$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd61e4e8-de8e-3222-a983-85c8cd4254aa.roa File: cd61e4e8-de8e-3222-a983-85c8cd4254aa.roa (raw, json) Hash identifier: +Bwy/Up2G5IaRPMeZD2UGMLp8O9R5SXYDfkm3JuIBBU= Subject key identifier: 74:21:C6:AA:D7:85:8D:DC:C7:CC:B4:F8:CB:D9:B6:E2:40:34:2B:29 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584883E5C25B949C11403A817F60 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd61e4e8-de8e-3222-a983-85c8cd4254aa.roa Signing time: Sun 12 Jan 2025 02:00:38 +0000 ROA not before: Sun 12 Jan 2025 02:00:38 +0000 ROA not after: Sat 12 Apr 2025 01:00:38 +0000 asID: 15169 IP address blocks: 192.178.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:e5:c2:5b:94:9c:11:40:3a:81:7f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jan 12 02:00:38 2025 GMT Not After : Apr 12 01:00:38 2025 GMT Subject: CN=0f97ae72-bbaa-4e19-b653-5da177bebaba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9a:ea:40:b1:e2:e4:07:47:8a:69:e6:73:25: 36:7e:3a:bc:e3:53:c0:5d:3a:df:cc:7d:31:3f:82: ec:22:50:94:31:ba:1f:30:6b:42:a7:16:5b:ea:d2: 86:75:97:bf:e2:e4:e1:62:02:d5:5f:0c:36:a6:6f: 0a:71:1b:d0:9f:9d:ae:54:bd:04:d6:ae:ad:2b:bd: 69:03:6c:32:1c:34:b5:d0:94:b4:a2:04:03:fc:45: 41:0f:fa:e1:a9:f4:b9:35:59:f6:32:2c:c7:85:e0: f0:80:bc:85:be:3e:10:ba:c5:0a:01:4e:b7:ce:19: 1d:c8:86:6f:88:55:f0:97:bc:12:07:dd:48:be:eb: 3e:36:d5:45:05:c6:54:bf:5d:30:5d:4b:ff:bf:8e: 89:87:4e:17:4a:98:c2:ac:1c:55:73:b1:30:0c:5b: 31:e5:42:92:e7:c6:4d:07:f6:1b:11:7b:9d:06:9f: 0c:80:8b:d6:a3:40:16:5b:0b:c6:b4:e9:03:0c:26: 6d:83:fa:0b:f1:6f:55:c1:aa:1b:05:5c:39:65:c6: 02:33:62:87:1d:6e:b9:c7:38:86:15:55:b4:dc:9f: 04:21:f5:f6:46:22:a7:98:9f:4a:66:1d:66:fa:b8: d7:05:93:23:83:08:0d:6f:12:fa:4f:7d:d4:c2:7c: c3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:21:C6:AA:D7:85:8D:DC:C7:CC:B4:F8:CB:D9:B6:E2:40:34:2B:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cd61e4e8-de8e-3222-a983-85c8cd4254aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:ed:79:4e:c6:1f:80:d6:92:1e:c8:be:46:33:32:a9:28:76: d2:6d:9f:b9:41:5d:00:21:8d:42:8a:0a:ac:2d:5f:36:2e:70: 71:a4:cb:69:bf:70:0d:64:f1:de:50:94:75:27:be:84:24:db: c3:6d:71:1c:9d:96:50:74:98:6e:f1:b5:55:ac:c8:1d:66:3d: 71:7c:89:c3:ef:2e:3b:89:35:a6:be:e9:73:ca:39:a4:1f:9f: 54:27:83:3a:ae:32:87:c8:d6:c8:3b:b4:80:ec:d5:a0:5a:48: ca:66:b6:95:19:5e:76:f5:42:ee:b2:e9:e8:65:d7:f5:00:91: 7a:82:ac:5a:49:68:2c:22:2c:29:80:68:f5:45:3b:87:b0:a8: aa:25:9d:f1:4a:2f:48:83:65:18:13:5b:92:75:20:a9:61:6c: 2c:9a:15:9a:1a:47:11:b0:07:3f:23:32:a9:c6:9c:63:78:14: 38:3d:90:29:dc:e3:c6:3d:84:a6:e6:7e:82:b2:2f:68:84:08: 14:62:0c:3c:88:83:0b:de:a0:9c:89:a2:01:28:bf:9d:ab:0d: 28:e7:f8:64:35:58:ed:81:6d:9f:d5:af:d9:26:9b:b8:13:da: 35:81:bc:1f:8f:d9:03:94:01:e9:24:83:d4:4e:47:1a:ba:df: 17:fd:50:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5cJblJwRQDqBf2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk MGY5N2FlNzItYmJhYS00ZTE5LWI2NTMtNWRhMTc3YmViYWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5rqQLHi5AdHimnmcyU2fjq841PAXTrfzH0x P4LsIlCUMbofMGtCpxZb6tKGdZe/4uThYgLVXww2pm8KcRvQn52uVL0E1q6tK71p A2wyHDS10JS0ogQD/EVBD/rhqfS5NVn2MizHheDwgLyFvj4QusUKAU63zhkdyIZv iFXwl7wSB91Ivus+NtVFBcZUv10wXUv/v46Jh04XSpjCrBxVc7EwDFsx5UKS58ZN B/YbEXudBp8MgIvWo0AWWwvGtOkDDCZtg/oL8W9VwaobBVw5ZcYCM2KHHW65xziG FVW03J8EIfX2RiKnmJ9KZh1m+rjXBZMjgwgNbxL6T33UwnzDaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQhxqrXhY3cx8y0+MvZtuJANCspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2Q2MWU0ZTgtZGU4ZS0z MjIyLWE5ODMtODVjOGNkNDI1NGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3teU7GH4DWkh7IvkYzMqkodtJtn7lBXQAhjUKKCqwtXzYucHGky2m/ cA1k8d5QlHUnvoQk28NtcRydllB0mG7xtVWsyB1mPXF8icPvLjuJNaa+6XPKOaQf n1QngzquMofI1sg7tIDs1aBaSMpmtpUZXnb1Qu6y6ehl1/UAkXqCrFpJaCwiLCmA aPVFO4ewqKolnfFKL0iDZRgTW5J1IKlhbCyaFZoaRxGwBz8jMqnGnGN4FDg9kCnc 48Y9hKbmfoKyL2iECBRiDDyIgwveoJyJogEov52rDSjn+GQ1WO2BbZ/Vr9kmm7gT 2jWBvB+P2QOUAekkg9RORxq63xf9UKk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:35 2025 by rpki-client