$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95853227-68fd-3438-9025-1d11ef93444e.roa File: 95853227-68fd-3438-9025-1d11ef93444e.roa (raw, json) Hash identifier: lztTMOOveRMPxPFBfc70Eo5wts2h1AYc8KJuQdAdhp4= Subject key identifier: 2E:F2:D6:BD:76:3F:5D:BB:B8:0C:67:F2:E9:2C:10:71:0A:03:D4:57 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849631ED079AA7EC8D3189A0320 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95853227-68fd-3438-9025-1d11ef93444e.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 192.178.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:d0:79:aa:7e:c8:d3:18:9a:03:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=ad0eacfe-83fa-4059-b443-76d451f58f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:00:0e:0e:91:f2:d2:b2:83:18:ad:5d:7f: cc:af:d6:ff:49:01:e4:7e:e6:1a:ff:19:24:48:ee: 3c:26:ab:19:da:6d:ed:fb:82:9b:79:ee:2d:92:bb: f2:83:30:dc:b9:16:a0:3e:26:d2:fe:f9:b8:05:34: e4:e5:9f:9b:4f:e9:9e:dd:05:bc:70:b3:82:3d:f1: 16:f6:0a:21:ff:e2:16:4b:23:66:33:20:d2:46:8e: ae:ea:04:78:fc:8b:f5:26:6d:54:a5:42:ae:14:05: 03:0f:ba:5b:59:99:3e:16:b6:20:54:4a:b7:4c:e9: 5d:75:d4:b0:6d:37:7d:32:7b:ef:0d:e0:8d:1f:48: ee:4d:a5:83:03:30:ab:0d:09:07:a8:cc:d7:6b:29: ad:60:6d:97:37:c7:eb:38:28:93:e6:39:b7:60:df: 9a:38:c2:af:13:00:2c:a5:56:7a:5a:97:61:e4:02: 4d:a0:49:a5:71:3d:d2:35:d9:78:2a:49:4a:7e:77: 8a:77:75:16:17:03:07:db:59:a2:57:3b:8a:50:39: 2b:94:fd:2e:72:04:4a:df:a8:5c:1e:9e:1f:30:af: 79:ca:2c:bf:1b:6b:57:24:f5:39:2c:b1:b9:98:b1: 4d:23:86:f1:d4:de:d8:8a:d6:ad:42:4f:af:d1:de: 44:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F2:D6:BD:76:3F:5D:BB:B8:0C:67:F2:E9:2C:10:71:0A:03:D4:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95853227-68fd-3438-9025-1d11ef93444e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:dc:5c:33:84:46:02:b0:d3:dc:ce:53:94:05:3f:05:bd:43: 63:17:9a:90:a4:b4:07:e6:8a:6f:89:be:63:68:bb:e1:a3:ee: 0c:7c:2a:af:cb:cb:69:eb:e5:d5:9a:58:d7:35:22:6b:36:24: 63:35:a8:3b:61:f0:b2:bc:98:b3:80:9d:d4:7a:20:5b:d5:c2: 84:91:34:29:f7:73:c8:54:7b:69:24:48:62:5f:3c:1f:5a:b5: 3b:81:51:ad:7f:51:76:56:cb:34:36:a6:f2:1d:7c:3a:d8:25: bd:03:d4:9d:ea:d9:fa:90:4c:eb:b6:a4:60:6e:91:8f:11:b9: d3:4c:82:9c:46:df:8a:1a:6f:7c:66:09:1d:f3:22:c4:f7:b4: 9c:10:89:81:d9:43:eb:01:c2:3b:aa:63:62:0b:21:9c:b1:a6: 86:c2:c5:5a:8c:bc:66:7b:2f:89:d7:ff:df:85:ea:44:93:58: 0a:36:b5:d5:b8:7d:9f:db:c3:d0:5e:7b:10:0e:de:1e:7b:d0: 79:19:0d:1a:77:c4:43:59:7e:b5:db:72:91:f0:58:6d:18:67: 3e:2b:13:94:6f:cb:1c:ff:2c:83:75:86:07:9b:4a:47:02:3e: db:26:f8:a4:35:30:bd:50:c1:8d:52:ad:97:8d:2e:58:2f:a5: c9:7f:66:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHtB5qn7I0xiaAyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk YWQwZWFjZmUtODNmYS00MDU5LWI0NDMtNzZkNDUxZjU4ZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5QADg6R8tKygxitXX/Mr9b/SQHkfuYa/xkk SO48JqsZ2m3t+4Kbee4tkrvygzDcuRagPibS/vm4BTTk5Z+bT+me3QW8cLOCPfEW 9goh/+IWSyNmMyDSRo6u6gR4/Iv1Jm1UpUKuFAUDD7pbWZk+FrYgVEq3TOldddSw bTd9MnvvDeCNH0juTaWDAzCrDQkHqMzXaymtYG2XN8frOCiT5jm3YN+aOMKvEwAs pVZ6Wpdh5AJNoEmlcT3SNdl4KklKfneKd3UWFwMH21miVzuKUDkrlP0ucgRK36hc Hp4fMK95yiy/G2tXJPU5LLG5mLFNI4bx1N7YitatQk+v0d5EHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7y1r12P127uAxn8uksEHEKA9RXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTU4NTMyMjctNjhmZC0z NDM4LTkwMjUtMWQxMWVmOTM0NDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7cXDOERgKw09zOU5QFPwW9Q2MXmpCktAfmim+JvmNou+Gj7gx8Kq/L y2nr5dWaWNc1Ims2JGM1qDth8LK8mLOAndR6IFvVwoSRNCn3c8hUe2kkSGJfPB9a tTuBUa1/UXZWyzQ2pvIdfDrYJb0D1J3q2fqQTOu2pGBukY8RudNMgpxG34oab3xm CR3zIsT3tJwQiYHZQ+sBwjuqY2ILIZyxpobCxVqMvGZ7L4nX/9+F6kSTWAo2tdW4 fZ/bw9BeexAO3h570HkZDRp3xENZfrXbcpHwWG0YZz4rE5Rvyxz/LIN1hgebSkcC Ptsm+KQ1ML1QwY1SrZeNLlgvpcl/Zhs= -----END CERTIFICATE-----Generated at Sat Apr 26 19:59:19 2025 by rpki-client