$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfac38b0-5803-382f-94a4-bd9f8ed915a6.roa File: dfac38b0-5803-382f-94a4-bd9f8ed915a6.roa (raw, json) Hash identifier: BJjKHqfZtUPIjmHFxITMYsWf9pzLyf1OtXEFjC5LciQ= Subject key identifier: C5:7C:8A:11:90:69:40:B1:E7:21:03:19:B8:9C:72:67:B4:40:03:66 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849631ED176D5D36807BCB1E400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfac38b0-5803-382f-94a4-bd9f8ed915a6.roa Signing time: Wed 02 Apr 2025 01:00:46 +0000 ROA not before: Wed 02 Apr 2025 01:00:46 +0000 ROA not after: Tue 01 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 192.178.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:63:1e:d1:76:d5:d3:68:07:bc:b1:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 2 01:00:46 2025 GMT Not After : Jul 1 01:00:46 2025 GMT Subject: CN=9b1c0597-50f0-4e81-821b-586711e67b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:56:95:82:ab:ca:82:55:03:0b:5e:5a:a3: 5e:2c:d6:46:48:45:ce:5d:c5:1a:79:74:bd:1b:a7: 7f:33:1d:e9:c3:3a:cc:3f:0e:44:38:66:fe:7f:ed: 38:e8:ab:75:ce:b7:98:09:d4:50:85:3a:ba:65:bb: 0f:2b:aa:0e:86:94:48:f6:6b:55:7f:ff:9b:7e:26: 67:76:4a:35:3f:86:24:f1:65:f0:c0:50:8d:96:6c: 24:ab:d0:f9:bf:fe:5b:ad:8d:70:3c:e5:29:a0:a7: f0:17:07:32:84:92:6b:c7:68:2a:22:df:fd:2c:86: 19:5f:8c:60:3d:8d:0c:3e:d4:8f:28:19:d9:76:7e: b7:60:07:18:8e:2e:7a:e5:cd:32:96:61:da:be:27: 5e:0e:7a:db:ab:c0:ed:d0:cf:3e:d5:c8:b5:6f:f7: 87:1e:96:67:da:fd:41:6d:b0:2f:f3:41:03:72:36: b4:13:62:8a:57:8e:38:ca:d6:cc:69:61:d0:0f:9c: 92:82:5b:e2:22:73:09:06:2c:b3:2e:4c:2a:6b:fc: 4a:ac:1b:eb:e1:94:e4:27:89:c8:f3:bd:30:27:33: ab:e5:71:f5:8b:5a:0d:f3:74:60:7d:c3:04:13:fc: cf:a2:3a:a8:2a:3d:42:e1:6a:ca:26:3b:8b:e3:94: 2f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7C:8A:11:90:69:40:B1:E7:21:03:19:B8:9C:72:67:B4:40:03:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfac38b0-5803-382f-94a4-bd9f8ed915a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:c8:33:e1:d9:96:58:51:2b:6a:80:4c:80:ef:ff:7a:6c:43: b4:f8:d9:e7:4d:10:b8:22:19:b7:8a:11:05:44:c4:c5:89:85: 5b:5c:a8:df:d6:7c:f6:69:ea:90:cc:42:e8:35:ab:83:6d:d8: 35:8e:5e:37:74:de:dd:18:71:8c:86:35:0b:11:45:d5:46:a3: 6b:f3:44:1c:5e:d2:00:12:d8:3b:6a:0a:ce:7f:06:1c:10:f4: 5f:20:ac:01:23:b9:da:90:9b:d0:ee:85:63:fb:66:f1:51:27: 3e:32:15:98:d3:85:c8:46:ec:71:b7:1e:96:06:3e:97:4e:70: ac:f5:d8:ce:c9:6f:3e:7f:bf:87:69:9f:17:2a:a8:05:e5:d4: 45:6e:48:34:e3:66:76:01:d3:d0:31:58:3e:32:a0:07:bb:e9: bd:13:08:87:b8:85:cb:71:f8:86:4e:09:ce:f4:76:e8:2e:46: 1a:90:20:7e:63:38:2a:d0:34:de:a5:67:a5:b6:30:24:da:32: 29:ac:71:c9:a5:b8:8a:7c:54:df:0e:f5:77:4c:85:1f:54:df: 7e:7c:8a:bd:a7:99:85:58:de:25:14:ad:66:13:df:42:22:ed: 4e:46:21:0a:5c:13:3d:4e:da:03:e5:86:22:a7:a0:3c:1b:b1: d5:61:74:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHtF21dNoB7yx5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk OWIxYzA1OTctNTBmMC00ZTgxLTgyMWItNTg2NzExZTY3YjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueBWlYKryoJVAwteWqNeLNZGSEXOXcUaeXS9 G6d/Mx3pwzrMPw5EOGb+f+046Kt1zreYCdRQhTq6ZbsPK6oOhpRI9mtVf/+bfiZn dko1P4Yk8WXwwFCNlmwkq9D5v/5brY1wPOUpoKfwFwcyhJJrx2gqIt/9LIYZX4xg PY0MPtSPKBnZdn63YAcYji565c0ylmHavideDnrbq8Dt0M8+1ci1b/eHHpZn2v1B bbAv80EDcja0E2KKV444ytbMaWHQD5ySglviInMJBiyzLkwqa/xKrBvr4ZTkJ4nI 870wJzOr5XH1i1oN83RgfcMEE/zPojqoKj1C4WrKJjuL45QvtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMV8ihGQaUCx5yEDGbiccme0QANmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGZhYzM4YjAtNTgwMy0z ODJmLTk0YTQtYmQ5ZjhlZDkxNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfIM+HZllhRK2qATIDv/3psQ7T42edNELgiGbeKEQVExMWJhVtcqN/W fPZp6pDMQug1q4Nt2DWOXjd03t0YcYyGNQsRRdVGo2vzRBxe0gAS2DtqCs5/BhwQ 9F8grAEjudqQm9DuhWP7ZvFRJz4yFZjThchG7HG3HpYGPpdOcKz12M7Jbz5/v4dp nxcqqAXl1EVuSDTjZnYB09AxWD4yoAe76b0TCIe4hctx+IZOCc70duguRhqQIH5j OCrQNN6lZ6W2MCTaMimsccmluIp8VN8O9XdMhR9U3358ir2nmYVY3iUUrWYT30Ii 7U5GIQpcEz1O2gPlhiKnoDwbsdVhdOQ= -----END CERTIFICATE-----Generated at Fri Apr 4 08:32:51 2025 by rpki-client