87:f3:bc:ea:0c:2a:4c:e4:55:fe:b8: cd:fd:1e:34:02:82:33:66:5f:87:9a:44:7a:b1:6f:4d:3f:33: 93:a0:c7:c7:68:05:44:b8:e8:79:27:26:ca:96:37:41:44:5b: 18:a7:18:9d:71:2a:9a:a0:00:c8:13:68:19:d7:d9:b0:14:8b: c0:49:22:00:4b:3c:46:1d:ba:df:ad:f2:70:1c:ac:be:6d:71: 9d:eb:94:a5:6e:9d:bb:9f:f9:72:a8:00:f1:d8:31:34:c4:37: 72:d6:be:2c:0c:c5:70:93:f2:48:dc:ce:86:02:2b:b8:6b:e9: e1:ff:2e:6a:d4:26:58:14:53:fc:11:91:3c:42:64:89:99:b0: 39:df:3b:9d:7d:f7:5c:ca:96:06:af:e5:9c:ca:ac:96:e3:e1: 42:11:1c:73:fe:21:46:c0:ce:c9:bb:91:8a:52:a0:1d:de:0e: b0:6a:74:dc:d9:32:1a:cc:27:30:45:72:a9:20:ab:ec:9d:1f: 5d:db:ab:de:99:0b:8f:63:f8:20:15:ad:c6:d3:4a:1f:30:2d: 19:98:df:f6:f1:bd:53:22:5b:c3:f4:e5:3d:68:2f:40:0d:7c: 61:6b:c6:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCC0lZhqEj4E9lUGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk YzU4N2JlMmYtYWFlNC00NmUwLTgyNzAtYjJjNDQ3MTQ4ZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvugiwePDSjWSI1WgG+2TQyj8R46MW9YTzTcP vg8xFhnyvOGmLscKQ9kUjglhtB0RAC8eDgOqhqGBPYyERpSG1Hbef/saFJ8rAxtT WncbPCmYnnXmtPKuF8mhOjtOZyEwVfRg18faYHWvKg2ckS2Dm80kaw5oYMa0hdTB VNBdNKnsZsu1ePPG8sDTGfSNDbP86oo2lje3v8b9amsrgMHdUzPjzJyKQHdSsR+j dsuL5q5MQPgwIEedP2soPt4JPDNjzmOD/qmfciPNmXollw9K/GjRRXvudpHcvyFn pzsEj5Mn/aye1ITIhCXH3xU4HC7R76sIqJkUpDUAMupVzELvzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQBEXIJjK3+1gQDWSEYmP0FryqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmQ3MmJlYzgtYTFhMC0z YTQ4LWIyMjYtYWMxOTk2ZmJkNjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdiqFqjULTjhPuys+kbZa/86bHqDXD0v+eH87zqDCpM5FX+uM39HjQC gjNmX4eaRHqxb00/M5Ogx8doBUS46HknJsqWN0FEWxinGJ1xKpqgAMgTaBnX2bAU i8BJIgBLPEYdut+t8nAcrL5tcZ3rlKVunbuf+XKoAPHYMTTEN3LWviwMxXCT8kjc zoYCK7hr6eH/LmrUJlgUU/wRkTxCZImZsDnfO51991zKlgav5ZzKrJbj4UIRHHP+ IUbAzsm7kYpSoB3eDrBqdNzZMhrMJzBFcqkgq+ydH13bq96ZC49j+CAVrcbTSh8w LRmY3/bxvVMiW8P05T1oL0ANfGFrxuo= -----END CERTIFICATE-----Generated at Sun Jun 15 15:10:12 2025 by rpki-client