$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86c33ef2-c12e-3c30-8177-f2e56b567ee7.roa File: 86c33ef2-c12e-3c30-8177-f2e56b567ee7.roa (raw, json) Hash identifier: S+jb3u40eMJK09ao5Mdrqqrcdxx2j6jzNO18E0jpcas= Subject key identifier: 58:37:ED:78:06:70:0E:16:EF:AA:F1:A4:2C:3A:CE:E5:D4:46:C3:5C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849631ED01A456D81A1513D0E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86c33ef2-c12e-3c30-8177-f2e56b567ee7.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 192.178.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:d0:1a:45:6d:81:a1:51:3d:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=eddddbc1-3494-44d3-8e05-b132d0725bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0b:ad:af:31:51:5d:9e:27:b2:11:f9:d8:08: 6a:20:ea:be:14:41:5a:31:2a:e5:1f:5a:55:49:19: 46:6b:e9:ee:05:f7:2d:5d:ef:ec:17:f5:98:b1:0f: ba:9a:d0:d8:7d:90:ee:7b:b3:5e:58:2a:d0:78:e8: 96:24:76:97:81:77:3d:6e:bd:f2:b4:58:63:68:a0: 66:dc:42:49:69:d1:d1:08:aa:8f:3c:56:ec:a6:d1: 4b:db:0c:e2:02:52:e8:8c:28:f2:9a:f0:8f:11:10: e9:06:00:cc:8c:41:50:71:32:af:ea:de:db:71:af: 28:d3:ce:e3:48:e7:82:4a:66:da:41:51:7d:d9:b5: cc:b4:fa:e8:8f:bb:42:9f:2d:0c:fd:b2:90:67:13: a9:f5:22:5b:83:7e:2e:60:73:5c:cd:0e:d1:21:26: 3c:cf:21:d9:cb:73:67:dc:8f:0e:41:89:81:97:32: f3:9f:59:d8:4f:db:8d:50:4c:a1:b7:32:c3:82:b4: 87:42:3c:72:37:69:a9:6d:71:cf:d1:c5:e9:fa:a1: 64:71:0f:3a:14:99:67:d1:f4:ee:7b:40:31:af:fa: c6:47:ad:41:d0:2c:09:e3:92:f0:25:c2:ff:34:84: 33:f2:45:b8:0a:35:d9:16:8e:4c:73:1c:67:e3:e9: 61:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:37:ED:78:06:70:0E:16:EF:AA:F1:A4:2C:3A:CE:E5:D4:46:C3:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86c33ef2-c12e-3c30-8177-f2e56b567ee7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:f6:39:b1:76:e5:b1:16:99:d2:4f:ba:0d:3d:11:28:cd:3a: aa:b7:ca:ff:5f:c5:1f:2f:ab:d7:5d:83:32:4f:a8:30:e9:3a: 90:e9:7b:14:6a:e7:09:8d:01:41:94:15:e8:ae:88:40:ee:02: ee:19:b2:4a:f0:4a:95:36:e3:92:24:ba:d7:a4:63:1b:17:c3: 21:d7:c0:99:ac:1b:cf:bc:2f:c7:44:be:6e:88:a3:a7:5b:df: c5:34:55:a8:02:16:e4:85:ef:49:b1:59:92:ae:3d:00:d6:5a: a9:04:c1:c5:75:c5:2f:fb:c3:19:e3:d7:ef:0f:3f:b4:22:56: 9c:d0:ad:f7:26:6f:86:e0:56:34:05:6e:0f:2d:ac:ff:ff:53: 11:35:96:c9:ba:f8:90:ed:32:67:98:50:e5:c0:ba:3a:b6:69: 8d:82:bd:c4:b0:27:0f:da:87:52:e2:c0:1c:19:49:0e:d7:71: 9f:3d:85:4b:f0:b3:7d:6c:0e:74:cb:26:0d:5c:b6:ac:4b:e0: c2:73:d2:5f:5b:52:cf:34:5c:7b:73:2d:5f:c7:bf:2b:99:9c: bf:2f:06:fc:2f:6a:87:0f:f7:a1:58:4e:eb:40:8f:e3:a4:f1: 71:e1:df:59:bd:c8:97:c8:2a:b1:bc:e5:4a:24:96:7e:d1:bc: a5:69:98:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHtAaRW2BoVE9DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk ZWRkZGRiYzEtMzQ5NC00NGQzLThlMDUtYjEzMmQwNzI1YmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgutrzFRXZ4nshH52AhqIOq+FEFaMSrlH1pV SRlGa+nuBfctXe/sF/WYsQ+6mtDYfZDue7NeWCrQeOiWJHaXgXc9br3ytFhjaKBm 3EJJadHRCKqPPFbsptFL2wziAlLojCjymvCPERDpBgDMjEFQcTKv6t7bca8o087j SOeCSmbaQVF92bXMtProj7tCny0M/bKQZxOp9SJbg34uYHNczQ7RISY8zyHZy3Nn 3I8OQYmBlzLzn1nYT9uNUEyhtzLDgrSHQjxyN2mpbXHP0cXp+qFkcQ86FJln0fTu e0Axr/rGR61B0CwJ45LwJcL/NIQz8kW4CjXZFo5Mcxxn4+lhcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg37XgGcA4W76rxpCw6zuXURsNcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODZjMzNlZjItYzEyZS0z YzMwLTgxNzctZjJlNTZiNTY3ZWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn2ObF25bEWmdJPug09ESjNOqq3yv9fxR8vq9ddgzJPqDDpOpDpexRq 5wmNAUGUFeiuiEDuAu4ZskrwSpU245IkutekYxsXwyHXwJmsG8+8L8dEvm6Io6db 38U0VagCFuSF70mxWZKuPQDWWqkEwcV1xS/7wxnj1+8PP7QiVpzQrfcmb4bgVjQF bg8trP//UxE1lsm6+JDtMmeYUOXAujq2aY2CvcSwJw/ah1LiwBwZSQ7XcZ89hUvw s31sDnTLJg1ctqxL4MJz0l9bUs80XHtzLV/HvyuZnL8vBvwvaocP96FYTutAj+Ok 8XHh31m9yJfIKrG85Uokln7RvKVpmPs= -----END CERTIFICATE-----Generated at Sat Apr 26 20:50:38 2025 by rpki-client