$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c617d4d0-3bce-3aea-991a-8137e06ec0a3.roa File: c617d4d0-3bce-3aea-991a-8137e06ec0a3.roa (raw, json) Hash identifier: OPeaguaYRC20DDnLhQZTOr0uZF5KpJSxOM/w+1IOU3Q= Subject key identifier: CF:D1:C9:43:DC:05:34:DF:FC:6B:00:00:74:6C:3F:D2:53:3D:45:FD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584883E5BE31480A8AA170C03140 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c617d4d0-3bce-3aea-991a-8137e06ec0a3.roa Signing time: Sun 12 Jan 2025 02:00:38 +0000 ROA not before: Sun 12 Jan 2025 02:00:38 +0000 ROA not after: Sat 12 Apr 2025 01:00:38 +0000 asID: 15169 IP address blocks: 192.178.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:e5:be:31:48:0a:8a:a1:70:c0:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jan 12 02:00:38 2025 GMT Not After : Apr 12 01:00:38 2025 GMT Subject: CN=b6f51eff-0750-4e4d-8a71-e988d248e767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:10:ae:89:c9:a1:04:a2:b9:15:23:f6:ec:c9: f9:12:32:17:1a:0c:55:29:af:98:4d:26:e4:34:82: da:34:35:32:b3:d9:b0:a5:ee:e5:69:b8:9c:95:e9: 26:6d:8d:0a:b0:01:19:e7:4e:fb:e2:46:38:62:8c: 61:f7:87:3a:ab:64:0e:7b:34:70:07:8d:0c:30:e9: 9b:ee:d4:b7:89:68:85:75:0d:e3:33:33:ec:90:d0: 35:29:eb:5d:1b:b4:40:65:79:79:cd:63:cc:8e:15: a3:61:78:4a:5b:4b:b6:26:e3:d5:09:ab:e6:8f:26: 26:37:cd:7b:fd:49:39:63:53:b1:de:4e:f8:a8:85: 1b:4e:b3:cb:bc:cb:66:25:6e:91:e1:2d:f8:d6:69: f0:4a:db:b2:41:2f:08:1d:f6:e5:f2:82:f2:61:4c: 32:98:90:80:3d:ab:77:ec:8e:4f:fc:9f:d4:cf:dd: f8:8b:30:17:54:f6:cd:6b:a5:20:17:bb:f8:9c:71: 78:cf:e5:22:87:0c:9b:14:f4:99:ac:4c:a7:33:2c: f6:45:62:cf:ab:81:59:f6:b9:23:83:bf:02:26:a3: 0d:d2:e2:a3:d8:50:0c:80:10:98:ee:0e:1f:f3:3c: 20:4f:35:d5:d1:cd:0d:37:68:fd:f9:de:73:6b:ad: 35:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D1:C9:43:DC:05:34:DF:FC:6B:00:00:74:6C:3F:D2:53:3D:45:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c617d4d0-3bce-3aea-991a-8137e06ec0a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:e9:fb:b8:c1:ba:78:cf:f4:2d:70:a3:99:24:1a:a6:d1:30: 63:1d:0e:9e:76:74:77:2f:c8:23:3d:f6:4f:cb:07:70:be:7c: 11:ea:aa:2d:14:c6:0f:23:20:27:77:06:42:db:e8:7c:c5:f8: a2:3d:15:4c:8f:d3:27:b8:6e:55:d0:ed:0b:30:9e:15:70:7e: 0a:8b:71:11:fc:26:ac:3a:d1:58:1f:18:5f:b9:c7:1c:61:3e: 47:3b:5e:2d:38:4a:a2:96:b8:76:1d:f2:98:08:64:ee:d8:a5: 5a:3e:aa:68:47:57:3c:d6:43:6b:d5:d3:00:ba:eb:f6:03:b3: ea:85:a4:62:60:ae:a6:d3:5a:45:78:1d:14:c6:26:30:61:9f: 9d:50:33:99:ad:57:48:b8:40:d5:1f:65:a2:3f:c7:c4:ae:08: 3e:19:a3:97:ca:4a:9b:9a:fd:a0:e0:1f:91:c9:1e:7e:52:a3: 57:c4:41:49:c0:f4:f0:3c:86:d7:75:69:37:c5:83:d2:da:d8: f2:d8:69:c3:54:fe:e6:a4:3f:06:d0:34:ce:bc:d5:9e:d8:fd: e8:d4:7b:31:aa:90:30:c7:ae:73:09:6a:6a:c1:3e:68:ca:6c: 1e:a7:42:ab:4c:bd:49:5a:ca:3e:88:fa:cb:a2:90:7c:e5:22: ed:8b:de:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5b4xSAqKoXDAMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk YjZmNTFlZmYtMDc1MC00ZTRkLThhNzEtZTk4OGQyNDhlNzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBCuicmhBKK5FSP27Mn5EjIXGgxVKa+YTSbk NILaNDUys9mwpe7labiclekmbY0KsAEZ50774kY4Yoxh94c6q2QOezRwB40MMOmb 7tS3iWiFdQ3jMzPskNA1KetdG7RAZXl5zWPMjhWjYXhKW0u2JuPVCavmjyYmN817 /Uk5Y1Ox3k74qIUbTrPLvMtmJW6R4S341mnwStuyQS8IHfbl8oLyYUwymJCAPat3 7I5P/J/Uz934izAXVPbNa6UgF7v4nHF4z+UihwybFPSZrEynMyz2RWLPq4FZ9rkj g78CJqMN0uKj2FAMgBCY7g4f8zwgTzXV0c0NN2j9+d5za601EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/RyUPcBTTf/GsAAHRsP9JTPUX9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzYxN2Q0ZDAtM2JjZS0z YWVhLTk5MWEtODEzN2UwNmVjMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLp+7jBunjP9C1wo5kkGqbRMGMdDp52dHcvyCM99k/LB3C+fBHqqi0U xg8jICd3BkLb6HzF+KI9FUyP0ye4blXQ7QswnhVwfgqLcRH8Jqw60VgfGF+5xxxh Pkc7Xi04SqKWuHYd8pgIZO7YpVo+qmhHVzzWQ2vV0wC66/YDs+qFpGJgrqbTWkV4 HRTGJjBhn51QM5mtV0i4QNUfZaI/x8SuCD4Zo5fKSpua/aDgH5HJHn5So1fEQUnA 9PA8htd1aTfFg9La2PLYacNU/uakPwbQNM681Z7Y/ejUezGqkDDHrnMJamrBPmjK bB6nQqtMvUlayj6I+suikHzlIu2L3rI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:03 2025 by rpki-client