$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa File: 211bf909-5b40-31a9-9871-addf1a48e134.roa (raw, json) Hash identifier: 51sNYzeZsZBd7kVCo+pd9c9+2el8/caLJ/wZ99BcnX0= Subject key identifier: 62:DB:F4:B3:5C:5C:73:AA:4A:8D:80:65:95:99:CA:F8:AD:22:77:78 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584546282C230546DA9343E7ADD8 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa Signing time: Wed 20 Mar 2024 20:53:36 +0000 ROA not before: Wed 20 Mar 2024 20:53:36 +0000 ROA not after: Tue 18 Jun 2024 20:53:36 +0000 asID: 15169 IP address blocks: 192.178.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:46:28:2c:23:05:46:da:93:43:e7:ad:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 20 20:53:36 2024 GMT Not After : Jun 18 20:53:36 2024 GMT Subject: CN=bca6e421-4bf4-4bab-807c-0ab220ca8f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6e:e8:3b:74:ca:58:fa:d4:28:1a:3a:a4:54: 8b:c8:07:58:fd:0c:a7:76:28:53:75:8b:43:54:c6: 4c:87:ff:69:6c:0c:bc:71:12:3a:ee:fd:e2:37:44: 4c:e1:f3:7f:51:58:c0:35:04:80:7b:19:30:dc:9f: 74:11:df:a4:8c:4f:04:62:78:09:e4:28:2f:a8:0d: cc:90:5f:21:ca:ec:38:ae:38:f1:30:39:99:98:ad: 47:09:b2:e2:ef:b5:98:d9:c8:71:d8:e8:e9:87:f4: 76:5b:80:86:85:c2:18:dc:a2:00:bb:72:7b:b5:b8: 6e:22:7d:27:bd:22:d0:87:2e:6d:db:12:f9:5c:5d: d0:47:90:8e:7b:6c:7a:63:19:b9:e3:59:62:c4:0d: 3c:fb:92:6d:5c:2a:54:14:76:c7:cf:0b:64:98:ab: d4:1a:49:2f:80:7d:cd:19:bd:61:1a:f8:23:0b:92: b9:68:26:e9:db:42:4c:ec:57:83:bf:38:05:fe:59: 93:cc:5d:dd:47:43:f7:e4:02:ed:8c:b0:49:4e:b7: 7f:42:2f:8f:74:2a:ef:9a:4f:f0:a5:14:a4:33:41: 33:f7:c2:a3:f3:5d:6c:e2:6c:b8:14:24:c3:ae:b7: cf:74:c1:a4:fd:cc:ff:8f:8e:88:42:75:04:95:9b: 6e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:DB:F4:B3:5C:5C:73:AA:4A:8D:80:65:95:99:CA:F8:AD:22:77:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:61:73:fc:71:17:9b:cf:b3:c8:a0:39:17:f6:db:6a:2a:9e: 0b:8e:b6:48:55:73:64:43:06:a0:eb:22:c1:fa:7f:7b:34:50: 4d:80:3b:3a:b9:24:71:01:93:eb:92:f8:be:96:f0:ed:52:89: 69:be:cb:df:09:0d:c6:5d:22:56:ce:fb:c9:cb:5c:2e:a8:f7: f5:98:6e:ce:a4:32:17:d2:d7:ed:dc:b1:e5:38:28:bd:19:85: f1:b8:d2:b8:b1:77:c9:cb:09:af:90:7c:ed:67:2f:3d:dd:01: 54:c7:b3:2c:d8:3d:2e:9f:96:6e:0f:7f:f0:52:fc:9f:4f:87: be:a5:b9:61:20:61:bc:b7:57:c2:76:f4:8f:f0:c1:89:0e:72: 87:55:5f:3e:03:62:2b:9a:f4:1f:be:e9:d4:b4:9a:65:d1:80: de:44:7f:ce:cb:36:88:e8:5e:ec:e2:bd:36:96:ab:a9:6d:8c: 3f:0d:87:08:ad:1b:ed:c1:4f:ef:42:82:ac:38:7e:0d:87:b6: 81:9a:81:db:f5:cb:0b:f5:17:81:4b:9d:00:95:02:57:ff:71: ea:00:a9:aa:69:18:76:09:19:a4:21:68:92:c5:1b:2b:67:0f: 44:af:87:fe:a3:41:2f:d0:b2:57:35:c4:7b:2d:d9:ae:b6:56: 72:79:2b:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGKCwjBUbak0PnrdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MDMyMDIwNTMzNloXDTI0MDYxODIwNTMzNlowLzEtMCsGA1UEAxMk YmNhNmU0MjEtNGJmNC00YmFiLTgwN2MtMGFiMjIwY2E4ZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm7oO3TKWPrUKBo6pFSLyAdY/QyndihTdYtD VMZMh/9pbAy8cRI67v3iN0RM4fN/UVjANQSAexkw3J90Ed+kjE8EYngJ5CgvqA3M kF8hyuw4rjjxMDmZmK1HCbLi77WY2chx2Ojph/R2W4CGhcIY3KIAu3J7tbhuIn0n vSLQhy5t2xL5XF3QR5COe2x6Yxm541lixA08+5JtXCpUFHbHzwtkmKvUGkkvgH3N Gb1hGvgjC5K5aCbp20JM7FeDvzgF/lmTzF3dR0P35ALtjLBJTrd/Qi+PdCrvmk/w pRSkM0Ez98Kj811s4my4FCTDrrfPdMGk/cz/j46IQnUElZtuUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLb9LNcXHOqSo2AZZWZyvitInd4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjExYmY5MDktNWI0MC0z MWE5LTk4NzEtYWRkZjFhNDhlMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLIqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9hc/xxF5vPs8igORf222oqnguOtkhVc2RDBqDrIsH6f3s0UE2AOzq5 JHEBk+uS+L6W8O1SiWm+y98JDcZdIlbO+8nLXC6o9/WYbs6kMhfS1+3cseU4KL0Z hfG40rixd8nLCa+QfO1nLz3dAVTHsyzYPS6flm4Pf/BS/J9Ph76luWEgYby3V8J2 9I/wwYkOcodVXz4DYiua9B++6dS0mmXRgN5Ef87LNojoXuzivTaWq6ltjD8Nhwit G+3BT+9Cgqw4fg2HtoGagdv1ywv1F4FLnQCVAlf/ceoAqappGHYJGaQhaJLFGytn D0Svh/6jQS/Qslc1xHst2a62VnJ5Kxg= -----END CERTIFICATE-----Generated at Fri May 17 22:03:23 2024 by rpki-client on console-ams.rpki-client.org