$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a75a81d-edcf-38cd-ad25-79f23c4848e6.roa File: 5a75a81d-edcf-38cd-ad25-79f23c4848e6.roa (raw, json) Hash identifier: CXdNziwzqK70/QRN7KADdkwYSnKED4GoBO3NkJ+PYSg= Subject key identifier: 92:73:F7:B7:12:47:CD:1E:E3:D3:D5:A7:09:8B:0E:E0:1F:CE:4D:3D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584979744FE71E6FCDE3CDF93B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a75a81d-edcf-38cd-ad25-79f23c4848e6.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 192.178.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:4f:e7:1e:6f:cd:e3:cd:f9:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=d851aebe-5381-4b2f-be2e-400cac17d60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:da:0b:e6:dc:3c:b5:74:44:fd:a5:7e:d1:8b: 9c:74:d3:62:61:b7:f8:df:93:37:a7:81:0f:c7:bf: fd:17:6c:0b:d2:22:ad:3e:e3:23:e2:40:22:eb:cd: 35:0b:44:1c:0a:ec:e8:a7:39:b3:0f:7e:b3:79:5e: c7:4d:6d:5f:4f:bd:af:6e:30:0a:63:b2:54:b8:19: ce:e7:c8:b6:e3:71:75:6b:ef:e7:e5:67:36:e9:c9: 42:f7:24:34:e3:c6:db:79:84:73:ec:02:fc:6e:eb: aa:98:34:7f:11:aa:b0:e8:05:c8:1b:09:ea:9f:0a: 40:d2:cb:e7:8f:d3:d3:ad:78:4d:0d:e5:10:3e:a4: 18:1d:97:d6:0d:60:45:f5:94:57:ec:d0:07:c3:89: 5d:ea:53:70:55:1d:51:07:43:0c:cb:2f:81:d7:33: f4:c5:b4:98:cc:55:32:66:ba:bc:e0:57:09:c6:c4: a6:86:95:45:f1:b4:56:eb:47:36:c9:f8:58:90:ea: 1c:a0:5b:c2:7c:19:5b:f8:f5:df:58:db:fe:a0:2d: 87:f8:e1:dd:07:e4:de:c5:66:d1:5a:97:73:2d:17: cf:30:a2:c6:97:8b:87:ad:64:52:d3:e7:ec:8c:ff: 45:58:73:6c:fd:75:24:ac:46:13:58:03:af:2e:95: 17:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:73:F7:B7:12:47:CD:1E:E3:D3:D5:A7:09:8B:0E:E0:1F:CE:4D:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a75a81d-edcf-38cd-ad25-79f23c4848e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:43:4b:e6:6a:46:d3:06:84:fa:32:72:f4:23:8e:62:24:7e: a2:c4:ee:7c:2f:93:61:18:fe:02:cd:2f:94:b7:63:80:64:ed: ad:06:bc:c6:d6:8b:89:08:4b:75:2d:3c:e3:d4:13:c9:6c:62: e6:3c:c3:aa:af:33:71:63:b0:33:99:f5:fd:ff:f0:f3:fd:b4: 29:e0:c7:d4:d3:44:8b:ba:e8:e4:e4:9d:24:52:54:42:4a:3d: 62:82:ae:0a:47:93:67:f0:70:1d:c7:69:47:1a:d7:2c:df:c0: f7:cb:d8:d3:19:f3:59:2c:c7:00:81:d1:13:75:5d:45:76:ed: d0:14:7e:a8:40:40:11:63:7c:8b:15:28:86:56:2a:d4:a1:90: d1:51:11:ef:b3:5f:85:f8:4d:a6:e3:80:4e:e4:79:6b:77:2c: b5:f6:aa:e4:e6:19:59:54:ca:73:99:89:24:db:4e:a3:15:92: ed:4f:b8:cd:e4:51:d7:a0:c1:c0:31:8a:9f:41:01:f5:7b:2d: 44:d1:96:d0:df:1c:a7:8a:c2:1e:48:cf:01:f8:6f:16:37:62: 9c:f2:e2:75:34:cd:ed:98:be:25:e5:84:b3:78:9f:49:36:4c: 6c:0e:af:79:89:a9:2c:fa:59:c4:37:af:08:4b:ef:7a:09:54: 31:a3:e3:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dE/nHm/N4835O4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk ZDg1MWFlYmUtNTM4MS00YjJmLWJlMmUtNDAwY2FjMTdkNjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNoL5tw8tXRE/aV+0YucdNNiYbf435M3p4EP x7/9F2wL0iKtPuMj4kAi6801C0QcCuzopzmzD36zeV7HTW1fT72vbjAKY7JUuBnO 58i243F1a+/n5Wc26clC9yQ048bbeYRz7AL8buuqmDR/Eaqw6AXIGwnqnwpA0svn j9PTrXhNDeUQPqQYHZfWDWBF9ZRX7NAHw4ld6lNwVR1RB0MMyy+B1zP0xbSYzFUy Zrq84FcJxsSmhpVF8bRW60c2yfhYkOocoFvCfBlb+PXfWNv+oC2H+OHdB+TexWbR WpdzLRfPMKLGl4uHrWRS0+fsjP9FWHNs/XUkrEYTWAOvLpUXCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJz97cSR80e49PVpwmLDuAfzk09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWE3NWE4MWQtZWRjZi0z OGNkLWFkMjUtNzlmMjNjNDg0OGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtDS+ZqRtMGhPoycvQjjmIkfqLE7nwvk2EY/gLNL5S3Y4Bk7a0GvMbW i4kIS3UtPOPUE8lsYuY8w6qvM3FjsDOZ9f3/8PP9tCngx9TTRIu66OTknSRSVEJK PWKCrgpHk2fwcB3HaUca1yzfwPfL2NMZ81ksxwCB0RN1XUV27dAUfqhAQBFjfIsV KIZWKtShkNFREe+zX4X4TabjgE7keWt3LLX2quTmGVlUynOZiSTbTqMVku1PuM3k UdegwcAxip9BAfV7LUTRltDfHKeKwh5IzwH4bxY3Ypzy4nU0ze2YviXlhLN4n0k2 TGwOr3mJqSz6WcQ3rwhL73oJVDGj4xM= -----END CERTIFICATE-----Generated at Sat Apr 26 20:53:01 2025 by rpki-client