$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e494ac6-a5cb-3ecc-8b76-ee867313e2f6.roa File: 5e494ac6-a5cb-3ecc-8b76-ee867313e2f6.roa (raw, json) Hash identifier: YTUzkHXxJeu/5Xc4qTbjr73J3NXWwX59p5e4YR+qdd8= Subject key identifier: B9:D5:97:BA:A5:FD:57:59:ED:03:43:8C:17:46:68:A8:12:A4:85:C5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848B78B8BC4EA04A74F29913B84 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e494ac6-a5cb-3ecc-8b76-ee867313e2f6.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 15169 IP address blocks: 192.178.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:8b:c4:ea:04:a7:4f:29:91:3b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=c1d8de16-be9d-43ae-8502-890b1ca4a99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:30:48:84:da:12:e6:84:00:0c:80:14:d4:02: ab:9f:c4:7b:49:18:10:38:6e:28:de:3f:15:72:bd: c7:54:92:56:3e:e1:52:42:84:5d:56:4a:2c:61:43: 7b:0c:cb:00:22:55:d3:a7:7a:79:66:f9:72:72:f7: 63:95:22:58:2e:93:59:eb:b8:fe:6e:0f:25:3b:75: 14:a1:a6:a1:52:a2:74:f3:ee:ce:c3:fa:73:70:f9: 61:1d:71:e8:24:56:5a:85:f1:e1:e7:38:07:04:85: b6:ae:2a:e9:10:7a:26:9e:50:ab:8c:34:34:9b:0a: 2c:d0:5b:2a:9e:f7:a4:bb:d0:ac:2c:f1:06:c8:ac: aa:15:dc:49:10:7d:0a:ce:f4:e4:b4:16:06:62:74: ae:0c:c6:6a:20:a4:e7:e3:43:b9:56:68:b6:7b:0f: a3:7e:e4:cf:c0:ff:05:9c:1b:71:7c:f6:64:93:2a: 10:0d:14:eb:90:1f:e3:45:4b:a6:e8:0a:0e:6f:23: 45:12:fb:66:55:0d:c8:23:30:ac:75:c9:92:2a:2c: 92:58:a7:fb:14:e5:ea:61:09:ee:2d:d3:f8:09:d8: 61:04:2d:e4:a6:37:f9:27:ab:c2:2e:13:82:42:d1: 89:a4:9e:cd:72:69:1a:48:72:cc:45:23:ef:20:21: 23:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D5:97:BA:A5:FD:57:59:ED:03:43:8C:17:46:68:A8:12:A4:85:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e494ac6-a5cb-3ecc-8b76-ee867313e2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ea:3f:3b:73:32:8c:f7:a3:6f:1e:69:82:79:2c:59:30:14: fb:9e:b0:3e:cd:5f:b6:85:99:f9:a5:ec:f9:3d:98:ed:bd:49: ca:8e:2e:5e:f2:d2:00:a4:3f:bb:1f:3a:ea:02:79:b5:bd:10: bf:57:64:fa:3c:3d:e3:54:8b:ba:a4:ea:3f:2d:58:46:4e:be: 99:8a:95:2d:14:ee:9f:da:2f:9b:e7:c7:72:e5:bd:04:42:bc: 9e:24:cf:2b:11:87:1d:5d:1e:f9:8a:29:71:f8:21:37:1b:5b: 18:c6:35:b0:9e:20:41:4b:6c:bb:3f:db:92:e0:3c:0a:98:85: 1f:94:9f:02:b5:66:31:b1:7d:2b:7b:cc:47:5b:08:62:da:21: 05:f5:25:2b:b1:6a:cb:bb:12:f5:b7:1e:f4:5c:9c:3a:ae:34: 63:07:b7:1d:35:bd:9d:46:65:b8:8d:c6:41:e3:86:23:a4:65: 2b:5d:c4:44:47:48:13:3f:f3:a1:7c:4d:8c:77:4c:a5:ee:f1: 22:98:8c:a6:19:39:a0:fc:d9:97:a1:7e:12:fd:54:54:72:cf: 64:61:84:7e:9c:91:a3:49:90:60:21:ad:38:90:86:7c:b2:93: 2e:c4:fc:ae:19:ca:62:2f:b7:4d:75:0f:e8:34:f0:2d:54:6e: 92:05:d2:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4vE6gSnTymRO4QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk YzFkOGRlMTYtYmU5ZC00M2FlLTg1MDItODkwYjFjYTRhOTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozBIhNoS5oQADIAU1AKrn8R7SRgQOG4o3j8V cr3HVJJWPuFSQoRdVkosYUN7DMsAIlXTp3p5ZvlycvdjlSJYLpNZ67j+bg8lO3UU oaahUqJ08+7Ow/pzcPlhHXHoJFZahfHh5zgHBIW2rirpEHomnlCrjDQ0mwos0Fsq nveku9CsLPEGyKyqFdxJEH0KzvTktBYGYnSuDMZqIKTn40O5Vmi2ew+jfuTPwP8F nBtxfPZkkyoQDRTrkB/jRUum6AoObyNFEvtmVQ3IIzCsdcmSKiySWKf7FOXqYQnu LdP4CdhhBC3kpjf5J6vCLhOCQtGJpJ7NcmkaSHLMRSPvICEjVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnVl7ql/VdZ7QNDjBdGaKgSpIXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWU0OTRhYzYtYTVjYi0z ZWNjLThiNzYtZWU4NjczMTNlMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInqPztzMoz3o28eaYJ5LFkwFPuesD7NX7aFmfml7Pk9mO29ScqOLl7y 0gCkP7sfOuoCebW9EL9XZPo8PeNUi7qk6j8tWEZOvpmKlS0U7p/aL5vnx3LlvQRC vJ4kzysRhx1dHvmKKXH4ITcbWxjGNbCeIEFLbLs/25LgPAqYhR+UnwK1ZjGxfSt7 zEdbCGLaIQX1JSuxasu7EvW3HvRcnDquNGMHtx01vZ1GZbiNxkHjhiOkZStdxERH SBM/86F8TYx3TKXu8SKYjKYZOaD82ZehfhL9VFRyz2RhhH6ckaNJkGAhrTiQhnyy ky7E/K4ZymIvt011D+g08C1UbpIF0s8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:09 2025 by rpki-client