$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa File: c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa (raw, json) Hash identifier: 9ialewvWKGkBFqinSNs7gcT3yMVLLFi6K85waG0Oqio= Subject key identifier: 74:84:05:03:AC:55:3D:A3:B4:3B:E2:4C:82:B1:F6:19:76:FD:59:C0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849631ED2866F5159BE4722A7C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 192.178.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:d2:86:6f:51:59:be:47:22:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=abe0ab17-6e2b-417e-a100-3828addd281c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d9:df:c6:1b:8d:10:3b:4f:a8:8c:2e:b3:5c: bd:92:1d:e4:03:47:bf:d7:7e:74:9a:48:07:c3:c7: 3b:c8:d4:0e:3f:67:d1:10:f3:57:b2:b6:c6:41:92: 66:b7:25:5f:72:6f:f6:d1:51:46:6b:79:ea:53:3e: 87:c1:98:62:eb:4d:fe:25:99:8c:97:9e:41:46:5a: fd:90:7f:f3:ad:b0:b1:4b:93:29:c4:21:13:8f:30: e1:2c:4f:67:73:00:fc:59:8d:5a:7d:3b:18:c4:65: 37:f7:7f:bb:da:e3:b0:13:2c:38:02:b5:44:ad:b7: 7f:2f:79:fa:87:e1:9d:a1:18:28:cc:e5:21:cb:7f: a7:af:2b:0b:9e:6e:d9:b7:b6:bb:3e:19:a7:06:83: 8b:fa:6d:18:f3:00:00:36:18:d5:df:ae:2d:93:18: 39:3b:aa:47:e0:56:10:66:83:e2:7f:9c:5c:0f:45: 77:24:04:99:58:56:02:13:78:e1:7d:2b:62:df:b1: 6e:97:51:a2:be:f2:7a:fd:8a:5a:bd:0e:2a:bd:91: 06:f7:e5:35:fd:0e:47:b3:36:f0:cf:70:0a:77:d2: 8f:44:73:68:dc:c4:2c:78:3c:d3:9d:b3:e0:9f:35: 44:32:5d:7e:f4:01:f5:26:dc:c1:cf:2d:69:57:b4: a1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:84:05:03:AC:55:3D:A3:B4:3B:E2:4C:82:B1:F6:19:76:FD:59:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:b5:d1:3d:a1:a9:e2:74:d6:8f:89:e0:7b:09:81:89:7e:79: 52:58:1b:52:4d:03:ca:1f:50:20:fb:4c:3e:d7:50:46:c2:7b: 8e:bd:e6:4e:9b:88:48:ed:fb:ef:44:0b:9b:e0:45:c6:b6:2a: f0:ea:5f:c6:a5:9e:33:fd:bf:96:c5:44:2f:c4:28:ea:ce:4b: a2:38:14:8c:d9:09:44:a9:9c:a0:bd:37:74:8c:b4:ef:e6:60: 03:59:b9:7c:42:0d:36:20:8f:1e:78:a8:ee:1c:69:5e:d1:f9: 95:fd:aa:f7:ae:8a:e4:47:03:fa:8c:38:87:4f:9d:ce:98:8d: b1:53:d5:eb:53:5d:ab:ca:50:fa:f4:2e:f8:62:32:3d:12:3d: b4:c9:82:77:91:d5:2c:a8:98:15:29:17:75:a9:39:9b:c4:f2: 00:fd:cd:f0:0c:8a:a6:4c:e1:ae:a8:f5:f7:d4:a8:a7:58:27: c5:f7:f9:12:df:7a:f2:f9:67:6f:70:b0:fd:f9:68:49:1b:97: 53:d1:5e:5f:19:a8:be:4b:5f:0b:51:80:b6:1f:e7:91:c8:63: 9c:02:e9:c6:ec:18:6f:73:74:df:3c:54:2e:8f:3f:7a:e4:c8: e0:b6:d7:fe:ec:cd:b1:82:22:6d:39:2a:85:0c:2f:14:d4:2b: 67:e4:58:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHtKGb1FZvkcip8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk YWJlMGFiMTctNmUyYi00MTdlLWExMDAtMzgyOGFkZGQyODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNnfxhuNEDtPqIwus1y9kh3kA0e/1350mkgH w8c7yNQOP2fREPNXsrbGQZJmtyVfcm/20VFGa3nqUz6HwZhi603+JZmMl55BRlr9 kH/zrbCxS5MpxCETjzDhLE9ncwD8WY1afTsYxGU393+72uOwEyw4ArVErbd/L3n6 h+GdoRgozOUhy3+nrysLnm7Zt7a7PhmnBoOL+m0Y8wAANhjV364tkxg5O6pH4FYQ ZoPif5xcD0V3JASZWFYCE3jhfSti37Ful1GivvJ6/YpavQ4qvZEG9+U1/Q5Hszbw z3AKd9KPRHNo3MQseDzTnbPgnzVEMl1+9AH1JtzBzy1pV7ShQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSEBQOsVT2jtDviTIKx9hl2/VnAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzdiOTkxMmQtMmNkNi0z OTc0LWE4MDUtMWUwNTI1YTFhMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFK10T2hqeJ01o+J4HsJgYl+eVJYG1JNA8ofUCD7TD7XUEbCe4695k6b iEjt++9EC5vgRca2KvDqX8alnjP9v5bFRC/EKOrOS6I4FIzZCUSpnKC9N3SMtO/m YANZuXxCDTYgjx54qO4caV7R+ZX9qveuiuRHA/qMOIdPnc6YjbFT1etTXavKUPr0 LvhiMj0SPbTJgneR1SyomBUpF3WpOZvE8gD9zfAMiqZM4a6o9ffUqKdYJ8X3+RLf evL5Z29wsP35aEkbl1PRXl8ZqL5LXwtRgLYf55HIY5wC6cbsGG9zdN88VC6PP3rk yOC21/7szbGCIm05KoUMLxTUK2fkWPs= -----END CERTIFICATE-----Generated at Sun Apr 27 12:15:41 2025 by rpki-client