$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fbbc7d20-0e22-375c-ab33-549f134b21b5.roa File: fbbc7d20-0e22-375c-ab33-549f134b21b5.roa (raw, json) Hash identifier: zDy3LTyT32SEbmwf9MPrRtGzJvBzaEvnaVRM8iZ7NZY= Subject key identifier: 9A:77:2C:03:71:63:14:79:AB:67:E1:F8:11:03:93:59:11:67:CB:61 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849631ECE6D76AEA5615BEDF1C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fbbc7d20-0e22-375c-ab33-549f134b21b5.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 192.178.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:ce:6d:76:ae:a5:61:5b:ed:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=4414f396-91da-414f-8926-eb6b7b50b175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:20:f1:1d:21:7f:42:33:5a:3d:12:50:ff:35: d2:28:7b:ff:c7:c4:77:e3:d1:59:e2:c6:c7:b9:c0: 55:b2:7d:b8:ef:19:ab:66:b2:3f:73:7e:f3:ec:07: d7:49:1c:7e:d9:9f:2a:26:4a:2c:8f:b7:1a:d5:b7: 26:ec:4f:71:56:66:d7:2f:0b:1e:25:01:1b:38:c8: 7c:86:84:54:60:93:19:67:e9:f2:ce:02:f8:11:a2: f2:a6:b6:2d:13:4f:47:87:4e:2d:fa:7a:c5:8b:08: 47:db:94:47:5a:7a:55:98:b5:30:65:d5:a8:40:01: ac:9d:25:cb:a5:8a:38:3a:02:df:d1:02:78:08:8e: 4d:15:94:52:b3:c4:ee:62:52:d8:61:69:72:b1:61: d1:16:35:f5:93:6a:c9:dd:fc:d0:8d:84:11:f8:4f: 83:1e:44:84:cb:ab:40:46:62:2f:4e:dc:58:79:b5: 03:85:e5:9a:65:c6:a2:4a:ba:f6:aa:89:f4:d9:32: 25:4f:05:13:4d:0e:db:61:70:7d:e6:83:0d:c0:80: 9f:0a:ab:73:d4:ff:f3:0a:cb:48:1f:4b:27:45:ed: 63:01:c0:5b:c7:2d:5b:12:dc:e3:ad:0c:73:f2:6b: 85:c0:4a:56:8a:0c:51:56:c7:6e:c0:70:23:7b:01: dc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:77:2C:03:71:63:14:79:AB:67:E1:F8:11:03:93:59:11:67:CB:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fbbc7d20-0e22-375c-ab33-549f134b21b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:4c:83:0e:37:72:1c:43:08:f4:be:eb:5d:aa:c1:71:68:63: d6:14:fc:2f:cd:dd:97:32:a6:ef:a1:dd:a4:16:43:4f:74:08: e1:15:2e:aa:28:e7:58:4e:ff:17:23:22:54:f7:cf:31:7f:63: b4:12:dc:d7:af:d1:ac:9b:42:05:94:37:e8:e3:52:52:5a:b9: 49:fc:de:45:58:01:93:07:a1:4b:41:00:d4:12:d8:fc:7a:7f: 62:16:8a:1e:09:fd:6a:1e:ca:f9:aa:5c:f2:dd:41:f7:b3:e0: 8b:56:8f:88:27:c9:bd:66:06:6c:eb:04:72:00:b4:e4:17:03: b4:08:fe:85:3c:e1:93:be:8d:e0:f0:85:16:56:9f:81:8c:9f: 9f:41:a5:3c:25:0f:8a:ee:42:cd:ea:ee:da:98:01:ff:30:72: d6:47:b2:47:89:0f:7c:e4:d4:46:29:30:9f:c7:f8:05:b5:ce: 0d:c4:9e:50:2e:a6:19:e3:6e:72:d8:57:0b:a9:c7:86:cb:ca: fa:87:51:db:ff:7b:3f:e4:59:3a:0b:f4:48:cc:a0:2d:72:4d: d3:74:7d:c9:6f:c8:f1:13:3a:59:9e:4d:40:42:1d:24:b1:43: a1:63:f0:b8:2c:11:95:4a:86:14:fa:14:e9:59:b7:43:7e:a8: 24:87:4a:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHs5tdq6lYVvt8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk NDQxNGYzOTYtOTFkYS00MTRmLTg5MjYtZWI2YjdiNTBiMTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiDxHSF/QjNaPRJQ/zXSKHv/x8R349FZ4sbH ucBVsn247xmrZrI/c37z7AfXSRx+2Z8qJkosj7ca1bcm7E9xVmbXLwseJQEbOMh8 hoRUYJMZZ+nyzgL4EaLyprYtE09Hh04t+nrFiwhH25RHWnpVmLUwZdWoQAGsnSXL pYo4OgLf0QJ4CI5NFZRSs8TuYlLYYWlysWHRFjX1k2rJ3fzQjYQR+E+DHkSEy6tA RmIvTtxYebUDheWaZcaiSrr2qon02TIlTwUTTQ7bYXB95oMNwICfCqtz1P/zCstI H0snRe1jAcBbxy1bEtzjrQxz8muFwEpWigxRVsduwHAjewHcHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJp3LANxYxR5q2fh+BEDk1kRZ8thMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmJiYzdkMjAtMGUyMi0z NzVjLWFiMzMtNTQ5ZjEzNGIyMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLK9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5Mgw43chxDCPS+612qwXFoY9YU/C/N3Zcypu+h3aQWQ090COEVLqoo 51hO/xcjIlT3zzF/Y7QS3Nev0aybQgWUN+jjUlJauUn83kVYAZMHoUtBANQS2Px6 f2IWih4J/WoeyvmqXPLdQfez4ItWj4gnyb1mBmzrBHIAtOQXA7QI/oU84ZO+jeDw hRZWn4GMn59BpTwlD4ruQs3q7tqYAf8wctZHskeJD3zk1EYpMJ/H+AW1zg3EnlAu phnjbnLYVwupx4bLyvqHUdv/ez/kWToL9EjMoC1yTdN0fclvyPETOlmeTUBCHSSx Q6Fj8LgsEZVKhhT6FOlZt0N+qCSHSr4= -----END CERTIFICATE-----Generated at Sun Apr 27 12:30:20 2025 by rpki-client