$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e8f1d36-d55b-311c-9a96-c282dd8079d7.roa File: 5e8f1d36-d55b-311c-9a96-c282dd8079d7.roa (raw, json) Hash identifier: i5IObS1jtRM/wWdEOzq1pRWYBlj7P3nw24AE1PfNldg= Subject key identifier: A4:09:E1:69:0B:BD:5C:09:48:08:DE:72:EC:C9:5B:5F:34:AC:C1:F6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848E9CBF4C9B7708F4B5EF46100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e8f1d36-d55b-311c-9a96-c282dd8079d7.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 192.178.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:f4:c9:b7:70:8f:4b:5e:f4:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=dde20849-f739-4f65-8af3-8914c194078f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cb:eb:6e:11:be:c7:c7:4b:20:b2:7b:92:c9: cb:71:95:1b:22:12:86:67:b7:b5:b0:d2:de:94:8a: db:fd:55:4e:8b:e8:94:fc:7c:63:26:17:7d:a1:bb: 15:4c:13:0b:ae:27:df:bf:1c:5f:3a:8b:da:93:05: 0e:e2:45:25:56:b9:e2:23:c6:6c:23:d2:58:64:b4: 30:42:23:41:f3:f8:2e:68:30:4a:0a:e6:e7:79:7b: 1f:45:6a:5a:4c:54:ba:71:5d:c6:1d:52:1b:58:be: 87:79:80:73:3c:e1:b3:ca:55:47:2b:bf:a6:66:90: 31:66:a0:db:07:a0:dd:ae:b9:d5:3b:75:e5:58:81: 97:a8:11:07:26:d5:2a:66:5c:44:c0:f0:da:e3:8d: f5:9f:f1:b9:80:fd:ea:18:54:c0:98:3a:91:c5:6e: c4:cf:82:eb:d1:28:a9:27:18:35:32:46:cf:5b:fd: fb:cf:10:ab:98:de:9e:7d:66:e9:46:da:1d:8e:6d: e5:5c:5a:94:95:57:f8:ba:65:d9:22:9b:ae:11:03: 3c:fc:54:ad:81:af:ae:52:b3:00:31:ad:45:72:72: aa:79:26:0e:01:92:81:06:f7:03:5e:72:31:f5:f6: dc:a1:72:22:bf:86:86:11:e7:7d:86:d5:37:61:24: 80:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:09:E1:69:0B:BD:5C:09:48:08:DE:72:EC:C9:5B:5F:34:AC:C1:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e8f1d36-d55b-311c-9a96-c282dd8079d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:58:20:9e:3e:dc:fc:c3:38:28:80:82:d2:e2:f9:62:cd:af: 92:e8:6f:9a:1d:a8:4a:db:ba:f4:b9:ee:7e:b9:61:1c:8e:ef: 5b:e6:ad:5f:05:db:78:f0:44:2c:79:53:87:3b:c1:c7:94:ed: c5:fc:44:e2:c9:8d:82:8f:04:cd:68:d6:f9:2d:d3:5a:86:60: 25:64:8c:ce:b6:10:dd:9b:0e:f9:c2:9f:dd:15:15:38:11:73: 7f:72:96:b7:5d:77:36:98:eb:10:e9:98:ac:ed:95:27:be:d7: 9f:67:08:7e:71:57:fa:3a:b2:4a:3f:db:a3:2c:13:6a:be:5b: 33:4f:85:b7:43:d9:c9:f0:67:d1:2d:95:83:3a:09:32:19:16: 4d:ec:8b:97:b1:bf:e2:ca:83:da:e2:02:91:a2:e0:19:61:c2: 65:db:12:10:11:7f:66:b4:6e:de:03:cf:40:73:3d:04:6c:33: 4c:45:ec:b8:87:e5:b7:8f:20:df:8f:3e:e4:d7:4e:99:f2:68: cb:2d:20:db:d5:85:b0:b6:2c:1c:90:ad:74:73:71:a7:f2:da: 0d:94:7c:51:7c:ce:ea:c1:06:95:d6:43:43:89:6a:94:c8:9f: 1b:42:d9:bd:e1:8f:4b:4a:0e:47:44:cd:2c:06:f5:a4:1d:d7: 2c:1b:14:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy/TJt3CPS170YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk ZGRlMjA4NDktZjczOS00ZjY1LThhZjMtODkxNGMxOTQwNzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsvrbhG+x8dLILJ7ksnLcZUbIhKGZ7e1sNLe lIrb/VVOi+iU/HxjJhd9obsVTBMLriffvxxfOovakwUO4kUlVrniI8ZsI9JYZLQw QiNB8/guaDBKCubneXsfRWpaTFS6cV3GHVIbWL6HeYBzPOGzylVHK7+mZpAxZqDb B6DdrrnVO3XlWIGXqBEHJtUqZlxEwPDa4431n/G5gP3qGFTAmDqRxW7Ez4Lr0Sip Jxg1MkbPW/37zxCrmN6efWbpRtodjm3lXFqUlVf4umXZIpuuEQM8/FStga+uUrMA Ma1FcnKqeSYOAZKBBvcDXnIx9fbcoXIiv4aGEed9htU3YSSAgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQJ4WkLvVwJSAjecuzJW180rMH2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWU4ZjFkMzYtZDU1Yi0z MTFjLTlhOTYtYzI4MmRkODA3OWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpYIJ4+3PzDOCiAgtLi+WLNr5Lob5odqErbuvS57n65YRyO71vmrV8F 23jwRCx5U4c7wceU7cX8ROLJjYKPBM1o1vkt01qGYCVkjM62EN2bDvnCn90VFTgR c39ylrdddzaY6xDpmKztlSe+159nCH5xV/o6sko/26MsE2q+WzNPhbdD2cnwZ9Et lYM6CTIZFk3si5exv+LKg9riApGi4BlhwmXbEhARf2a0bt4Dz0BzPQRsM0xF7LiH 5bePIN+PPuTXTpnyaMstINvVhbC2LByQrXRzcafy2g2UfFF8zurBBpXWQ0OJapTI nxtC2b3hj0tKDkdEzSwG9aQd1ywbFOs= -----END CERTIFICATE-----Generated at Fri Apr 4 08:32:50 2025 by rpki-client