$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c271f750-39e5-31af-b5d1-2ed8e1300a8f.roa File: c271f750-39e5-31af-b5d1-2ed8e1300a8f.roa (raw, json) Hash identifier: xh246BD56CrlkpfQnxSM2SJ+sDpPRp6KGqh8g4Wy3Ac= Subject key identifier: 6A:D5:68:6E:81:55:C2:FE:C6:25:C6:BA:6E:BD:88:5F:4F:AD:17:83 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849631ED2A80B7259B1372A0580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c271f750-39e5-31af-b5d1-2ed8e1300a8f.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 192.178.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:d2:a8:0b:72:59:b1:37:2a:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=37257898-21ef-4ad5-a380-9c1fd407e878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:37:55:a2:84:67:9a:04:cc:cc:4a:00:0a:2d: 99:0f:32:e1:71:1f:f0:ab:dd:2d:c2:a2:96:95:7a: b5:fa:22:29:ef:41:64:49:c0:27:dc:e4:bd:68:fb: 81:32:84:71:24:2c:ac:d0:37:63:40:70:8b:f8:c1: c6:f2:e0:40:ed:ae:81:4f:e3:58:4b:6f:cc:81:db: 88:c7:12:59:ac:b9:b9:79:27:cf:9c:53:ac:e9:20: 68:a6:d7:c5:b7:36:fb:26:92:c2:99:5c:d6:13:d7: c5:2f:32:3a:c2:e3:a8:7c:50:94:e0:3b:91:f2:ef: 0f:d4:13:d0:b9:3a:a6:ff:f9:8e:1c:b8:14:41:f3: 32:58:5e:f0:f1:8e:45:af:1c:55:cd:97:71:f5:e1: 71:d0:1e:57:45:06:2d:af:a2:b1:f5:e4:28:66:65: e8:b3:0b:0b:e7:b0:3c:c9:72:f6:da:92:c1:2b:f3: 59:ba:6a:bf:8d:70:cf:92:70:d7:08:b8:fb:77:4a: 84:de:fe:9d:bf:7c:96:9c:8a:e3:3d:f0:91:08:5a: e4:07:de:c3:ac:f4:26:26:0e:aa:06:07:b5:a7:1a: 3f:57:49:5c:c9:67:ca:6a:ca:0d:cb:fd:22:76:81: 36:60:28:ce:0f:93:f8:78:fe:35:9a:f2:9b:25:8c: 3a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D5:68:6E:81:55:C2:FE:C6:25:C6:BA:6E:BD:88:5F:4F:AD:17:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c271f750-39e5-31af-b5d1-2ed8e1300a8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:bc:19:55:7d:05:9d:ac:22:b5:45:b6:37:ad:e3:6d:4f:5f: 47:1b:d4:d2:10:42:0f:da:1e:84:f5:49:b3:10:e3:26:78:18: bb:f4:ad:2e:e6:94:90:0b:47:9c:3b:b0:0a:0d:85:f9:fb:21: 72:4d:1e:0c:9d:85:50:22:61:9d:f3:c2:d7:47:48:f1:7e:04: 26:d3:9c:91:fe:0b:9b:86:b0:7a:20:a7:87:64:be:56:b6:d2: 47:2e:e0:57:0e:6f:7b:56:73:d3:38:13:56:61:27:c0:a4:be: 46:71:c0:f7:ff:04:b0:14:f7:51:b1:34:21:18:44:36:7f:83: c1:43:3c:06:22:95:15:f5:f2:fe:f4:f8:b8:96:94:6c:1c:de: ad:af:37:73:a9:fa:14:80:a3:a5:56:bb:c1:29:39:ec:69:5c: 29:88:9a:4c:4e:41:96:1b:2a:73:9b:5e:b5:42:6a:e5:be:98: c5:28:5d:52:98:63:b2:b0:0d:04:8a:13:a8:a4:6e:df:2b:c2: 29:f0:cb:70:9d:8d:24:20:62:f3:c1:d0:23:9e:68:e8:cb:b2: 32:31:86:8d:bc:e6:c0:89:0e:76:c4:4e:da:73:2a:65:66:7e: 0e:c8:9c:aa:72:20:57:ba:42:52:70:df:c0:3f:4f:4a:f5:8a: 36:17:fa:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHtKoC3JZsTcqBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk MzcyNTc4OTgtMjFlZi00YWQ1LWEzODAtOWMxZmQ0MDdlODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzdVooRnmgTMzEoACi2ZDzLhcR/wq90twqKW lXq1+iIp70FkScAn3OS9aPuBMoRxJCys0DdjQHCL+MHG8uBA7a6BT+NYS2/MgduI xxJZrLm5eSfPnFOs6SBoptfFtzb7JpLCmVzWE9fFLzI6wuOofFCU4DuR8u8P1BPQ uTqm//mOHLgUQfMyWF7w8Y5FrxxVzZdx9eFx0B5XRQYtr6Kx9eQoZmXoswsL57A8 yXL22pLBK/NZumq/jXDPknDXCLj7d0qE3v6dv3yWnIrjPfCRCFrkB97DrPQmJg6q Bge1pxo/V0lcyWfKasoNy/0idoE2YCjOD5P4eP41mvKbJYw6TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrVaG6BVcL+xiXGum69iF9PrReDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzI3MWY3NTAtMzllNS0z MWFmLWI1ZDEtMmVkOGUxMzAwYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKm8GVV9BZ2sIrVFtjet421PX0cb1NIQQg/aHoT1SbMQ4yZ4GLv0rS7m lJALR5w7sAoNhfn7IXJNHgydhVAiYZ3zwtdHSPF+BCbTnJH+C5uGsHogp4dkvla2 0kcu4FcOb3tWc9M4E1ZhJ8CkvkZxwPf/BLAU91GxNCEYRDZ/g8FDPAYilRX18v70 +LiWlGwc3q2vN3Op+hSAo6VWu8EpOexpXCmImkxOQZYbKnObXrVCauW+mMUoXVKY Y7KwDQSKE6ikbt8rwinwy3CdjSQgYvPB0COeaOjLsjIxho285sCJDnbETtpzKmVm fg7InKpyIFe6QlJw38A/T0r1ijYX+k4= -----END CERTIFICATE-----Generated at Fri Apr 4 08:40:40 2025 by rpki-client