$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85a6cf21-2056-3a41-b8bd-d016042a8028.roa File: 85a6cf21-2056-3a41-b8bd-d016042a8028.roa (raw, json) Hash identifier: /YiLApemZBcS+jRBC8hKIMS1ZB0PblMHSWcmvZ+Ksgg= Subject key identifier: 41:22:A1:B2:37:1F:5C:3D:42:76:D7:3E:70:5C:77:81:71:27:E4:F2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849631ED187AC9A008ACFE16C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85a6cf21-2056-3a41-b8bd-d016042a8028.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 192.178.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:d1:87:ac:9a:00:8a:cf:e1:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=e3e87ead-34ae-4658-ab30-c066288b61fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c1:7f:e6:d5:8d:4b:88:bb:ee:a2:8b:db:11: 3f:27:62:aa:a9:c2:f0:44:03:40:53:c4:cf:92:eb: 27:30:94:1f:a1:af:e0:19:c0:df:5a:2c:86:44:10: ec:56:4f:1c:23:cd:78:8b:79:f9:d7:ba:24:68:0c: 22:88:15:c4:49:36:13:8a:db:46:7a:5b:59:b0:ae: ca:4a:8e:aa:bc:06:91:ca:09:99:d2:14:f2:ca:a9: fd:d7:f3:14:7e:ef:95:df:ab:72:2d:ac:dc:f4:bb: ff:0e:72:b5:cf:b8:90:a3:e0:0d:7e:d1:12:bf:13: 84:5d:cc:81:0b:03:08:c0:a8:ab:42:66:77:77:a5: 7a:e1:12:45:5d:4d:70:34:a9:94:af:bd:b2:a6:b9: c8:1e:e3:a7:96:fd:d7:3b:a0:7e:e8:89:d5:fc:8a: 66:99:9c:3c:9f:f2:f3:fa:82:29:49:e9:1b:18:04: 29:19:1f:6a:a6:13:46:d1:57:de:8b:68:57:4d:3e: dd:80:98:b2:0d:25:7e:98:b9:c4:2d:0c:ef:ff:87: 7a:5a:fd:77:b3:66:2f:fb:d6:95:b1:f7:bc:9e:67: 61:17:bb:e0:11:6a:45:7f:de:63:ca:9d:d1:81:04: f1:5f:a2:3e:32:e8:d9:1d:e8:3b:3e:31:79:33:e0: f0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:22:A1:B2:37:1F:5C:3D:42:76:D7:3E:70:5C:77:81:71:27:E4:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85a6cf21-2056-3a41-b8bd-d016042a8028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:04:b3:99:17:c3:07:0d:99:9f:40:9b:3e:ff:bf:77:9a:2e: 6f:ad:24:64:29:cc:e9:b2:4c:c1:ad:5e:78:ee:0a:61:dd:40: 68:e9:e4:76:52:8f:b8:7f:9c:5b:88:9b:ee:d3:63:77:67:90: ec:8f:e7:af:17:e4:37:9c:c8:6e:28:f7:53:67:b1:1d:5e:b5: 93:63:cd:5e:a7:cd:fb:32:09:29:4b:44:e1:71:b9:ea:66:4c: de:c4:e1:38:5c:a3:ac:73:b2:bc:37:3b:45:0d:44:b5:15:6f: c3:06:20:70:50:a2:4c:0b:ad:3c:97:44:c3:5b:ce:9d:a9:b9: 11:e1:b0:64:73:26:d7:84:a7:e1:a3:4f:8d:36:f9:11:e8:db: 0e:b9:12:fd:4f:de:98:b1:23:f9:b0:9f:45:56:13:8d:98:25: c2:39:51:2d:58:2a:ff:ee:89:2b:85:d4:c5:b5:7a:41:40:db: 89:99:79:42:2b:3c:65:38:9d:c9:22:9b:36:46:06:25:2d:5a: 5c:4d:d5:b4:bf:c0:ab:06:80:10:37:a0:de:19:31:7a:bb:bb: bc:23:9d:ee:94:08:23:db:db:17:bc:8a:ab:97:33:fd:45:7f: 21:1b:6d:d3:1a:dd:6b:66:2e:54:63:01:5b:bb:de:30:d7:03: 36:1e:5b:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHtGHrJoAis/hbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk ZTNlODdlYWQtMzRhZS00NjU4LWFiMzAtYzA2NjI4OGI2MWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsF/5tWNS4i77qKL2xE/J2KqqcLwRANAU8TP kusnMJQfoa/gGcDfWiyGRBDsVk8cI814i3n517okaAwiiBXESTYTittGeltZsK7K So6qvAaRygmZ0hTyyqn91/MUfu+V36tyLazc9Lv/DnK1z7iQo+ANftESvxOEXcyB CwMIwKirQmZ3d6V64RJFXU1wNKmUr72yprnIHuOnlv3XO6B+6InV/IpmmZw8n/Lz +oIpSekbGAQpGR9qphNG0Vfei2hXTT7dgJiyDSV+mLnELQzv/4d6Wv13s2Yv+9aV sfe8nmdhF7vgEWpFf95jyp3RgQTxX6I+MujZHeg7PjF5M+DwkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEiobI3H1w9QnbXPnBcd4FxJ+TyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODVhNmNmMjEtMjA1Ni0z YTQxLWI4YmQtZDAxNjA0MmE4MDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLK/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgEs5kXwwcNmZ9Amz7/v3eaLm+tJGQpzOmyTMGtXnjuCmHdQGjp5HZS j7h/nFuIm+7TY3dnkOyP568X5DecyG4o91NnsR1etZNjzV6nzfsyCSlLROFxuepm TN7E4Thco6xzsrw3O0UNRLUVb8MGIHBQokwLrTyXRMNbzp2puRHhsGRzJteEp+Gj T402+RHo2w65Ev1P3pixI/mwn0VWE42YJcI5US1YKv/uiSuF1MW1ekFA24mZeUIr PGU4nckimzZGBiUtWlxN1bS/wKsGgBA3oN4ZMXq7u7wjne6UCCPb2xe8iquXM/1F fyEbbdMa3WtmLlRjAVu73jDXAzYeW1w= -----END CERTIFICATE-----Generated at Fri Apr 4 08:53:08 2025 by rpki-client