$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68b5c59d-ce17-3d38-90cd-799bf0f8d771.roa File: 68b5c59d-ce17-3d38-90cd-799bf0f8d771.roa (raw, json) Hash identifier: r3hVK32xbg5DALuT51+UAVjuZc3z6GiALvEweEkB8NY= Subject key identifier: C5:AA:FB:87:CE:EC:A8:39:3C:F1:4D:84:DF:7C:96:5E:BD:AB:7F:EB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849631ED027D7B34C33E07B7A80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68b5c59d-ce17-3d38-90cd-799bf0f8d771.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 192.178.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:d0:27:d7:b3:4c:33:e0:7b:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=1cacc237-972d-4108-a920-096146b51637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7e:66:c8:d8:09:19:8e:b9:a0:5a:76:9f:6b: c0:ae:31:a0:91:60:6f:13:7a:75:89:e7:b5:4b:8f: 5b:33:9e:a6:0c:c9:d3:c2:d3:67:94:7c:95:5b:76: 90:9a:7f:ed:9e:77:57:0c:52:fd:20:18:ba:26:4e: 76:82:63:9b:e8:15:8e:c8:cb:ea:48:16:7c:35:e0: b4:2c:34:92:45:b2:f2:83:d7:6b:33:8b:bd:93:5f: 3f:4f:f1:cf:9e:2c:dd:62:39:ce:14:4d:b9:0b:19: 79:4f:13:0c:e7:ee:e6:f8:ae:b1:f2:46:4a:01:0b: 02:b2:1c:fe:16:b9:ac:11:78:5d:74:fc:b6:3b:0c: 24:93:03:a7:17:ca:fe:6e:f2:03:39:27:89:45:a2: 0e:24:32:28:a6:41:5c:77:bb:18:6c:8b:3d:d9:21: 53:05:c8:d2:80:f9:96:c5:1a:11:32:47:1f:b7:ff: a3:e7:0c:63:3d:a8:12:97:a2:ee:b7:ad:9b:bb:12: 9a:6e:51:b8:08:19:3d:cd:55:54:8d:3a:ff:bb:5b: 38:4e:13:06:6e:2f:29:b7:82:41:c0:e4:2f:c2:88: 01:5e:be:10:67:6c:7d:31:ff:ac:bd:e0:aa:d8:cf: 5e:1c:ba:28:c5:85:87:dc:aa:bd:55:40:b3:11:7f: 0a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AA:FB:87:CE:EC:A8:39:3C:F1:4D:84:DF:7C:96:5E:BD:AB:7F:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68b5c59d-ce17-3d38-90cd-799bf0f8d771.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:7e:0a:19:6e:10:2d:e1:e4:f1:ff:d7:a0:e9:71:1d:7b:76: 2b:13:08:3a:53:8b:17:7c:04:9f:05:7c:79:8d:60:c6:fe:b3: 52:6c:18:73:3a:20:72:f9:93:5e:84:78:e2:e3:96:62:21:a4: 3a:87:e7:dd:9a:cc:0a:ba:6e:37:53:46:19:43:3a:b2:f9:b3: 68:61:65:0b:5f:df:a0:3b:87:1f:da:57:3a:0e:95:92:8c:1f: 53:2a:07:d7:49:68:2e:56:46:95:57:09:36:6f:e4:79:69:7b: 02:bd:10:54:6a:b7:87:c8:8d:ab:0e:02:b3:95:dd:3e:af:67: b1:b9:8e:9a:47:eb:8c:fe:66:19:93:53:21:5f:f5:cf:91:7a: 97:ae:46:1e:12:c7:12:cc:0d:8c:ae:45:7f:0c:ee:38:19:84: 95:26:2c:a6:f8:c0:de:2d:02:ad:4c:b0:d8:ef:7f:c0:d3:6f: 54:91:ac:22:0d:35:f0:e7:f8:b3:4e:ea:0c:76:8b:b9:4c:73: 73:58:47:bc:79:8d:70:9a:71:12:0f:25:00:85:f6:21:27:83: 74:7d:14:5b:af:5e:c2:5d:a1:a9:30:95:f8:86:24:ad:dc:6a: bf:49:f6:e4:49:18:fb:82:53:73:98:db:a7:b4:6d:8e:b5:86: ca:48:42:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHtAn17NMM+B7eoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk MWNhY2MyMzctOTcyZC00MTA4LWE5MjAtMDk2MTQ2YjUxNjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj35myNgJGY65oFp2n2vArjGgkWBvE3p1iee1 S49bM56mDMnTwtNnlHyVW3aQmn/tnndXDFL9IBi6Jk52gmOb6BWOyMvqSBZ8NeC0 LDSSRbLyg9drM4u9k18/T/HPnizdYjnOFE25Cxl5TxMM5+7m+K6x8kZKAQsCshz+ FrmsEXhddPy2OwwkkwOnF8r+bvIDOSeJRaIOJDIopkFcd7sYbIs92SFTBcjSgPmW xRoRMkcft/+j5wxjPagSl6Lut62buxKablG4CBk9zVVUjTr/u1s4ThMGbi8pt4JB wOQvwogBXr4QZ2x9Mf+sveCq2M9eHLooxYWH3Kq9VUCzEX8KMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWq+4fO7Kg5PPFNhN98ll69q3/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjhiNWM1OWQtY2UxNy0z ZDM4LTkwY2QtNzk5YmYwZjhkNzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEh+ChluEC3h5PH/16DpcR17disTCDpTixd8BJ8FfHmNYMb+s1JsGHM6 IHL5k16EeOLjlmIhpDqH592azAq6bjdTRhlDOrL5s2hhZQtf36A7hx/aVzoOlZKM H1MqB9dJaC5WRpVXCTZv5HlpewK9EFRqt4fIjasOArOV3T6vZ7G5jppH64z+ZhmT UyFf9c+RepeuRh4SxxLMDYyuRX8M7jgZhJUmLKb4wN4tAq1MsNjvf8DTb1SRrCIN NfDn+LNO6gx2i7lMc3NYR7x5jXCacRIPJQCF9iEng3R9FFuvXsJdoakwlfiGJK3c ar9J9uRJGPuCU3OY26e0bY61hspIQvk= -----END CERTIFICATE-----Generated at Sun Apr 27 11:19:57 2025 by rpki-client