$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81c44562-8d45-3db7-8770-a7e7dd0f685f.roa File: 81c44562-8d45-3db7-8770-a7e7dd0f685f.roa (raw, json) Hash identifier: 5dVuErsq+MkDf2ofid4uzZkjnisaVvN+GEfZNzv9DKU= Subject key identifier: 58:83:CC:C9:03:D8:82:42:51:04:97:72:BD:5E:A5:E6:84:03:E8:70 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849631ED0E6A8085D32F130CF00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81c44562-8d45-3db7-8770-a7e7dd0f685f.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 192.178.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:d0:e6:a8:08:5d:32:f1:30:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=005c9301-5c48-4889-8ed7-37d2e2aed8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bf:33:67:dd:25:85:43:38:c2:3a:3c:0f:c7: f9:0d:cc:c4:1d:e6:cb:66:45:14:ff:55:00:63:11: bf:b3:7b:ed:7b:9b:67:fd:0a:9f:d5:a7:94:e5:4e: 32:81:cc:5c:b8:f1:d4:bb:4b:5c:97:14:2e:62:c9: 89:46:85:26:29:00:70:f4:46:82:ca:2d:48:a8:d1: 77:36:1b:97:22:22:b6:88:13:2b:82:ae:41:92:e4: 41:0e:fe:d0:93:ba:f3:76:1a:1b:80:e6:af:d6:53: 37:e9:fc:64:a8:26:35:25:5e:10:fb:5c:56:05:7d: 01:2c:bc:3a:e4:c9:ee:61:ad:3e:72:26:68:81:9e: c7:21:07:1f:fa:00:93:c3:ec:74:d5:77:ff:99:40: e4:f6:34:3c:7e:d7:70:05:bf:b2:60:3d:62:d8:43: 9b:2e:fe:7c:e2:b6:12:c5:9f:4e:63:3d:2f:c4:ea: 4e:78:de:d7:72:06:e9:30:56:81:2d:74:6a:94:fa: eb:9f:87:58:c5:76:d0:a8:84:64:d2:b7:24:5a:4c: c4:86:23:86:82:9c:a4:34:fd:36:9d:45:54:1f:8c: e3:bf:2c:8a:b2:fc:57:40:cd:a5:ce:0b:b8:11:61: d0:0e:dc:c1:34:8b:41:bb:67:71:e6:36:db:9a:9a: ea:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:83:CC:C9:03:D8:82:42:51:04:97:72:BD:5E:A5:E6:84:03:E8:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81c44562-8d45-3db7-8770-a7e7dd0f685f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:cf:52:17:ae:80:15:c3:f8:39:af:ae:49:11:f2:4f:ca:1e: ea:0e:3e:50:7b:ae:b4:be:a8:af:f2:1d:b8:1d:8b:a9:22:3a: c0:23:29:f7:30:8d:d5:74:3b:cb:89:22:15:b3:9d:d2:ce:c0: ee:72:99:72:fa:a6:d3:dc:2b:2c:7f:08:4c:09:74:0f:00:5f: 42:b2:aa:c6:c5:d2:1d:2c:21:67:5d:3d:cd:fd:78:d2:16:de: ba:00:c9:d7:f6:c0:d6:8c:51:e7:36:f3:4a:b7:bc:31:40:42: 0e:23:35:3b:ab:82:1a:0e:d3:3e:4a:06:11:79:da:8c:88:24: 8b:fd:dd:46:59:92:fb:64:77:88:91:4a:f0:09:7a:87:e5:d0: 6f:f5:fc:9b:0c:ad:a4:15:af:57:e1:5b:5a:d6:3e:6c:3e:e3: 1f:e3:e8:d7:dd:58:76:6b:75:26:4f:6b:9a:a9:9d:9a:14:0f: e8:f5:82:25:09:cd:f4:fe:2d:db:cd:fa:51:25:47:56:87:c1: 38:ac:58:10:77:d0:aa:2f:07:78:aa:d2:2f:2c:8f:a6:b8:89: 16:a9:2f:98:a2:f6:e3:3c:37:13:a0:9e:b3:25:1c:2c:ae:f7: 8b:4a:b9:10:90:a3:57:8e:86:be:23:de:29:f3:e5:cd:be:ac: ab:95:15:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHtDmqAhdMvEwzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk MDA1YzkzMDEtNWM0OC00ODg5LThlZDctMzdkMmUyYWVkOGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr8zZ90lhUM4wjo8D8f5DczEHebLZkUU/1UA YxG/s3vte5tn/Qqf1aeU5U4ygcxcuPHUu0tclxQuYsmJRoUmKQBw9EaCyi1IqNF3 NhuXIiK2iBMrgq5BkuRBDv7Qk7rzdhobgOav1lM36fxkqCY1JV4Q+1xWBX0BLLw6 5MnuYa0+ciZogZ7HIQcf+gCTw+x01Xf/mUDk9jQ8ftdwBb+yYD1i2EObLv584rYS xZ9OYz0vxOpOeN7XcgbpMFaBLXRqlPrrn4dYxXbQqIRk0rckWkzEhiOGgpykNP02 nUVUH4zjvyyKsvxXQM2lzgu4EWHQDtzBNItBu2dx5jbbmprq0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiDzMkD2IJCUQSXcr1epeaEA+hwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODFjNDQ1NjItOGQ0NS0z ZGI3LTg3NzAtYTdlN2RkMGY2ODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTPUheugBXD+DmvrkkR8k/KHuoOPlB7rrS+qK/yHbgdi6kiOsAjKfcw jdV0O8uJIhWzndLOwO5ymXL6ptPcKyx/CEwJdA8AX0KyqsbF0h0sIWddPc39eNIW 3roAydf2wNaMUec280q3vDFAQg4jNTurghoO0z5KBhF52oyIJIv93UZZkvtkd4iR SvAJeofl0G/1/JsMraQVr1fhW1rWPmw+4x/j6NfdWHZrdSZPa5qpnZoUD+j1giUJ zfT+LdvN+lElR1aHwTisWBB30KovB3iq0i8sj6a4iRapL5ii9uM8NxOgnrMlHCyu 94tKuRCQo1eOhr4j3inz5c2+rKuVFVE= -----END CERTIFICATE-----Generated at Fri Apr 4 08:32:50 2025 by rpki-client