$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d4eb15-889c-3c2c-a1e4-482420b45122.roa File: 32d4eb15-889c-3c2c-a1e4-482420b45122.roa (raw, json) Hash identifier: /pzekVsS79TCPCchiyhIzbdexy5hHceTUgVVylnhlQw= Subject key identifier: 31:3E:F5:3D:23:BF:49:BD:D7:D5:A5:35:3F:27:C8:C8:86:67:C5:78 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A42758FA8ADE369634AB95FF0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d4eb15-889c-3c2c-a1e4-482420b45122.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 15169 IP address blocks: 192.178.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:8f:a8:ad:e3:69:63:4a:b9:5f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=8d3421ad-ba14-4b99-85dd-3e0c9d4b7793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ce:a4:4f:8f:d1:a7:2b:40:ba:87:f6:69:fd: ce:fe:f5:6f:34:0f:a6:89:4b:91:c3:fd:9a:ad:31: 54:23:01:41:f8:54:0b:93:67:a2:a7:cb:65:8a:30: c3:fb:98:f9:74:b0:21:05:12:4e:75:8e:ac:68:af: 29:9b:5b:2c:84:b5:33:db:6b:0a:f8:38:72:dd:c2: 84:1b:03:81:e0:90:8e:d7:74:e2:8b:2d:14:db:04: 80:c5:76:2e:d6:25:44:dd:c2:f2:70:0d:b2:9b:ce: ce:ec:dd:d9:73:9f:33:45:a0:fc:92:5e:07:4d:04: cc:c5:7b:47:2d:cf:9e:a2:ca:eb:be:61:7b:cf:81: 5b:9d:b3:25:dd:98:bc:5f:0d:08:ff:b6:77:51:3e: 59:ac:2f:16:f9:8b:98:24:fe:20:a3:6d:f9:31:63: c8:b5:76:2d:99:2b:17:b4:6f:f1:e8:64:09:77:8a: 22:cf:62:02:af:5d:fb:4d:9b:2d:5f:7e:8b:77:3f: 58:6d:97:8e:5e:7e:5f:75:9c:ab:62:a0:32:4e:b0: e5:f0:0d:c1:76:db:f5:6c:50:bd:71:9f:1b:e0:a0: 7d:26:3f:86:b2:bc:66:1a:6a:4f:b8:ce:ad:d4:50: c8:17:cb:43:83:cb:81:4d:31:d3:80:ba:eb:9d:09: 50:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3E:F5:3D:23:BF:49:BD:D7:D5:A5:35:3F:27:C8:C8:86:67:C5:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/32d4eb15-889c-3c2c-a1e4-482420b45122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:a7:f5:38:02:d0:3e:88:a2:c4:df:a6:71:61:7b:a8:ee:34: 83:69:79:35:55:aa:72:a8:29:48:13:95:d3:c3:1d:67:c0:50: 3d:d0:94:5f:48:b9:68:4c:97:79:96:7a:13:9e:bf:c9:52:79: 62:18:66:14:c8:58:90:63:2b:f0:91:28:05:13:09:e8:0a:5f: 4b:70:20:b6:6f:73:55:79:65:c1:c5:7e:5c:02:66:80:70:2d: 88:f7:cf:c0:a7:76:0f:52:46:68:7b:a6:42:3a:03:48:e5:c8: 06:56:cf:bd:16:ab:7d:5b:37:a8:4a:d3:b7:0b:e9:50:bf:00: 85:39:e3:10:34:93:98:b6:7b:2b:f5:06:2e:08:72:25:55:4c: 5c:40:bf:ce:4a:ce:16:52:91:d1:2a:a6:5d:43:b0:7f:98:e7: a0:19:18:89:d3:9c:b8:b2:62:d5:3a:3d:8b:68:73:9d:e4:da: 8f:eb:0e:c2:b3:41:26:2e:cc:1f:77:56:ad:92:50:0f:f6:c7: 13:68:98:fd:1d:a4:26:5b:86:28:57:90:98:80:48:be:27:32: fc:e6:db:2d:b5:14:99:66:d3:40:b4:75:b6:5d:28:78:19:30: 2e:42:db:b4:dc:93:07:2a:78:db:15:e3:85:1d:36:b7:6c:4f: d8:bc:d9:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdY+oreNpY0q5X/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk OGQzNDIxYWQtYmExNC00Yjk5LTg1ZGQtM2UwYzlkNGI3NzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg86kT4/RpytAuof2af3O/vVvNA+miUuRw/2a rTFUIwFB+FQLk2eip8tlijDD+5j5dLAhBRJOdY6saK8pm1sshLUz22sK+Dhy3cKE GwOB4JCO13Tiiy0U2wSAxXYu1iVE3cLycA2ym87O7N3Zc58zRaD8kl4HTQTMxXtH Lc+eosrrvmF7z4FbnbMl3Zi8Xw0I/7Z3UT5ZrC8W+YuYJP4go235MWPItXYtmSsX tG/x6GQJd4oiz2ICr137TZstX36Ldz9YbZeOXn5fdZyrYqAyTrDl8A3Bdtv1bFC9 cZ8b4KB9Jj+GsrxmGmpPuM6t1FDIF8tDg8uBTTHTgLrrnQlQNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDE+9T0jv0m919WlNT8nyMiGZ8V4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzJkNGViMTUtODg5Yy0z YzJjLWExZTQtNDgyNDIwYjQ1MTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFun9TgC0D6IosTfpnFhe6juNINpeTVVqnKoKUgTldPDHWfAUD3QlF9I uWhMl3mWehOev8lSeWIYZhTIWJBjK/CRKAUTCegKX0twILZvc1V5ZcHFflwCZoBw LYj3z8Cndg9SRmh7pkI6A0jlyAZWz70Wq31bN6hK07cL6VC/AIU54xA0k5i2eyv1 Bi4IciVVTFxAv85KzhZSkdEqpl1DsH+Y56AZGInTnLiyYtU6PYtoc53k2o/rDsKz QSYuzB93Vq2SUA/2xxNomP0dpCZbhihXkJiASL4nMvzm2y21FJlm00C0dbZdKHgZ MC5C27TckwcqeNsV44UdNrdsT9i82aA= -----END CERTIFICATE-----Generated at Mon Jun 30 04:20:03 2025 by rpki-client