$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e772925-bb32-3593-a988-6cdc6f1d8a11.roa File: 3e772925-bb32-3593-a988-6cdc6f1d8a11.roa (raw, json) Hash identifier: LM7IhH6ZK34u7wk5mJHJdS8xzdUJ1O9dfjdb41HYqFI= Subject key identifier: DA:55:DC:49:7B:93:0A:D5:AE:08:93:F6:19:9A:19:89:22:8E:ED:D4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB6ECFDEFDE5E9C5CFF680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e772925-bb32-3593-a988-6cdc6f1d8a11.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 192.178.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:6e:cf:de:fd:e5:e9:c5:cf:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9bc8f760-bab9-4ba4-8062-3e1da876e515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6f:55:f3:56:78:b4:84:7d:10:db:f3:74:5e: 73:17:ea:e4:1e:67:2b:7b:95:59:ac:be:1a:a2:56: 42:8f:c3:6b:bb:9c:e7:0e:5a:7e:64:10:af:3f:8a: 44:de:32:25:a2:90:ef:7c:2b:f8:7f:e5:aa:36:e3: b3:00:ef:ab:09:c0:29:00:56:41:5f:a0:36:9d:0d: 35:3f:47:52:92:71:aa:43:08:e7:dc:56:bb:4e:14: ce:bf:12:fa:df:55:3b:28:57:7f:14:68:de:60:c5: 0f:8f:55:0f:b0:df:21:b2:f6:69:4d:48:ab:c5:46: 44:c5:eb:48:ec:e9:0b:cf:55:b7:69:0c:a1:80:83: 96:3b:11:ff:f2:61:2a:68:b7:17:5d:2e:08:88:6a: 75:90:64:86:2f:d9:1d:0f:e0:ee:55:52:07:4e:7d: 85:43:1c:c0:52:3b:d2:ff:2a:de:c0:cb:40:fa:c7: d8:74:dc:bf:ef:01:d1:a5:66:b3:05:cf:c4:80:05: 55:21:87:88:03:ba:b7:62:60:7f:aa:b5:c6:b3:c3: b8:62:ec:66:fe:be:8b:44:dc:93:5f:59:7b:d8:b4: ed:96:f5:83:cb:3f:ad:3b:e7:bf:70:cb:7f:66:53: 1b:cc:b4:10:d9:32:27:69:cf:b8:db:01:9c:32:84: 0f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:55:DC:49:7B:93:0A:D5:AE:08:93:F6:19:9A:19:89:22:8E:ED:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e772925-bb32-3593-a988-6cdc6f1d8a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:45:3b:a3:f2:98:b4:ca:d0:09:4d:62:3d:22:46:c4:80:a7: 8f:ba:ff:fb:6a:73:f1:12:87:d4:0f:23:46:4a:e3:ad:04:48: 43:5a:e7:e1:f1:f9:02:ed:8b:5c:2f:2f:87:bc:b8:25:9d:61: 59:50:ae:66:1d:7a:93:ac:89:c8:33:6a:49:4e:dd:5c:72:26: 76:24:0b:db:7f:c0:15:35:29:ab:36:cc:58:56:d8:68:97:68: 1c:d9:f8:35:11:51:56:f8:0b:22:31:a2:eb:aa:ff:14:d3:04: 32:4b:a9:4a:d0:98:3f:a1:37:6e:be:13:cc:60:ab:55:fd:4d: 14:16:a2:fd:20:50:55:52:f8:6a:a4:d2:02:3b:6f:d3:f9:94: f2:c3:ad:8e:aa:a0:64:c4:a5:42:d6:41:52:3c:54:0a:8f:01: fc:53:c7:2f:15:34:ee:8d:e6:81:8a:97:65:0f:36:43:57:01: 09:0d:db:f8:de:0b:29:b4:05:d2:01:16:18:20:cd:9c:41:e9: 02:a2:1a:39:4b:bb:0f:45:5d:b1:91:87:4d:38:ca:3d:a8:9c: fe:85:78:01:9c:70:50:c3:bf:f8:b1:7b:be:48:ad:21:da:1c: 04:70:ee:7f:e2:05:52:e7:7f:81:96:9a:9b:86:7d:cb:32:3f: 6c:db:c2:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku27P3v3l6cXP9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWJjOGY3NjAtYmFiOS00YmE0LTgwNjItM2UxZGE4NzZlNTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW9V81Z4tIR9ENvzdF5zF+rkHmcre5VZrL4a olZCj8Nru5znDlp+ZBCvP4pE3jIlopDvfCv4f+WqNuOzAO+rCcApAFZBX6A2nQ01 P0dSknGqQwjn3Fa7ThTOvxL631U7KFd/FGjeYMUPj1UPsN8hsvZpTUirxUZExetI 7OkLz1W3aQyhgIOWOxH/8mEqaLcXXS4IiGp1kGSGL9kdD+DuVVIHTn2FQxzAUjvS /yrewMtA+sfYdNy/7wHRpWazBc/EgAVVIYeIA7q3YmB/qrXGs8O4Yuxm/r6LRNyT X1l72LTtlvWDyz+tO+e/cMt/ZlMbzLQQ2TInac+42wGcMoQP/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpV3El7kwrVrgiT9hmaGYkiju3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2U3NzI5MjUtYmIzMi0z NTkzLWE5ODgtNmNkYzZmMWQ4YTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLIrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlFO6PymLTK0AlNYj0iRsSAp4+6//tqc/ESh9QPI0ZK460ESENa5+Hx +QLti1wvL4e8uCWdYVlQrmYdepOsicgzaklO3VxyJnYkC9t/wBU1Kas2zFhW2GiX aBzZ+DURUVb4CyIxouuq/xTTBDJLqUrQmD+hN26+E8xgq1X9TRQWov0gUFVS+Gqk 0gI7b9P5lPLDrY6qoGTEpULWQVI8VAqPAfxTxy8VNO6N5oGKl2UPNkNXAQkN2/je Cym0BdIBFhggzZxB6QKiGjlLuw9FXbGRh004yj2onP6FeAGccFDDv/ixe75IrSHa HARw7n/iBVLnf4GWmpuGfcsyP2zbwsA= -----END CERTIFICATE-----Generated at Sat Apr 26 19:59:26 2025 by rpki-client