$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/74d7280d-a15d-3b9f-9471-9582949cb5e0.roa File: 74d7280d-a15d-3b9f-9471-9582949cb5e0.roa (raw, json) Hash identifier: K0uaoL13kDcbLkGk8/uyKs+oJHq22pYhcDOtSiQApm8= Subject key identifier: 4A:35:C5:CD:67:B2:AE:9D:B6:C5:63:EC:C4:43:8D:0C:5F:06:88:F6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849244E9172042DD8F7E4792400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/74d7280d-a15d-3b9f-9471-9582949cb5e0.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 15169 IP address blocks: 192.178.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:91:72:04:2d:d8:f7:e4:79:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=2142a6ec-fd04-4a02-ace3-bbc2df5785c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:08:25:c6:05:7f:c9:df:16:54:3e:ff:f2:a3: e7:58:d9:c2:fe:6b:41:b2:2b:55:ef:91:23:97:97: 71:e0:e4:3d:ea:07:70:8d:b1:a5:7d:32:e7:bb:c3: 61:d9:b4:6d:07:87:9d:08:75:b1:4b:83:92:44:90: dd:9f:8a:80:c3:c2:38:88:91:61:30:ba:93:75:6a: 0b:51:94:33:ac:9f:a0:6d:52:d1:b7:b2:0f:73:f1: e9:48:59:de:0a:1b:c5:ac:93:d0:0f:e1:28:5f:55: 45:22:e7:76:9d:f9:e4:9b:4a:4e:08:a0:59:0b:71: 21:a3:38:45:e2:1b:bf:20:f8:e7:38:62:33:ad:4b: af:f9:bf:3a:e3:e8:e6:2b:c6:59:c3:48:66:8d:7b: 67:a7:ae:e7:e5:50:2b:3c:62:0f:c8:af:f6:49:55: a8:fa:6e:31:cb:e1:63:28:0b:f1:a5:93:78:e9:d2: 1f:ed:f6:13:19:c9:f8:95:a8:fb:de:20:e2:86:5f: 91:d2:5a:4b:c6:58:4e:35:fd:83:d7:61:36:70:9b: 43:78:69:57:91:29:ed:aa:fa:98:e6:6e:c9:58:00: a3:ad:b8:a1:be:21:72:4a:a9:37:42:db:82:98:15: 8f:4a:a2:4c:f8:fa:8c:0c:4d:64:6f:71:ec:00:b6: 0d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:35:C5:CD:67:B2:AE:9D:B6:C5:63:EC:C4:43:8D:0C:5F:06:88:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/74d7280d-a15d-3b9f-9471-9582949cb5e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:8c:46:6b:c4:87:9a:f5:00:5d:eb:87:ee:dc:2d:a0:81:97: f6:14:16:34:5a:04:68:2f:fa:27:57:81:49:07:9a:13:62:fd: 39:73:7f:a8:83:02:ec:33:e9:61:55:1c:1e:d2:9f:b9:bd:bf: af:0d:ab:cf:fe:19:80:21:3c:06:2e:66:c1:36:7f:18:82:07: 7c:a0:e9:78:5f:2a:b6:0b:19:81:af:a9:98:91:2d:e0:bb:0c: f5:c2:78:4f:d7:cc:9d:16:40:43:ff:fe:34:56:97:26:cf:36: 31:c4:c6:2e:35:68:c1:60:6f:58:df:25:29:07:56:8b:cf:3b: ae:6e:8f:f2:30:19:af:3c:0a:dc:98:21:33:fd:ac:ad:77:98: 16:70:92:ed:f3:49:ba:d6:a5:62:43:ec:17:c3:0a:9c:08:fc: 27:c5:20:2e:19:ac:a7:31:74:81:49:99:14:9f:8e:4f:78:90: db:3e:98:dc:4d:1c:99:ce:8b:78:f5:8b:93:e3:b0:60:50:b7: 24:19:3a:21:c2:f0:55:b8:39:95:4a:06:6a:b2:7c:06:fe:36: 66:0e:28:d0:80:88:bf:0e:f5:a4:e2:4a:97:23:fc:9b:f3:8f: 09:aa:ca:83:07:f0:34:6d:d9:7b:aa:f0:62:6f:0e:14:81:23: e4:3a:a5:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTpFyBC3Y9+R5JAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MjE0MmE2ZWMtZmQwNC00YTAyLWFjZTMtYmJjMmRmNTc4NWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgglxgV/yd8WVD7/8qPnWNnC/mtBsitV75Ej l5dx4OQ96gdwjbGlfTLnu8Nh2bRtB4edCHWxS4OSRJDdn4qAw8I4iJFhMLqTdWoL UZQzrJ+gbVLRt7IPc/HpSFneChvFrJPQD+EoX1VFIud2nfnkm0pOCKBZC3EhozhF 4hu/IPjnOGIzrUuv+b864+jmK8ZZw0hmjXtnp67n5VArPGIPyK/2SVWo+m4xy+Fj KAvxpZN46dIf7fYTGcn4laj73iDihl+R0lpLxlhONf2D12E2cJtDeGlXkSntqvqY 5m7JWACjrbihviFySqk3QtuCmBWPSqJM+PqMDE1kb3HsALYN6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEo1xc1nsq6dtsVj7MRDjQxfBoj2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzRkNzI4MGQtYTE1ZC0z YjlmLTk0NzEtOTU4Mjk0OWNiNWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiMRmvEh5r1AF3rh+7cLaCBl/YUFjRaBGgv+idXgUkHmhNi/Tlzf6iD Auwz6WFVHB7Sn7m9v68Nq8/+GYAhPAYuZsE2fxiCB3yg6XhfKrYLGYGvqZiRLeC7 DPXCeE/XzJ0WQEP//jRWlybPNjHExi41aMFgb1jfJSkHVovPO65uj/IwGa88CtyY ITP9rK13mBZwku3zSbrWpWJD7BfDCpwI/CfFIC4ZrKcxdIFJmRSfjk94kNs+mNxN HJnOi3j1i5PjsGBQtyQZOiHC8FW4OZVKBmqyfAb+NmYOKNCAiL8O9aTiSpcj/Jvz jwmqyoMH8DRt2Xuq8GJvDhSBI+Q6pes= -----END CERTIFICATE-----Generated at Fri Mar 14 09:31:36 2025 by rpki-client