$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/752d5944-68d2-3730-ba55-3df75ad16419.roa File: 752d5944-68d2-3730-ba55-3df75ad16419.roa (raw, json) Hash identifier: cDwp5kHOZOBa05VeZVmkcUstt57LZlyho4PVTn+VLvs= Subject key identifier: D1:27:98:C9:26:11:4D:71:C2:02:5C:6F:4E:7F:BA:CB:7F:1B:F0:40 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A66C07B11D9DF19BD49D1A7C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/752d5944-68d2-3730-ba55-3df75ad16419.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 15169 IP address blocks: 192.178.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:7b:11:d9:df:19:bd:49:d1:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=ee621293-c29d-4ef3-a2a9-7fbf53014263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ab:c3:22:90:b2:25:57:36:0b:4d:7c:70:30: 7d:cb:43:22:f4:67:55:4d:02:46:e7:3f:5e:31:1f: 03:d3:10:2d:68:ba:fc:b2:1e:86:fe:05:39:73:3e: e6:e9:5b:4c:90:68:d6:1a:b4:da:86:fa:01:07:10: 02:2b:8d:34:2b:80:87:85:ea:7d:af:39:0c:18:fb: 78:fd:72:47:8a:a0:25:b8:3e:5c:f7:55:0a:22:15: 30:ac:56:ba:1f:a1:59:ad:21:dd:9a:8e:bc:88:be: 52:3f:2a:c0:13:dd:0b:bd:06:59:cd:aa:a5:5d:82: f8:1e:ea:01:c9:71:75:c3:15:1f:81:94:6f:88:86: c3:8a:1e:c7:74:45:e3:b8:4c:89:9b:74:92:05:5c: 8b:11:23:6d:ef:d6:e1:75:89:d8:c7:7c:c3:a5:a6: 10:e8:cc:42:27:3f:b0:23:6d:a0:bc:c6:01:14:30: 29:a1:c9:ce:a9:a3:df:62:41:8c:00:ab:f4:05:10: c8:8c:96:4e:8d:86:ee:28:c5:57:6c:06:84:f0:41: a6:23:ec:a0:25:c2:f9:90:06:0e:bb:68:8d:74:90: 15:09:f6:6b:1e:e2:2c:ae:c9:de:27:fb:3a:2b:87: bf:75:a5:ce:c1:19:92:ea:07:59:c9:1d:c6:2c:d8: 9b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:27:98:C9:26:11:4D:71:C2:02:5C:6F:4E:7F:BA:CB:7F:1B:F0:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/752d5944-68d2-3730-ba55-3df75ad16419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:08:9d:8e:b9:e8:5c:be:8d:53:d8:bc:17:6d:9d:77:08:ef: 37:bc:3e:99:d0:c9:73:94:ec:af:c4:bd:27:83:d5:fa:fa:e8: 23:bd:10:f2:d4:77:4a:77:77:8e:b3:86:31:28:a7:3b:61:71: 68:82:1a:97:93:2b:dd:d4:5d:79:89:13:db:ba:82:d0:02:3f: 70:ae:34:8e:57:a9:da:80:e2:bb:41:e5:f2:b2:df:7f:ab:3f: 3c:f0:a8:58:a6:51:12:0a:02:40:4a:a8:55:02:2a:9a:b1:3f: 06:3f:6b:77:e7:67:3f:50:0d:e3:3f:1b:82:27:58:9c:44:16: 75:42:da:bc:65:b0:c1:8e:fc:59:bd:cb:ff:0f:37:fd:a6:00: 1a:80:89:c3:1a:de:30:05:9c:66:35:0d:a9:3a:4e:14:81:e9: 2d:d3:d1:fe:46:46:f5:98:21:7c:9d:8b:d6:60:0b:c6:c3:f8: e4:f3:48:4e:13:a0:ab:96:cc:cc:ec:da:98:2f:a8:1d:fa:1e: 80:50:5a:8d:64:ac:86:d7:9e:ad:5b:15:a4:07:a7:90:85:ea: 9a:b7:14:4c:81:d7:fe:90:d4:1d:c1:9f:29:20:04:b4:7b:d0: e8:09:19:dc:d6:b1:ed:30:44:92:90:ff:23:0f:70:02:cf:f4: 82:a0:92:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwHsR2d8ZvUnRp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk ZWU2MjEyOTMtYzI5ZC00ZWYzLWEyYTktN2ZiZjUzMDE0MjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqvDIpCyJVc2C018cDB9y0Mi9GdVTQJG5z9e MR8D0xAtaLr8sh6G/gU5cz7m6VtMkGjWGrTahvoBBxACK400K4CHhep9rzkMGPt4 /XJHiqAluD5c91UKIhUwrFa6H6FZrSHdmo68iL5SPyrAE90LvQZZzaqlXYL4HuoB yXF1wxUfgZRviIbDih7HdEXjuEyJm3SSBVyLESNt79bhdYnYx3zDpaYQ6MxCJz+w I22gvMYBFDApocnOqaPfYkGMAKv0BRDIjJZOjYbuKMVXbAaE8EGmI+ygJcL5kAYO u2iNdJAVCfZrHuIsrsneJ/s6K4e/daXOwRmS6gdZyR3GLNibUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEnmMkmEU1xwgJcb05/ust/G/BAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzUyZDU5NDQtNjhkMi0z NzMwLWJhNTUtM2RmNzVhZDE2NDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIInY656Fy+jVPYvBdtnXcI7ze8PpnQyXOU7K/EvSeD1fr66CO9EPLU d0p3d46zhjEopzthcWiCGpeTK93UXXmJE9u6gtACP3CuNI5XqdqA4rtB5fKy33+r PzzwqFimURIKAkBKqFUCKpqxPwY/a3fnZz9QDeM/G4InWJxEFnVC2rxlsMGO/Fm9 y/8PN/2mABqAicMa3jAFnGY1Dak6ThSB6S3T0f5GRvWYIXydi9ZgC8bD+OTzSE4T oKuWzMzs2pgvqB36HoBQWo1krIbXnq1bFaQHp5CF6pq3FEyB1/6Q1B3BnykgBLR7 0OgJGdzWse0wRJKQ/yMPcALP9IKgkvc= -----END CERTIFICATE-----Generated at Thu Jul 10 10:54:39 2025 by rpki-client