$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a0bb392a-23fe-310a-a784-5bee56e58ddb.roa File: a0bb392a-23fe-310a-a784-5bee56e58ddb.roa (raw, json) Hash identifier: pHOwFBKULVDMEVoC5haYoI3aLbOxIOh0oEjUGdXpypk= Subject key identifier: 04:EC:38:B5:47:96:AA:82:58:69:8B:DD:B7:07:9C:94:B3:CF:DE:01 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584883E5BD69C84532F44FB54180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a0bb392a-23fe-310a-a784-5bee56e58ddb.roa Signing time: Sun 12 Jan 2025 02:00:38 +0000 ROA not before: Sun 12 Jan 2025 02:00:38 +0000 ROA not after: Sat 12 Apr 2025 01:00:38 +0000 asID: 15169 IP address blocks: 192.178.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:e5:bd:69:c8:45:32:f4:4f:b5:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jan 12 02:00:38 2025 GMT Not After : Apr 12 01:00:38 2025 GMT Subject: CN=2ddc8a5b-9020-4006-8005-29e6ad79d66c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:de:b5:40:5d:05:2e:9c:28:49:de:6e:86:f1: 5a:fa:bd:3b:56:20:ab:57:e5:23:c9:05:89:1d:f6: 80:07:ed:d0:cb:bd:12:47:c1:81:ad:be:c4:53:b4: d5:1c:62:c2:f1:d7:e4:07:46:7f:81:99:e7:18:ac: 37:f1:38:b7:e6:a2:95:20:3e:31:33:06:d0:20:24: 25:60:06:f1:47:d2:ed:43:40:01:c9:c3:14:79:bd: 80:07:e8:47:91:4d:1d:c8:2b:6a:6e:1e:9c:03:86: 5a:38:0d:0b:20:a0:e4:01:8d:3a:c3:c4:28:3f:03: 06:4a:ee:7c:98:8a:1d:9e:05:3d:76:51:eb:85:cf: f7:0c:13:a1:0b:e9:ab:db:a0:9c:b5:ac:e8:2f:4c: 5e:46:e6:89:a2:da:c1:e7:60:04:0e:f7:3c:6a:40: 9c:fc:d3:56:09:75:2c:8b:a5:b3:f5:5d:74:48:dd: a1:c1:42:6c:6a:6b:4b:51:ab:17:18:4f:f3:57:ee: 35:11:d8:d0:16:61:89:5c:ad:92:e0:a5:30:7a:5d: b9:1f:a6:84:f6:be:49:e5:30:61:a0:64:69:db:10: dc:a9:01:53:04:87:61:c0:99:cb:7c:8e:3d:05:a6: 70:d9:bf:d9:0d:62:4b:b9:c8:5f:0e:cb:8c:b5:e7: a9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EC:38:B5:47:96:AA:82:58:69:8B:DD:B7:07:9C:94:B3:CF:DE:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a0bb392a-23fe-310a-a784-5bee56e58ddb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:d9:2a:c9:1c:13:e5:70:b9:0c:dd:e7:64:23:07:e6:08:b2: a9:c8:d0:e0:86:26:20:b4:df:fc:07:2a:50:34:e0:58:57:b1: fe:32:a5:8d:ba:45:c2:01:dd:04:d1:e6:65:8e:48:49:9b:de: 6d:86:63:10:78:58:15:ee:7d:c1:8a:8a:02:0e:01:26:6e:c5: 39:a2:50:9d:7e:0b:57:8b:bc:8b:24:f6:d8:40:cc:e0:e9:dc: b8:68:3c:18:a0:48:42:0a:0e:3d:97:92:e3:e1:84:db:6c:b5: 5d:0b:fd:c8:57:dd:6a:83:68:a4:13:b9:d7:08:7d:84:0f:d6: 65:cb:f0:1b:4f:f6:93:84:3f:b4:5c:ab:11:e7:06:60:2f:34: 52:de:c6:75:62:63:8c:f9:c2:cb:29:e3:69:cd:d5:2c:9f:46: 31:2e:44:30:b5:a6:d9:7c:d8:44:84:7c:f2:f3:be:ca:a8:f5: a5:04:db:7c:49:81:14:5c:54:23:f2:6a:5f:04:5e:86:88:15: bb:ae:5d:e4:e6:a9:60:20:54:4e:d4:55:6b:63:88:5c:f4:6c: d6:8d:ec:ba:f6:5f:3b:4d:61:bf:fb:62:10:41:ef:31:bc:17: 3c:2d:f1:f2:f2:f4:bf:b5:5c:ad:51:6f:a2:25:1b:94:98:d3: 6c:55:3b:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5b1pyEUy9E+1QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk MmRkYzhhNWItOTAyMC00MDA2LTgwMDUtMjllNmFkNzlkNjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn961QF0FLpwoSd5uhvFa+r07ViCrV+UjyQWJ HfaAB+3Qy70SR8GBrb7EU7TVHGLC8dfkB0Z/gZnnGKw38Ti35qKVID4xMwbQICQl YAbxR9LtQ0ABycMUeb2AB+hHkU0dyCtqbh6cA4ZaOA0LIKDkAY06w8QoPwMGSu58 mIodngU9dlHrhc/3DBOhC+mr26CctazoL0xeRuaJotrB52AEDvc8akCc/NNWCXUs i6Wz9V10SN2hwUJsamtLUasXGE/zV+41EdjQFmGJXK2S4KUwel25H6aE9r5J5TBh oGRp2xDcqQFTBIdhwJnLfI49BaZw2b/ZDWJLuchfDsuMteep+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATsOLVHlqqCWGmL3bcHnJSzz94BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTBiYjM5MmEtMjNmZS0z MTBhLWE3ODQtNWJlZTU2ZTU4ZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/ZKskcE+VwuQzd52QjB+YIsqnI0OCGJiC03/wHKlA04FhXsf4ypY26 RcIB3QTR5mWOSEmb3m2GYxB4WBXufcGKigIOASZuxTmiUJ1+C1eLvIsk9thAzODp 3LhoPBigSEIKDj2XkuPhhNtstV0L/chX3WqDaKQTudcIfYQP1mXL8BtP9pOEP7Rc qxHnBmAvNFLexnViY4z5wssp42nN1SyfRjEuRDC1ptl82ESEfPLzvsqo9aUE23xJ gRRcVCPyal8EXoaIFbuuXeTmqWAgVE7UVWtjiFz0bNaN7Lr2XztNYb/7YhBB7zG8 Fzwt8fLy9L+1XK1Rb6IlG5SY02xVO68= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:15 2025 by rpki-client