$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2ce395ab-3223-3b8b-8296-aea5ddb33894.roa File: 2ce395ab-3223-3b8b-8296-aea5ddb33894.roa (raw, json) Hash identifier: +xISQLKMaghxlWE72PzElZ4LFzTKbeDT55UN5k+yAXk= Subject key identifier: 6A:11:88:19:BC:22:8E:03:EC:2D:DA:AA:95:77:0D:8D:90:04:0F:BA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849631ECEFAF9ED4BE355E51900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2ce395ab-3223-3b8b-8296-aea5ddb33894.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 192.178.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:ce:fa:f9:ed:4b:e3:55:e5:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=e2131813-acde-4814-a209-499313caac16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:50:c6:3c:55:e3:5c:03:d8:4a:05:52:56:c6: 6c:c5:52:63:a1:2e:5c:f4:1b:3a:2e:0a:db:ab:61: 39:0e:de:85:e7:4d:0c:eb:de:fb:31:21:aa:cb:58: e8:08:2c:4e:6c:e9:34:1e:98:28:6e:a9:48:0d:3e: 67:d8:1c:64:95:7a:71:52:34:55:62:d7:e5:c7:db: a0:ed:2c:5a:2a:af:b5:2e:c8:d0:04:6a:bc:35:30: cb:ba:ee:81:0b:ce:ca:a3:98:a0:e1:fc:8d:14:2a: 28:d6:2c:e8:ce:52:22:78:79:50:b9:ab:7e:4d:5c: 68:f6:ca:5d:20:dd:b4:13:f7:6e:13:f8:cd:ac:23: ff:d2:e6:d4:ec:5a:2d:9c:23:63:60:d7:1f:41:eb: cd:20:5f:b9:98:6d:0f:a1:df:49:62:30:e9:bc:67: f7:73:ec:ca:c8:47:c5:87:a1:30:2d:e5:39:f1:09: d6:7c:91:56:9f:3b:13:71:bf:53:ab:63:30:88:23: 1e:52:3c:fd:70:0f:40:59:a9:95:d6:45:e9:38:d8: b5:2c:cc:73:9a:fe:9d:dd:9d:44:06:7f:85:30:c1: c5:a2:f1:82:ee:68:c0:ff:a4:e3:7c:a7:a0:ab:1a: c5:55:45:fe:d7:81:dd:7d:0c:73:58:8c:2c:77:35: d7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:11:88:19:BC:22:8E:03:EC:2D:DA:AA:95:77:0D:8D:90:04:0F:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2ce395ab-3223-3b8b-8296-aea5ddb33894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:e4:90:65:9a:ed:22:f0:94:ac:df:d6:49:fa:67:98:49:f2: 0f:46:6d:b8:9f:3e:bf:7b:89:c5:85:ed:8a:91:9c:36:50:47: 5c:7e:27:0b:24:12:b1:cd:39:f6:dd:e0:57:3d:88:2a:8e:dc: 60:d5:84:65:38:aa:75:dd:5d:8d:31:41:d2:c1:4d:b1:06:c3: a8:36:f7:6a:52:d8:e1:a3:90:04:00:12:04:2b:3d:7f:30:3b: 7d:2d:5e:6f:f8:c8:41:03:2c:cb:d6:13:33:e1:f4:ab:9a:4b: 96:51:06:0c:85:ad:44:81:7d:d2:24:d1:dd:06:58:48:a3:d2: a1:88:13:23:d1:fa:d0:d8:19:77:1b:ca:29:d3:49:0e:49:a0: 4e:07:66:d2:6e:be:ec:36:45:de:e6:c7:35:aa:f6:98:1e:02: 7e:7c:8f:7e:a7:5d:54:dc:76:fb:5e:55:ca:37:d2:b5:26:31: 14:90:dc:33:8c:ef:ca:81:68:f9:cd:eb:56:21:c8:af:58:ff: a6:5c:60:aa:19:c6:25:fa:74:57:df:c1:29:31:70:28:59:bd: fd:35:1f:21:a8:fd:de:84:b6:3c:a0:70:cf:50:a8:2e:41:45: b3:10:88:58:4b:79:c3:16:08:b1:c4:7f:9e:68:9e:f7:37:82: e3:1d:90:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHs76+e1L41XlGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk ZTIxMzE4MTMtYWNkZS00ODE0LWEyMDktNDk5MzEzY2FhYzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVDGPFXjXAPYSgVSVsZsxVJjoS5c9Bs6Lgrb q2E5Dt6F500M6977MSGqy1joCCxObOk0HpgobqlIDT5n2BxklXpxUjRVYtflx9ug 7SxaKq+1LsjQBGq8NTDLuu6BC87Ko5ig4fyNFCoo1izozlIieHlQuat+TVxo9spd IN20E/duE/jNrCP/0ubU7FotnCNjYNcfQevNIF+5mG0Pod9JYjDpvGf3c+zKyEfF h6EwLeU58QnWfJFWnzsTcb9Tq2MwiCMeUjz9cA9AWamV1kXpONi1LMxzmv6d3Z1E Bn+FMMHFovGC7mjA/6TjfKegqxrFVUX+14HdfQxzWIwsdzXXDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoRiBm8Io4D7C3aqpV3DY2QBA+6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmNlMzk1YWItMzIyMy0z YjhiLTgyOTYtYWVhNWRkYjMzODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjkkGWa7SLwlKzf1kn6Z5hJ8g9GbbifPr97icWF7YqRnDZQR1x+Jwsk ErHNOfbd4Fc9iCqO3GDVhGU4qnXdXY0xQdLBTbEGw6g292pS2OGjkAQAEgQrPX8w O30tXm/4yEEDLMvWEzPh9KuaS5ZRBgyFrUSBfdIk0d0GWEij0qGIEyPR+tDYGXcb yinTSQ5JoE4HZtJuvuw2Rd7mxzWq9pgeAn58j36nXVTcdvteVco30rUmMRSQ3DOM 78qBaPnN61YhyK9Y/6ZcYKoZxiX6dFffwSkxcChZvf01HyGo/d6EtjygcM9QqC5B RbMQiFhLecMWCLHEf55onvc3guMdkOY= -----END CERTIFICATE-----Generated at Fri Apr 4 08:59:25 2025 by rpki-client