$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5f9aede-1802-34d1-993a-7a814d3127a4.roa File: b5f9aede-1802-34d1-993a-7a814d3127a4.roa (raw, json) Hash identifier: RcJd2cn8DtkZP36u65lM/mxq0qGjb9vEBe8Ml9VPM6Y= Subject key identifier: B3:58:B8:B3:4A:F8:9C:67:BB:24:B2:3A:90:11:94:5D:85:33:FB:89 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A4275905148421D7FE02147E0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5f9aede-1802-34d1-993a-7a814d3127a4.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 15169 IP address blocks: 192.178.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:90:51:48:42:1d:7f:e0:21:47:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=27f6c00d-b3d8-4e1b-a3db-ffa136dcac9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4f:af:8b:df:13:7f:44:e9:48:70:3b:4b:13: 81:06:dd:ad:fa:cd:2d:6f:c7:79:76:57:f5:fe:1b: 7b:64:40:1a:e8:92:e3:17:2f:3e:8a:2f:1f:32:f6: 00:a6:02:2d:d6:eb:98:95:c8:a8:8d:00:14:2e:3f: 80:71:a7:ed:68:51:8b:93:df:6c:f4:cc:f4:d2:1d: 05:42:74:4e:49:60:a7:ed:7b:74:27:80:ef:49:34: 6b:47:5a:94:29:fb:70:65:11:a8:55:0b:9b:18:64: 3c:6e:ea:96:b0:69:5e:c2:cd:69:8e:26:af:eb:fd: c9:9b:fc:3b:e8:f2:63:ad:61:29:7d:60:bf:81:e4: 10:df:6b:19:c4:cd:9b:67:fb:47:9a:76:50:ba:29: 6e:3d:38:53:9b:ed:dd:7e:0a:f8:67:59:38:b0:1f: ae:24:de:da:83:d4:c8:9c:f7:08:2b:22:cb:f8:c3: f1:eb:17:f5:af:b5:ae:fa:96:34:bb:2d:0f:f7:76: 9b:56:80:02:b4:c7:5e:2d:56:80:51:2e:0a:d0:3e: b6:80:fa:e7:74:0e:e8:b4:7b:6e:0f:92:19:56:e9: 26:83:5b:bd:c9:b1:45:9b:db:04:2e:cf:f0:ae:ba: 26:bf:71:8f:8d:c3:34:24:88:ee:cb:11:2a:33:3c: 95:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:58:B8:B3:4A:F8:9C:67:BB:24:B2:3A:90:11:94:5D:85:33:FB:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5f9aede-1802-34d1-993a-7a814d3127a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:20:db:a0:f1:7b:53:2b:e8:81:42:f7:6c:a0:50:c2:34:9c: c2:bb:43:eb:28:dc:97:64:08:3c:f2:0d:97:d6:2a:48:ea:29: 7f:4d:58:91:bd:74:60:1b:eb:3d:ab:0b:bb:1e:74:17:36:d7: 5a:38:8a:57:4f:2d:56:09:d3:d8:8a:d3:e1:ce:b3:10:b8:89: 18:f3:6f:51:f5:a0:83:29:f2:b4:36:46:2d:80:bf:41:c8:c6: 70:74:32:8d:1b:68:f4:d1:66:76:a4:a7:3c:1e:75:2d:78:33: a6:6c:c6:81:d9:81:38:c2:0e:23:f7:76:c8:6c:c6:79:d4:3c: a8:68:c1:93:48:79:28:eb:64:b0:cc:dd:5a:13:bc:0c:ff:f2: bc:68:7d:6d:58:72:ff:3e:51:0d:3b:6b:c6:52:87:4a:e2:1a: 35:9e:7a:39:38:f3:db:2a:43:17:16:bb:77:74:2f:1c:a0:47: 25:6a:67:8a:e7:aa:e7:53:ad:63:23:f0:8e:23:c8:29:5f:dc: 06:3b:41:79:9e:8d:79:4e:38:4d:36:09:20:ce:6f:3f:d1:14: 5a:3b:93:1e:f2:b7:c6:c4:07:e6:05:e7:0d:08:cd:f2:94:92: 90:39:a0:b5:5d:68:9a:32:96:33:50:04:e3:f4:9d:7b:d7:8e: 61:dd:cb:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdZBRSEIdf+AhR+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk MjdmNmMwMGQtYjNkOC00ZTFiLWEzZGItZmZhMTM2ZGNhYzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0+vi98Tf0TpSHA7SxOBBt2t+s0tb8d5dlf1 /ht7ZEAa6JLjFy8+ii8fMvYApgIt1uuYlciojQAULj+AcaftaFGLk99s9Mz00h0F QnROSWCn7Xt0J4DvSTRrR1qUKftwZRGoVQubGGQ8buqWsGlews1pjiav6/3Jm/w7 6PJjrWEpfWC/geQQ32sZxM2bZ/tHmnZQuiluPThTm+3dfgr4Z1k4sB+uJN7ag9TI nPcIKyLL+MPx6xf1r7Wu+pY0uy0P93abVoACtMdeLVaAUS4K0D62gPrndA7otHtu D5IZVukmg1u9ybFFm9sELs/wrromv3GPjcM0JIjuyxEqMzyVswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNYuLNK+JxnuySyOpARlF2FM/uJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjVmOWFlZGUtMTgwMi0z NGQxLTk5M2EtN2E4MTRkMzEyN2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4g26Dxe1Mr6IFC92ygUMI0nMK7Q+so3JdkCDzyDZfWKkjqKX9NWJG9 dGAb6z2rC7sedBc211o4ildPLVYJ09iK0+HOsxC4iRjzb1H1oIMp8rQ2Ri2Av0HI xnB0Mo0baPTRZnakpzwedS14M6ZsxoHZgTjCDiP3dshsxnnUPKhowZNIeSjrZLDM 3VoTvAz/8rxofW1Ycv8+UQ07a8ZSh0riGjWeejk489sqQxcWu3d0LxygRyVqZ4rn qudTrWMj8I4jyClf3AY7QXmejXlOOE02CSDObz/RFFo7kx7yt8bEB+YF5w0IzfKU kpA5oLVdaJoyljNQBOP0nXvXjmHdy4g= -----END CERTIFICATE-----Generated at Mon Jun 30 10:38:55 2025 by rpki-client