$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d4eb15-889c-3c2c-a1e4-482420b45122.roa File: 32d4eb15-889c-3c2c-a1e4-482420b45122.roa (raw, json) Hash identifier: PJTIkACAUHPC30EZBzjGj3Z3VEa5sWvXzLZJynibR6s= Subject key identifier: 61:92:7D:6A:5B:24:58:E5:DA:98:08:1C:F2:8B:18:4A:0B:C0:0A:7B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849631ECE5CA79D6136C1003860 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d4eb15-889c-3c2c-a1e4-482420b45122.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 192.178.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:ce:5c:a7:9d:61:36:c1:00:38:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=94090b3f-87d4-4b30-99db-ef52a30d561e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1f:e6:17:dd:a0:4c:70:3d:7b:b5:29:a5:d7: 7f:9d:49:2f:15:08:e5:3a:78:14:92:08:b5:3e:03: 0e:63:9c:5c:77:d6:9c:f0:85:1a:32:16:c1:13:fc: 22:07:4a:6e:94:3b:23:83:7a:77:c5:b3:4e:7e:09: c8:a8:31:b9:40:c3:16:b3:f3:c2:0a:e9:66:10:9f: 82:ca:20:46:b5:ce:0c:f6:3e:e4:8a:dd:9d:09:fc: 7d:4b:e7:98:d3:82:a5:c9:cf:8e:1c:b1:99:5f:ac: b8:8a:55:1c:26:6a:80:6e:fb:33:a2:4b:11:b8:ed: 28:f1:c8:1d:5d:82:20:05:f5:8e:21:10:0d:d0:dd: 6c:3f:56:7d:36:6a:a8:c3:d7:13:9c:75:2c:76:fe: 4a:d8:ed:ec:b5:4b:83:22:03:7b:8e:48:c4:60:8b: 0b:ad:56:07:51:e4:a5:4a:e8:c2:67:80:50:85:c7: 1d:38:50:df:ae:98:ef:c4:a0:0d:0e:df:e5:ef:48: 72:8c:e3:db:e0:5a:ae:ab:06:30:48:a0:a7:b2:68: a8:6f:e5:8f:a4:59:8e:b2:f9:0a:e8:41:fe:13:9e: 99:a1:59:9e:92:bf:f8:34:65:d4:c5:91:40:cc:f2: df:d5:b9:54:a8:53:c4:9a:52:68:fd:60:3c:5c:55: 28:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:92:7D:6A:5B:24:58:E5:DA:98:08:1C:F2:8B:18:4A:0B:C0:0A:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d4eb15-889c-3c2c-a1e4-482420b45122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:a8:82:42:44:b5:d6:29:7e:f3:05:2a:e3:61:70:b1:b8:00: 05:d5:ab:8f:cd:31:d1:d2:8f:0c:18:70:c2:c6:4c:80:2e:a1: 56:9f:98:54:df:0b:6d:31:c7:ac:ed:12:0c:23:3a:ba:51:5e: fd:c8:8e:00:4a:b0:bc:05:76:3c:ee:f1:c6:5e:51:08:19:4d: fc:f0:cb:02:ff:e8:76:3e:7a:4e:c3:b0:46:b4:a1:8b:b6:90: e1:aa:53:bd:3e:f3:bd:6d:af:8b:c4:75:af:ad:5e:f0:ac:49: 77:1b:2b:bc:d7:0b:2f:df:67:26:03:f7:a7:e9:b8:cb:e3:bb: 2b:46:bf:26:d4:80:6b:54:b7:b8:99:be:56:04:f4:88:54:75: ae:09:b1:c9:6f:f3:d3:c5:59:4f:7d:7a:ff:18:91:5b:7b:73: 4a:ed:c2:a6:6b:fc:70:80:2d:52:49:66:a4:93:32:d4:37:08: 86:00:d7:a8:5b:24:82:e0:23:9e:ed:53:63:94:8c:d3:90:37: c0:00:72:69:a7:f7:b7:bc:25:02:24:92:b7:46:96:c3:d1:dc: c7:8e:86:73:e6:c3:05:aa:bd:54:8f:aa:c8:66:d0:b7:e7:0a: f5:1e:4a:25:84:4e:87:1b:02:11:0c:23:00:cb:60:f2:87:8f: 2a:21:64:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHs5cp51hNsEAOGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk OTQwOTBiM2YtODdkNC00YjMwLTk5ZGItZWY1MmEzMGQ1NjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR/mF92gTHA9e7Uppdd/nUkvFQjlOngUkgi1 PgMOY5xcd9ac8IUaMhbBE/wiB0pulDsjg3p3xbNOfgnIqDG5QMMWs/PCCulmEJ+C yiBGtc4M9j7kit2dCfx9S+eY04Klyc+OHLGZX6y4ilUcJmqAbvszoksRuO0o8cgd XYIgBfWOIRAN0N1sP1Z9Nmqow9cTnHUsdv5K2O3stUuDIgN7jkjEYIsLrVYHUeSl SujCZ4BQhccdOFDfrpjvxKANDt/l70hyjOPb4FquqwYwSKCnsmiob+WPpFmOsvkK 6EH+E56ZoVmekr/4NGXUxZFAzPLf1blUqFPEmlJo/WA8XFUocQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGSfWpbJFjl2pgIHPKLGEoLwAp7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzJkNGViMTUtODg5Yy0z YzJjLWExZTQtNDgyNDIwYjQ1MTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiogkJEtdYpfvMFKuNhcLG4AAXVq4/NMdHSjwwYcMLGTIAuoVafmFTf C20xx6ztEgwjOrpRXv3IjgBKsLwFdjzu8cZeUQgZTfzwywL/6HY+ek7DsEa0oYu2 kOGqU70+871tr4vEda+tXvCsSXcbK7zXCy/fZyYD96fpuMvjuytGvybUgGtUt7iZ vlYE9IhUda4Jsclv89PFWU99ev8YkVt7c0rtwqZr/HCALVJJZqSTMtQ3CIYA16hb JILgI57tU2OUjNOQN8AAcmmn97e8JQIkkrdGlsPR3MeOhnPmwwWqvVSPqshm0Lfn CvUeSiWETocbAhEMIwDLYPKHjyohZGQ= -----END CERTIFICATE-----Generated at Sat Apr 26 19:52:49 2025 by rpki-client