$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5f9aede-1802-34d1-993a-7a814d3127a4.roa File: b5f9aede-1802-34d1-993a-7a814d3127a4.roa (raw, json) Hash identifier: HTnldL1028B82BombTYXSG0g9wSPbD05yolzTxywR9Q= Subject key identifier: 8E:29:89:E5:F5:0A:9B:EC:C5:34:6E:13:4C:43:30:DC:0B:5F:B0:57 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584883E5BEEF08F68670FF9CA800 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5f9aede-1802-34d1-993a-7a814d3127a4.roa Signing time: Sun 12 Jan 2025 02:00:38 +0000 ROA not before: Sun 12 Jan 2025 02:00:38 +0000 ROA not after: Sat 12 Apr 2025 01:00:38 +0000 asID: 15169 IP address blocks: 192.178.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:e5:be:ef:08:f6:86:70:ff:9c:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jan 12 02:00:38 2025 GMT Not After : Apr 12 01:00:38 2025 GMT Subject: CN=a2120083-570e-44e4-b9ec-138466659e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d4:50:5a:91:25:ed:51:9f:10:5a:ac:2a:17: 7d:ed:16:1c:97:6a:08:56:f2:ae:0a:68:df:fd:1a: cf:59:f1:12:1c:14:77:2f:dc:2c:61:91:ef:ee:52: f1:70:b1:a6:95:75:16:e0:b8:a3:0a:19:91:97:35: b1:4d:f0:ab:14:53:02:dd:7a:82:ca:6a:5b:67:95: ef:12:77:3e:75:9b:88:92:f5:0e:a6:14:b6:05:c4: b5:a2:df:20:bf:79:d7:a0:e8:d3:f5:62:e3:c7:eb: f0:a6:d2:a8:e8:73:22:f7:ab:fb:32:22:91:65:d1: 24:bd:44:3c:86:3c:6f:f5:71:81:14:5a:e4:ec:4d: 40:30:56:c0:7e:00:c8:30:a9:64:05:9b:68:ce:a4: 36:4a:a2:9f:ec:4c:81:07:31:be:a6:43:62:4e:09: f9:96:07:d5:8d:bb:dd:66:82:00:41:9a:aa:a1:bb: 9a:ba:20:5f:50:ea:50:39:40:fc:14:fb:b3:6b:64: 09:23:4e:f0:84:38:c3:c0:09:a5:ec:b1:fa:b9:fd: 3e:2f:13:9c:bb:32:6e:01:2d:36:9d:d1:76:20:64: d2:c3:c9:8a:d2:8d:39:85:9b:30:45:b6:ce:86:cc: a7:c7:a3:de:88:4a:f4:98:e9:4f:e2:49:72:6f:3d: f3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:29:89:E5:F5:0A:9B:EC:C5:34:6E:13:4C:43:30:DC:0B:5F:B0:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5f9aede-1802-34d1-993a-7a814d3127a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d2:f7:e8:d7:f7:ad:0a:28:bf:58:22:a8:41:43:98:30:17: a5:1d:a0:98:cb:01:02:2d:16:c2:c6:a5:a4:ee:81:fd:10:99: 2c:c2:7c:04:d3:a1:d9:90:32:e9:e4:e9:89:fd:ca:9a:f5:27: cc:be:4d:de:e2:98:a4:31:29:c4:67:ed:a9:a7:71:65:0c:ee: 6d:2d:40:cf:9f:9b:a2:12:7d:a0:de:1d:9f:fc:ea:02:d1:48: 90:bd:07:89:ae:87:06:34:f6:11:20:33:6a:99:0a:94:f8:1a: c1:56:5c:c8:4b:02:85:cd:11:78:ec:95:cf:03:8a:ab:33:43: 6b:20:2f:94:b8:30:41:88:0a:60:e3:7a:31:77:3e:40:be:90: 41:34:db:2f:26:e5:7b:5a:07:a9:90:3b:d7:8b:70:f3:7d:59: e3:18:5f:b4:93:eb:96:b8:fb:b4:98:45:59:20:86:79:95:2f: 68:2c:99:62:10:f2:d6:ee:18:ac:d7:6b:48:fd:f4:5a:3a:f3: 53:5e:af:04:75:7e:c8:cd:1e:20:2f:46:0e:9d:34:f8:11:f2: e6:3f:8b:c9:40:f0:a2:2e:e9:4d:57:bc:92:fc:67:25:06:21: 81:4a:b3:13:e7:3a:0d:06:f1:39:df:0a:d0:8b:5a:97:b9:2c: ce:2c:56:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5b7vCPaGcP+cqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk YTIxMjAwODMtNTcwZS00NGU0LWI5ZWMtMTM4NDY2NjU5ZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNRQWpEl7VGfEFqsKhd97RYcl2oIVvKuCmjf /RrPWfESHBR3L9wsYZHv7lLxcLGmlXUW4LijChmRlzWxTfCrFFMC3XqCympbZ5Xv Enc+dZuIkvUOphS2BcS1ot8gv3nXoOjT9WLjx+vwptKo6HMi96v7MiKRZdEkvUQ8 hjxv9XGBFFrk7E1AMFbAfgDIMKlkBZtozqQ2SqKf7EyBBzG+pkNiTgn5lgfVjbvd ZoIAQZqqobuauiBfUOpQOUD8FPuza2QJI07whDjDwAml7LH6uf0+LxOcuzJuAS02 ndF2IGTSw8mK0o05hZswRbbOhsynx6PeiEr0mOlP4klybz3zbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4pieX1CpvsxTRuE0xDMNwLX7BXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjVmOWFlZGUtMTgwMi0z NGQxLTk5M2EtN2E4MTRkMzEyN2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbS9+jX960KKL9YIqhBQ5gwF6UdoJjLAQItFsLGpaTugf0QmSzCfATT odmQMunk6Yn9ypr1J8y+Td7imKQxKcRn7amncWUM7m0tQM+fm6ISfaDeHZ/86gLR SJC9B4muhwY09hEgM2qZCpT4GsFWXMhLAoXNEXjslc8DiqszQ2sgL5S4MEGICmDj ejF3PkC+kEE02y8m5XtaB6mQO9eLcPN9WeMYX7ST65a4+7SYRVkghnmVL2gsmWIQ 8tbuGKzXa0j99Fo681NerwR1fsjNHiAvRg6dNPgR8uY/i8lA8KIu6U1XvJL8ZyUG IYFKsxPnOg0G8TnfCtCLWpe5LM4sVlI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:51 2025 by rpki-client