$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dbb7ae59-1c41-395b-be61-edc77e8c8141.roa File: dbb7ae59-1c41-395b-be61-edc77e8c8141.roa (raw, json) Hash identifier: rtAaWmFpOkOcFwUGvRM0H3TQBhHUWVXdgjPdznnfjP4= Subject key identifier: D9:EE:48:C9:E1:89:BD:04:C3:72:F3:3D:9E:60:2D:85:54:A3:CE:D0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849631ED20BE61D5690E794F2C8 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dbb7ae59-1c41-395b-be61-edc77e8c8141.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 192.178.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:d2:0b:e6:1d:56:90:e7:94:f2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=b9147cfd-a194-4bbc-8102-8c2ec63412db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:10:7f:6a:53:94:4a:3f:9e:8d:2c:11:46:0c: 73:d6:18:e9:0d:90:7a:9b:b4:81:de:52:64:dd:46: ce:79:71:a4:1a:b0:80:f6:93:48:0c:f7:0a:24:e5: ab:d9:23:ea:71:4b:40:f6:35:09:20:2b:76:50:c5: 57:fe:0f:20:8a:1f:b3:e2:6c:5a:40:e6:85:d4:7e: f7:86:1b:3c:82:a8:eb:89:9b:79:ec:cf:db:10:9a: 03:59:0d:73:cc:5b:13:77:10:e5:6c:9a:a3:0f:5a: eb:7c:0c:f2:04:0c:ac:c2:3e:59:9c:df:70:30:1b: 90:1b:19:f1:b4:44:02:b7:d2:72:ce:ee:ef:44:c8: 6c:a0:aa:91:af:16:cf:0c:0a:b8:57:f8:91:cf:25: 78:47:62:30:d8:63:40:43:5b:3e:f3:f8:13:16:56: 55:f7:3f:a0:d4:68:57:1b:b8:56:97:b0:86:ff:da: dc:f0:fb:c5:a2:1e:f9:3c:f5:35:27:06:24:c0:1e: 6d:5f:67:3c:c7:4b:68:ae:0d:aa:a3:99:e9:92:b6: 61:9b:ea:6b:e7:50:bc:19:fb:21:dd:04:43:79:17: 95:da:7c:38:80:aa:f7:25:72:89:06:85:18:ce:19: e7:53:e3:e8:42:55:c9:9a:4d:59:74:4b:12:b7:57: e2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EE:48:C9:E1:89:BD:04:C3:72:F3:3D:9E:60:2D:85:54:A3:CE:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dbb7ae59-1c41-395b-be61-edc77e8c8141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:0c:1a:6e:b5:67:eb:80:58:5a:2e:31:29:6f:54:af:64:61: ba:4b:c2:d0:ca:92:aa:d2:6b:b4:21:55:2a:0f:2e:9d:ab:f7: 9f:42:25:81:9f:bd:bd:43:25:88:8d:69:1d:16:1e:76:da:17: 3f:b3:93:0b:57:0d:6e:b5:6c:a0:07:a2:bc:20:91:01:8f:3b: 30:4e:af:36:09:cd:b3:1b:97:29:31:f4:2b:1f:e4:5c:14:7b: 72:4a:75:50:d1:51:39:ef:3a:28:6d:50:ab:c3:e2:89:22:05: 60:d5:5d:c7:5f:ac:19:f8:25:0e:fb:9c:22:db:2e:8c:85:b6: c3:c7:35:be:e0:3f:ee:d5:78:d2:d4:b5:d9:a8:03:72:64:22: 18:6b:c4:03:69:25:d3:34:cd:38:af:e2:c7:cc:22:f4:34:49: 66:0f:0b:82:41:1c:a9:d7:e5:d0:35:24:ec:62:3c:44:5c:b8: f3:29:f1:82:39:8d:11:b4:29:2e:f2:74:99:31:7a:89:1a:91: 94:da:7c:bc:f6:48:d7:67:7b:a5:eb:1f:fd:55:ee:ed:3e:9d: 70:c7:53:a4:b3:48:b8:d4:cd:b1:4c:fa:4e:51:3f:c8:95:57: 90:d9:01:59:96:5d:ce:a5:30:6f:b4:b8:68:68:83:00:50:cd: ae:dc:57:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHtIL5h1WkOeU8sgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk YjkxNDdjZmQtYTE5NC00YmJjLTgxMDItOGMyZWM2MzQxMmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRB/alOUSj+ejSwRRgxz1hjpDZB6m7SB3lJk 3UbOeXGkGrCA9pNIDPcKJOWr2SPqcUtA9jUJICt2UMVX/g8gih+z4mxaQOaF1H73 hhs8gqjriZt57M/bEJoDWQ1zzFsTdxDlbJqjD1rrfAzyBAyswj5ZnN9wMBuQGxnx tEQCt9Jyzu7vRMhsoKqRrxbPDAq4V/iRzyV4R2Iw2GNAQ1s+8/gTFlZV9z+g1GhX G7hWl7CG/9rc8PvFoh75PPU1JwYkwB5tX2c8x0torg2qo5npkrZhm+pr51C8Gfsh 3QRDeReV2nw4gKr3JXKJBoUYzhnnU+PoQlXJmk1ZdEsSt1fiRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnuSMnhib0Ew3LzPZ5gLYVUo87QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGJiN2FlNTktMWM0MS0z OTViLWJlNjEtZWRjNzdlOGM4MTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwMGm61Z+uAWFouMSlvVK9kYbpLwtDKkqrSa7QhVSoPLp2r959CJYGf vb1DJYiNaR0WHnbaFz+zkwtXDW61bKAHorwgkQGPOzBOrzYJzbMblykx9Csf5FwU e3JKdVDRUTnvOihtUKvD4okiBWDVXcdfrBn4JQ77nCLbLoyFtsPHNb7gP+7VeNLU tdmoA3JkIhhrxANpJdM0zTiv4sfMIvQ0SWYPC4JBHKnX5dA1JOxiPERcuPMp8YI5 jRG0KS7ydJkxeokakZTafLz2SNdne6XrH/1V7u0+nXDHU6SzSLjUzbFM+k5RP8iV V5DZAVmWXc6lMG+0uGhogwBQza7cV/s= -----END CERTIFICATE-----Generated at Sat Apr 26 20:56:14 2025 by rpki-client