$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5181a26b-8eb3-3ca9-a568-7c8733afd29e.roa File: 5181a26b-8eb3-3ca9-a568-7c8733afd29e.roa (raw, json) Hash identifier: Y8xLEF7ddIICI6/vP3irYzHmuwXRjjmeCQe+SB3oxU0= Subject key identifier: F9:68:EC:8F:80:DE:84:03:38:8A:02:B9:AA:A7:A2:7E:41:92:75:6A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584979744FD5C27162A21C1A0E20 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5181a26b-8eb3-3ca9-a568-7c8733afd29e.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 192.178.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:4f:d5:c2:71:62:a2:1c:1a:0e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=e8368961-e883-4264-8bfd-7428208ac975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:71:d8:cf:dd:70:5a:15:19:25:74:9f:d4:5e: dd:09:f1:26:b5:0d:49:f4:5d:f3:bc:30:2e:bd:af: 55:e7:ad:f7:8a:63:9b:f9:c2:20:d0:f6:96:37:12: 0c:13:48:4c:c3:61:81:54:5e:85:c6:2e:0c:39:88: 03:60:e6:6b:8b:75:ab:0d:f2:f8:50:2b:41:db:1b: 0c:49:38:f1:0e:aa:f7:79:19:e8:2a:e8:d3:00:b1: b6:f8:3a:e7:c2:20:1d:bd:8a:2f:ee:36:ca:76:97: a2:69:14:56:b6:5e:8c:b5:a0:d9:aa:ef:e4:47:ac: 8d:16:fc:c5:e9:71:81:67:f4:0a:d0:e2:5b:0f:85: ac:1b:5e:c6:64:ef:ef:d3:2a:4e:94:2a:7e:de:8f: 9f:5f:c9:12:15:f1:e7:86:e3:97:b5:e6:28:37:09: d2:04:43:52:7a:a7:89:be:e0:41:11:46:84:6c:12: a7:d1:dd:44:31:61:41:f7:14:7e:32:4c:a1:4e:54: 6c:15:46:d4:69:6b:28:4b:3b:ac:84:36:80:3b:56: 2a:90:10:a8:4f:fd:4f:a8:e7:f6:ba:f4:15:13:b9: 8d:ed:35:2f:b9:95:77:39:a5:c0:f3:99:50:78:ea: bd:de:56:8e:c2:7f:e2:76:5d:bd:31:46:0a:8c:b4: e0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:68:EC:8F:80:DE:84:03:38:8A:02:B9:AA:A7:A2:7E:41:92:75:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5181a26b-8eb3-3ca9-a568-7c8733afd29e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f6:6a:a6:f3:84:b7:e4:58:1a:7e:ba:04:c2:78:5d:0a:f3: 9f:98:4c:95:9f:82:66:9c:6a:a6:e5:37:18:15:23:c1:8a:3c: f5:97:58:b2:42:6f:96:ff:74:47:ac:82:6b:f1:17:48:86:b4: 15:30:56:c3:9c:53:77:bd:ba:03:32:6b:35:fe:e9:d7:15:a0: a9:5c:b5:62:6f:90:91:af:e1:13:5f:48:4b:59:fd:9c:3b:7c: bf:ca:de:ff:3a:30:44:e3:ff:f1:6c:c6:98:0a:b2:b2:ed:bd: 97:05:7b:25:95:39:a1:8c:31:f9:57:3c:c2:fa:75:34:a4:a4: b9:82:30:d1:46:8c:53:bf:22:35:16:af:39:cb:b2:b4:3e:07: 83:ab:af:02:ac:7d:b3:5d:23:1d:c3:6c:fa:69:69:34:da:15: ba:6e:78:a6:7c:5c:93:9f:48:4a:20:72:43:40:fc:04:54:7f: 94:46:b0:87:95:bb:43:b9:02:79:6b:1b:9a:5f:01:24:da:56: 07:da:09:6d:80:7f:b4:66:9c:95:f9:c4:f9:c1:a8:58:92:b1: 52:bc:b3:6f:85:cb:cb:14:89:b6:1d:0f:e5:f6:99:6e:19:01: 52:86:f9:a3:b4:4e:ad:fd:59:d3:cb:c9:0c:96:fa:28:93:66: 7d:68:ca:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dE/VwnFiohwaDiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk ZTgzNjg5NjEtZTg4My00MjY0LThiZmQtNzQyODIwOGFjOTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3HYz91wWhUZJXSf1F7dCfEmtQ1J9F3zvDAu va9V5633imOb+cIg0PaWNxIME0hMw2GBVF6Fxi4MOYgDYOZri3WrDfL4UCtB2xsM STjxDqr3eRnoKujTALG2+DrnwiAdvYov7jbKdpeiaRRWtl6MtaDZqu/kR6yNFvzF 6XGBZ/QK0OJbD4WsG17GZO/v0ypOlCp+3o+fX8kSFfHnhuOXteYoNwnSBENSeqeJ vuBBEUaEbBKn0d1EMWFB9xR+MkyhTlRsFUbUaWsoSzushDaAO1YqkBCoT/1PqOf2 uvQVE7mN7TUvuZV3OaXA85lQeOq93laOwn/idl29MUYKjLTgCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlo7I+A3oQDOIoCuaqnon5BknVqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTE4MWEyNmItOGViMy0z Y2E5LWE1NjgtN2M4NzMzYWZkMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACf2aqbzhLfkWBp+ugTCeF0K85+YTJWfgmacaqblNxgVI8GKPPWXWLJC b5b/dEesgmvxF0iGtBUwVsOcU3e9ugMyazX+6dcVoKlctWJvkJGv4RNfSEtZ/Zw7 fL/K3v86METj//FsxpgKsrLtvZcFeyWVOaGMMflXPML6dTSkpLmCMNFGjFO/IjUW rznLsrQ+B4OrrwKsfbNdIx3DbPppaTTaFbpueKZ8XJOfSEogckNA/ARUf5RGsIeV u0O5AnlrG5pfASTaVgfaCW2Af7RmnJX5xPnBqFiSsVK8s2+Fy8sUibYdD+X2mW4Z AVKG+aO0Tq39WdPLyQyW+iiTZn1oynY= -----END CERTIFICATE-----Generated at Sat Apr 26 20:53:44 2025 by rpki-client