$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa File: c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa (raw, json) Hash identifier: LW1yGecs3vx6K+Kmv6jks/DzyK0H9lVg4Dawno16OC0= Subject key identifier: 88:EA:A8:9C:E8:E8:87:A3:76:05:CE:F4:D0:C1:0E:DC:70:67:E3:2C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584883E5C38EF1CFC62D47103598 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa Signing time: Sun 12 Jan 2025 02:00:38 +0000 ROA not before: Sun 12 Jan 2025 02:00:38 +0000 ROA not after: Sat 12 Apr 2025 01:00:38 +0000 asID: 15169 IP address blocks: 192.178.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:e5:c3:8e:f1:cf:c6:2d:47:10:35:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jan 12 02:00:38 2025 GMT Not After : Apr 12 01:00:38 2025 GMT Subject: CN=a5479ec5-cac3-41ba-98f3-858842bded9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d3:f0:96:9a:0a:a1:ef:02:c0:94:00:8a:8f: 6a:bc:2a:7a:64:d7:1c:85:a0:5f:66:12:c6:43:75: 9d:1d:a0:b4:e2:b0:3e:e7:d9:66:00:75:11:79:53: 2c:85:be:94:b5:b2:91:a5:b7:cf:2a:de:a1:91:62: a1:48:e3:34:4d:c3:41:cd:9c:fb:0d:92:b8:86:bb: e3:a0:59:ef:84:0e:e4:b7:77:1b:6e:5b:1e:5e:9e: ce:fa:b8:87:cd:03:3a:92:03:51:83:bf:38:64:12: 67:7a:bf:87:45:0e:ed:ef:df:da:2c:d7:ae:61:21: 4b:59:ba:eb:43:6e:0f:27:f1:11:b6:54:f4:03:4f: 84:6f:9c:f2:19:da:f0:b1:0d:96:3f:0e:8f:c9:25: 53:63:ef:86:fe:f7:5e:27:e1:56:25:1b:69:89:2a: 8d:89:12:9e:58:6c:bd:cb:cd:84:a3:16:23:2f:bc: 7b:0f:89:76:65:3b:18:17:50:80:95:47:18:6f:ce: 18:ab:f8:62:fe:38:af:25:b3:8c:8f:7d:db:e5:d1: 3d:2e:4f:ef:a9:42:da:0f:02:18:d9:7f:51:90:40: 5e:16:f0:78:7f:48:fb:2e:64:d7:a3:3f:3a:9b:30: 03:4a:48:1e:b7:67:2f:3a:a3:ea:6c:92:9f:b9:d2: 9f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EA:A8:9C:E8:E8:87:A3:76:05:CE:F4:D0:C1:0E:DC:70:67:E3:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:88:9e:cb:3f:30:05:d2:82:a0:9b:4e:c3:ea:f3:2b:69:fc: 58:00:60:d9:f9:38:c2:3b:4c:38:d1:44:a4:41:0d:95:89:94: e3:11:56:d7:68:54:22:8b:05:74:da:01:cf:12:e7:3c:a4:a4: 41:94:4e:2a:2a:8b:d9:a6:a2:22:d9:db:80:94:d1:1f:95:15: 1c:d8:ac:dd:cd:a9:04:b0:dd:32:7f:e5:89:4e:30:a8:e6:dc: 20:93:75:12:68:dc:0f:6f:b7:07:9b:c0:f6:02:fd:f8:6a:d4: e3:73:7d:fe:d3:ef:87:2f:83:bf:1a:92:34:a5:23:74:a2:25: e2:78:6d:0b:7a:35:10:43:15:f3:23:f4:5e:31:0c:f8:6d:f4: 5f:12:68:f6:61:d8:41:ba:9e:e7:11:94:fd:f7:73:b2:29:cc: df:9d:db:12:0c:8f:4c:2a:b1:24:cd:aa:c9:eb:83:16:36:ec: d5:f0:c8:b9:20:a4:d9:f9:90:7b:6a:d8:27:f4:67:06:19:a8: 09:e2:d8:9e:ad:9b:17:19:f9:16:12:a9:f2:6b:d7:1e:63:31: 49:10:6d:d5:6d:d0:c1:8e:6f:b3:c4:d8:21:3c:28:9c:69:4e: d0:e1:87:0f:3b:a4:45:65:13:0c:13:0f:6b:07:c8:f3:df:86: 53:ba:73:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5cOO8c/GLUcQNZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk YTU0NzllYzUtY2FjMy00MWJhLTk4ZjMtODU4ODQyYmRlZDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNPwlpoKoe8CwJQAio9qvCp6ZNcchaBfZhLG Q3WdHaC04rA+59lmAHUReVMshb6UtbKRpbfPKt6hkWKhSOM0TcNBzZz7DZK4hrvj oFnvhA7kt3cbblseXp7O+riHzQM6kgNRg784ZBJner+HRQ7t79/aLNeuYSFLWbrr Q24PJ/ERtlT0A0+Eb5zyGdrwsQ2WPw6PySVTY++G/vdeJ+FWJRtpiSqNiRKeWGy9 y82EoxYjL7x7D4l2ZTsYF1CAlUcYb84Yq/hi/jivJbOMj33b5dE9Lk/vqULaDwIY 2X9RkEBeFvB4f0j7LmTXoz86mzADSkget2cvOqPqbJKfudKfuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjqqJzo6IejdgXO9NDBDtxwZ+MsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzdiOTkxMmQtMmNkNi0z OTc0LWE4MDUtMWUwNTI1YTFhMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALaInss/MAXSgqCbTsPq8ytp/FgAYNn5OMI7TDjRRKRBDZWJlOMRVtdo VCKLBXTaAc8S5zykpEGUTioqi9mmoiLZ24CU0R+VFRzYrN3NqQSw3TJ/5YlOMKjm 3CCTdRJo3A9vtwebwPYC/fhq1ONzff7T74cvg78akjSlI3SiJeJ4bQt6NRBDFfMj 9F4xDPht9F8SaPZh2EG6nucRlP33c7IpzN+d2xIMj0wqsSTNqsnrgxY27NXwyLkg pNn5kHtq2Cf0ZwYZqAni2J6tmxcZ+RYSqfJr1x5jMUkQbdVt0MGOb7PE2CE8KJxp TtDhhw87pEVlEwwTD2sHyPPfhlO6czE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:16 2025 by rpki-client