$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/752d5944-68d2-3730-ba55-3df75ad16419.roa File: 752d5944-68d2-3730-ba55-3df75ad16419.roa (raw, json) Hash identifier: /pjgcyBISq239jUMdBUVUQBE8+bk6DWeByxxZtYJDik= Subject key identifier: 58:8F:DA:5E:2F:7F:E5:38:D6:77:67:62:A9:1B:A0:A7:EF:58:5D:4B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858498769BDF13459239580E25980 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/752d5944-68d2-3730-ba55-3df75ad16419.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 15169 IP address blocks: 192.178.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:bd:f1:34:59:23:95:80:e2:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=92adb1d3-ece5-4921-9cd5-f4ff735e77ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e3:63:a2:72:11:6d:cb:e2:99:da:cc:4e:a5: 85:68:3d:37:e0:25:26:fe:0e:f4:87:6a:da:49:80: df:43:ed:4b:b4:0f:67:4e:9d:07:bd:37:96:3b:c6: f6:93:cf:b7:ef:9a:24:c0:45:26:8a:99:74:d6:0b: e0:12:df:fc:4e:9b:e4:cc:a7:47:13:dc:73:e5:06: 25:94:59:db:00:f5:31:b5:b2:4c:01:46:ce:c1:87: 0e:03:a8:1c:1c:b4:5c:21:d7:40:62:be:63:02:59: f7:24:54:b8:10:73:59:f6:fc:16:18:23:49:01:30: 82:ed:93:c1:12:6e:f9:7a:5b:ac:ba:0d:f7:06:37: ea:eb:f3:3c:f5:33:b8:c7:59:6f:cf:af:60:db:ee: fb:74:c5:b1:1c:fd:dd:4d:e9:ff:f2:e9:3f:1e:95: c5:20:69:fa:71:8d:4f:ce:d0:cf:66:d4:67:fb:5c: c7:0e:73:3d:5b:7c:7d:57:fa:ee:7b:3d:d2:67:f3: 91:b3:e2:f9:57:b2:e0:7d:52:dd:17:ce:bf:fa:20: fa:54:bb:1f:35:1e:7e:08:e3:49:34:cb:a1:d5:23: 33:72:9c:a3:74:3e:e8:4f:1a:25:86:3a:65:43:09: b7:3e:19:1d:0b:b1:17:e6:01:1d:c3:fe:b7:a6:4f: 52:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8F:DA:5E:2F:7F:E5:38:D6:77:67:62:A9:1B:A0:A7:EF:58:5D:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/752d5944-68d2-3730-ba55-3df75ad16419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:7d:1b:48:b5:4c:dd:12:0f:1d:ce:2d:af:1f:65:4a:5e:3f: 2b:8f:8a:2c:9d:a9:c9:c6:0b:00:f1:1f:a8:78:3a:a2:7f:22: 18:cd:eb:fa:8b:a8:e0:53:38:cd:6d:10:17:5a:7f:a0:cc:1c: f0:b3:b5:8f:53:e0:6d:cc:31:48:e9:a2:55:99:31:13:ee:b8: ce:7a:58:aa:a3:bd:a6:6a:2d:76:56:59:60:0f:10:8e:15:4a: 83:77:48:39:21:18:51:19:79:c6:ea:4d:5c:25:6a:14:09:7c: f8:32:14:44:77:6c:a9:95:72:90:05:4f:c0:13:3d:d9:2a:04: b0:f7:7b:f3:33:58:bf:a5:ba:3a:95:1d:e0:c0:30:c3:32:bd: 85:5f:b5:94:39:7e:9b:91:ab:b9:3f:00:d3:36:09:97:3f:c2: f3:30:9e:36:21:76:68:e6:d4:17:8f:0d:bc:5b:93:43:86:6f: 5c:5f:12:69:72:66:c4:a0:1e:84:b6:a4:80:03:28:f1:7c:8f: c0:c6:03:de:da:57:04:80:31:07:78:c4:d4:d6:a5:bc:d0:ee: a1:3a:b7:1b:51:24:e9:fc:0f:70:d0:a2:db:60:41:a1:74:87: c3:64:24:71:f6:72:8a:7a:a8:3e:f6:12:96:ea:e9:52:9f:9b: 42:c2:3a:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHab3xNFkjlYDiWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk OTJhZGIxZDMtZWNlNS00OTIxLTljZDUtZjRmZjczNWU3N2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhONjonIRbcvimdrMTqWFaD034CUm/g70h2ra SYDfQ+1LtA9nTp0HvTeWO8b2k8+375okwEUmipl01gvgEt/8TpvkzKdHE9xz5QYl lFnbAPUxtbJMAUbOwYcOA6gcHLRcIddAYr5jAln3JFS4EHNZ9vwWGCNJATCC7ZPB Em75elusug33Bjfq6/M89TO4x1lvz69g2+77dMWxHP3dTen/8uk/HpXFIGn6cY1P ztDPZtRn+1zHDnM9W3x9V/ruez3SZ/ORs+L5V7LgfVLdF86/+iD6VLsfNR5+CONJ NMuh1SMzcpyjdD7oTxolhjplQwm3PhkdC7EX5gEdw/63pk9SjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiP2l4vf+U41ndnYqkboKfvWF1LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzUyZDU5NDQtNjhkMi0z NzMwLWJhNTUtM2RmNzVhZDE2NDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJ9G0i1TN0SDx3OLa8fZUpePyuPiiydqcnGCwDxH6h4OqJ/IhjN6/qL qOBTOM1tEBdaf6DMHPCztY9T4G3MMUjpolWZMRPuuM56WKqjvaZqLXZWWWAPEI4V SoN3SDkhGFEZecbqTVwlahQJfPgyFER3bKmVcpAFT8ATPdkqBLD3e/MzWL+lujqV HeDAMMMyvYVftZQ5fpuRq7k/ANM2CZc/wvMwnjYhdmjm1BePDbxbk0OGb1xfEmly ZsSgHoS2pIADKPF8j8DGA97aVwSAMQd4xNTWpbzQ7qE6txtRJOn8D3DQottgQaF0 h8NkJHH2cop6qD72Epbq6VKfm0LCOnU= -----END CERTIFICATE-----Generated at Sat Apr 26 21:04:04 2025 by rpki-client