$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5516c42c-43b7-30c5-b6fb-85bd6056d05a.roa File: 5516c42c-43b7-30c5-b6fb-85bd6056d05a.roa (raw, json) Hash identifier: OKjIPvoTGSIZylZ7ZMDIIzu88UDW4IaW/QBvRY/BB2w= Subject key identifier: AA:D4:75:F1:D4:DC:A8:7E:DD:AF:A0:85:4D:B1:DF:7C:FC:A9:24:F8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BACA342931BE5052CE9720 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5516c42c-43b7-30c5-b6fb-85bd6056d05a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 192.178.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:ca:34:29:31:be:50:52:ce:97:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=845f02ed-a58d-4ddc-87b9-70725c23ba2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3a:53:40:d3:a5:4e:9e:8d:9f:75:05:ea:ff: 30:be:29:16:4d:bc:eb:69:ac:e0:98:2b:85:5c:76: e0:42:24:d1:10:8a:f7:95:1f:24:be:29:1c:78:dd: c7:b2:8e:dd:51:ed:89:2c:aa:fb:bc:b6:aa:e9:65: d2:e0:f5:78:9a:e0:9c:c5:23:3a:70:e1:ce:39:ca: b5:87:72:69:53:cc:5d:86:31:f1:53:49:65:95:a4: 45:16:31:d9:bd:2f:26:02:b7:c1:18:99:0e:84:3f: 02:70:3e:d5:94:8d:02:b6:03:56:8e:81:89:b5:6f: f0:b0:32:69:98:94:bb:8b:c0:57:03:63:14:25:97: 65:45:2f:46:37:f7:b5:5a:bd:93:bc:aa:3d:0f:36: 63:91:a4:fe:44:3e:4e:68:38:df:ce:15:26:b9:b9: 7f:a0:23:c5:ad:c6:03:0e:17:78:99:2b:b1:24:db: 58:1b:5f:c5:b2:9c:49:90:ff:c9:b6:c7:59:c9:d9: e2:a5:68:88:5c:d9:d4:c4:59:7c:02:7a:16:56:61: cc:fe:c7:72:88:56:aa:c9:b2:54:9a:c5:3b:4e:e5: c7:ab:e5:15:53:07:be:63:08:50:9a:af:e5:a0:29: fb:41:08:bd:72:7c:55:26:af:37:3e:7f:a4:e6:5a: 58:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D4:75:F1:D4:DC:A8:7E:DD:AF:A0:85:4D:B1:DF:7C:FC:A9:24:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5516c42c-43b7-30c5-b6fb-85bd6056d05a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5f:e2:8a:a8:f0:45:de:a5:2b:e7:ad:7c:09:b0:46:fa:ad: 22:33:be:f8:95:74:87:1c:53:9b:80:db:37:f7:ca:81:db:bf: 30:88:2a:32:d3:06:22:22:2a:70:a4:44:40:97:33:3d:00:3e: 8e:9b:59:7a:9a:ba:91:ca:97:c1:98:3d:f3:75:32:1d:90:4d: 78:23:b9:0a:55:e5:e6:b1:be:21:9e:5d:04:96:ed:c6:0b:44: a5:14:f0:21:dd:45:4d:00:6e:5c:4f:2e:6f:50:5a:6a:80:c5: bf:7d:61:28:b7:67:66:68:8f:a8:43:38:8b:05:f4:8c:63:32: cb:4f:72:c6:70:f7:20:42:c1:2e:26:90:dc:78:1b:95:df:c3: f4:4f:29:8f:33:7b:02:15:b3:f9:23:54:14:8f:6f:bd:f1:ad: f6:d3:00:87:0a:a6:01:21:05:6a:91:a2:04:4a:cc:22:60:e3: 5c:54:c2:9b:e3:b9:11:13:60:8d:c2:5d:56:b5:63:3b:28:85: 11:d9:71:4d:ac:55:47:36:e8:d2:36:97:80:eb:40:0f:c5:d9: a6:b2:95:7d:28:ea:fb:d2:80:9b:7b:0f:32:4e:6f:80:7e:d9: 4b:8b:cd:9f:72:55:3d:7f:8a:c9:e6:ff:ef:d7:b9:41:2a:e6: 5a:d9:e0:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuso0KTG+UFLOlyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODQ1ZjAyZWQtYTU4ZC00ZGRjLTg3YjktNzA3MjVjMjNiYTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TpTQNOlTp6Nn3UF6v8wvikWTbzraazgmCuF XHbgQiTREIr3lR8kvikceN3Hso7dUe2JLKr7vLaq6WXS4PV4muCcxSM6cOHOOcq1 h3JpU8xdhjHxU0lllaRFFjHZvS8mArfBGJkOhD8CcD7VlI0CtgNWjoGJtW/wsDJp mJS7i8BXA2MUJZdlRS9GN/e1Wr2TvKo9DzZjkaT+RD5OaDjfzhUmubl/oCPFrcYD Dhd4mSuxJNtYG1/FspxJkP/JtsdZydnipWiIXNnUxFl8AnoWVmHM/sdyiFaqybJU msU7TuXHq+UVUwe+YwhQmq/loCn7QQi9cnxVJq83Pn+k5lpY9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrUdfHU3Kh+3a+ghU2x33z8qST4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTUxNmM0MmMtNDNiNy0z MGM1LWI2ZmItODViZDYwNTZkMDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLIpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdf4oqo8EXepSvnrXwJsEb6rSIzvviVdIccU5uA2zf3yoHbvzCIKjLT BiIiKnCkRECXMz0APo6bWXqaupHKl8GYPfN1Mh2QTXgjuQpV5eaxviGeXQSW7cYL RKUU8CHdRU0AblxPLm9QWmqAxb99YSi3Z2Zoj6hDOIsF9IxjMstPcsZw9yBCwS4m kNx4G5Xfw/RPKY8zewIVs/kjVBSPb73xrfbTAIcKpgEhBWqRogRKzCJg41xUwpvj uRETYI3CXVa1YzsohRHZcU2sVUc26NI2l4DrQA/F2aaylX0o6vvSgJt7DzJOb4B+ 2UuLzZ9yVT1/isnm/+/XuUEq5lrZ4Hw= -----END CERTIFICATE-----Generated at Sun Apr 27 07:06:54 2025 by rpki-client