$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/993a330a-9f0e-3b76-97f2-eb34f17faea0.roa File: 993a330a-9f0e-3b76-97f2-eb34f17faea0.roa (raw, json) Hash identifier: 5pB84Ar/Q9tajFQOmIpjMCSXd0bhjCHZOmshnc23S48= Subject key identifier: 68:2B:73:4B:52:D1:63:CB:CF:BE:D1:E7:98:6B:61:CB:C2:6E:AB:31 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849631ED1D98780385BCFC56300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/993a330a-9f0e-3b76-97f2-eb34f17faea0.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 192.178.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:d1:d9:87:80:38:5b:cf:c5:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=a8e4246a-638b-4393-94b5-795e45d99b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0c:32:41:75:f5:f7:0c:02:cf:76:62:6a:a8: 48:bf:6e:16:79:ea:fe:d4:33:4e:33:2e:91:ab:9c: 44:fe:f1:8c:bd:f7:cd:24:fb:0b:cb:5a:65:6d:8d: df:58:cd:50:03:36:7b:35:5a:fe:de:cb:cd:25:70: ed:5c:54:c0:2c:8f:e0:fe:c6:61:05:17:8a:c5:3d: cc:9c:0f:03:5f:6e:7e:50:81:63:ca:d0:41:1a:69: 38:ce:89:68:ba:26:6e:17:8c:4b:43:4c:09:8d:58: c5:20:3d:33:7e:a1:77:64:a0:93:31:40:db:04:52: 73:2f:43:c1:23:70:48:c1:92:05:87:cc:91:23:85: 50:1e:ba:52:c7:4e:19:0c:2f:e9:7f:04:e1:eb:a9: bc:5f:01:9f:3d:52:d8:9c:9c:d4:a8:a4:5a:cb:e4: 0d:9d:07:69:b1:e4:48:5c:e7:06:9e:d5:5f:d5:9f: d6:e7:20:41:8b:91:8f:34:b2:c9:0c:13:2d:98:68: cc:7d:6b:37:78:44:75:4b:34:a3:5c:e4:a9:f0:20: 75:2f:38:fd:c1:60:ea:10:4b:32:dc:c4:8e:d1:25: c1:9b:51:0e:8c:66:8d:30:0a:44:84:d7:51:dd:f7: 3d:f2:1c:81:d0:01:8a:58:da:ea:cd:e8:df:6d:a4: 8e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2B:73:4B:52:D1:63:CB:CF:BE:D1:E7:98:6B:61:CB:C2:6E:AB:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/993a330a-9f0e-3b76-97f2-eb34f17faea0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:5d:80:af:42:d9:1c:4f:4d:b0:f6:1d:04:88:44:4c:c9:3f: 8c:2f:3b:cb:86:91:27:58:90:d2:52:7b:f7:d5:8e:81:85:e2: 05:40:bc:66:d1:c3:67:09:34:48:91:c4:6f:c7:2c:83:32:f9: 3c:f4:e9:a9:ba:c2:e0:cf:79:95:7b:f5:73:b7:ca:68:b0:2b: e2:56:5d:0f:7b:d1:5f:27:56:57:28:81:cf:7b:d1:de:47:bb: 9d:fc:9c:12:b7:aa:bd:3c:1b:cf:54:37:52:41:32:ea:8d:47: bc:17:ac:46:13:ec:f9:b6:90:51:50:e5:26:f2:df:7b:44:48: 92:57:e2:ef:23:0f:aa:d4:35:6a:68:f9:99:6d:9d:8f:ac:95: 00:bd:05:5d:00:24:62:84:70:8a:f5:75:a5:44:cb:58:94:7e: cb:e4:fb:57:23:87:b5:34:e9:eb:c5:69:a0:e4:2e:67:2f:8e: 96:f8:3e:79:7e:0a:db:0e:69:e4:91:79:af:f6:72:2b:07:1f: 6a:da:0e:b2:2b:cc:d0:dd:21:c8:af:9d:65:46:d5:76:fa:3b: 80:1e:30:85:27:39:61:67:e0:a5:f3:c0:8f:2e:dd:14:c2:26: c5:3d:d9:14:09:ef:2f:6e:f2:43:dd:de:e5:c1:9c:1d:d3:ee: ae:b8:39:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHtHZh4A4W8/FYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk YThlNDI0NmEtNjM4Yi00MzkzLTk0YjUtNzk1ZTQ1ZDk5YjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgwyQXX19wwCz3ZiaqhIv24Weer+1DNOMy6R q5xE/vGMvffNJPsLy1plbY3fWM1QAzZ7NVr+3svNJXDtXFTALI/g/sZhBReKxT3M nA8DX25+UIFjytBBGmk4zolouiZuF4xLQ0wJjVjFID0zfqF3ZKCTMUDbBFJzL0PB I3BIwZIFh8yRI4VQHrpSx04ZDC/pfwTh66m8XwGfPVLYnJzUqKRay+QNnQdpseRI XOcGntVf1Z/W5yBBi5GPNLLJDBMtmGjMfWs3eER1SzSjXOSp8CB1Lzj9wWDqEEsy 3MSO0SXBm1EOjGaNMApEhNdR3fc98hyB0AGKWNrqzejfbaSOKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgrc0tS0WPLz77R55hrYcvCbqsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTkzYTMzMGEtOWYwZS0z Yjc2LTk3ZjItZWIzNGYxN2ZhZWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxdgK9C2RxPTbD2HQSIREzJP4wvO8uGkSdYkNJSe/fVjoGF4gVAvGbR w2cJNEiRxG/HLIMy+Tz06am6wuDPeZV79XO3ymiwK+JWXQ970V8nVlcogc970d5H u538nBK3qr08G89UN1JBMuqNR7wXrEYT7Pm2kFFQ5Sby33tESJJX4u8jD6rUNWpo +ZltnY+slQC9BV0AJGKEcIr1daVEy1iUfsvk+1cjh7U06evFaaDkLmcvjpb4Pnl+ CtsOaeSRea/2cisHH2raDrIrzNDdIcivnWVG1Xb6O4AeMIUnOWFn4KXzwI8u3RTC JsU92RQJ7y9u8kPd3uXBnB3T7q64OSo= -----END CERTIFICATE-----Generated at Sun Apr 27 09:18:15 2025 by rpki-client