$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c98a701b-7bc9-3bad-a939-be22323e522c.roa File: c98a701b-7bc9-3bad-a939-be22323e522c.roa (raw, json) Hash identifier: DP11TJSf/6ChFKUqqO3d8SWVKd0ogLX8h0bZG7xB5/E= Subject key identifier: 6C:7A:E1:34:07:D4:5D:41:03:84:69:F2:3E:E3:2F:9F:00:BA:9B:46 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849631ED0C6A92F35F894CCBFC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c98a701b-7bc9-3bad-a939-be22323e522c.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 192.178.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:d0:c6:a9:2f:35:f8:94:cc:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=5c1e795f-a11b-4a46-ac26-8eec61260ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:23:34:c9:59:9c:bf:87:6b:de:ce:67:6c:d2: fc:c0:35:c4:a2:60:04:76:63:b9:e9:47:dd:06:f2: 61:25:65:3a:ec:36:19:49:9d:94:9e:a9:a7:e6:7c: 4f:47:6e:1f:15:ff:4f:78:98:0d:6a:12:98:25:f8: f7:16:25:1c:3e:d0:6a:0e:7c:b8:1f:76:d5:21:02: 2a:26:14:06:c5:0a:7a:aa:bc:17:24:6a:7c:ab:06: 7b:d6:e2:f8:37:93:60:8e:30:f3:92:cf:2f:83:97: 68:86:df:5e:33:fa:e9:c4:42:1f:70:62:71:5e:00: ae:82:79:87:80:73:d4:c2:e6:6a:c9:46:b3:fe:f5: 40:20:48:4b:69:c8:89:77:55:f2:ad:75:61:4f:7d: 01:73:18:c6:d9:09:b1:8b:7e:95:81:fa:85:02:a7: 54:1e:f5:5f:e2:d6:fe:89:1e:2c:a1:7c:c0:07:5f: ec:86:8e:63:d5:bb:1d:3e:e5:e2:79:ed:2d:9a:ba: 07:1b:12:bb:c4:80:30:6e:97:8e:9d:37:f9:76:05: ad:a3:c2:e4:14:c3:53:fd:0d:f0:ed:4b:68:31:a9: b4:2d:90:1a:d7:b6:85:00:4d:9d:f7:b2:6d:45:1e: 5f:83:c0:9c:3a:75:31:8f:52:e6:6c:25:2a:9e:2b: 71:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7A:E1:34:07:D4:5D:41:03:84:69:F2:3E:E3:2F:9F:00:BA:9B:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c98a701b-7bc9-3bad-a939-be22323e522c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:8e:84:bc:e4:6d:75:46:88:7d:ec:b9:1d:43:5d:28:a7:59: ac:3d:3c:d9:91:69:b5:df:46:b6:5d:ed:2b:26:be:de:8d:25: 97:ed:37:1b:b8:b0:fd:84:20:41:12:24:b6:0c:e2:09:f4:24: d6:a3:ac:2a:96:37:ae:9a:6f:d9:46:9b:26:6b:69:62:96:27: ff:77:9d:6e:5e:27:73:79:b9:ea:79:3b:b3:e0:34:ed:ee:a1: 72:3c:f4:91:d2:80:5f:15:f8:8e:7f:15:bf:56:75:7a:83:42: 57:62:9d:89:ea:f0:d1:9d:e3:5e:b1:78:bb:c7:16:a5:c1:03: 8c:a0:08:f1:5f:9a:31:f5:ce:5c:ad:00:64:a8:37:94:96:39: 8c:3a:d0:6e:ea:27:ac:10:82:1d:b3:38:94:dd:30:77:6d:67: 0e:d4:85:28:fb:a9:67:88:ed:82:c5:45:d8:47:ab:ce:1a:f4: 7f:d0:32:c9:1d:36:54:32:0d:bf:d1:bf:27:90:db:8c:7f:74: 15:2f:41:9f:88:0e:60:54:ef:0b:48:d7:18:ba:06:87:29:62: b4:23:e2:c7:26:8d:79:64:3e:a0:b7:9f:0a:c4:ed:75:92:af: 0e:d0:5c:18:89:3b:80:d3:75:c9:a2:1c:bd:74:56:f4:73:7c: 04:f4:b6:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHtDGqS81+JTMv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk NWMxZTc5NWYtYTExYi00YTQ2LWFjMjYtOGVlYzYxMjYwZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiM0yVmcv4dr3s5nbNL8wDXEomAEdmO56Ufd BvJhJWU67DYZSZ2Unqmn5nxPR24fFf9PeJgNahKYJfj3FiUcPtBqDny4H3bVIQIq JhQGxQp6qrwXJGp8qwZ71uL4N5NgjjDzks8vg5doht9eM/rpxEIfcGJxXgCugnmH gHPUwuZqyUaz/vVAIEhLaciJd1XyrXVhT30BcxjG2Qmxi36VgfqFAqdUHvVf4tb+ iR4soXzAB1/sho5j1bsdPuXiee0tmroHGxK7xIAwbpeOnTf5dgWto8LkFMNT/Q3w 7UtoMam0LZAa17aFAE2d97JtRR5fg8CcOnUxj1LmbCUqnitxGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGx64TQH1F1BA4Rp8j7jL58AuptGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzk4YTcwMWItN2JjOS0z YmFkLWE5MzktYmUyMjMyM2U1MjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6OhLzkbXVGiH3suR1DXSinWaw9PNmRabXfRrZd7Ssmvt6NJZftNxu4 sP2EIEESJLYM4gn0JNajrCqWN66ab9lGmyZraWKWJ/93nW5eJ3N5uep5O7PgNO3u oXI89JHSgF8V+I5/Fb9WdXqDQldinYnq8NGd416xeLvHFqXBA4ygCPFfmjH1zlyt AGSoN5SWOYw60G7qJ6wQgh2zOJTdMHdtZw7UhSj7qWeI7YLFRdhHq84a9H/QMskd NlQyDb/RvyeQ24x/dBUvQZ+IDmBU7wtI1xi6BocpYrQj4scmjXlkPqC3nwrE7XWS rw7QXBiJO4DTdcmiHL10VvRzfAT0ttE= -----END CERTIFICATE-----Generated at Fri Apr 4 08:31:41 2025 by rpki-client