$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/172c185b-2433-3ace-8416-a4f6da3639bf.roa File: 172c185b-2433-3ace-8416-a4f6da3639bf.roa (raw, json) Hash identifier: 4swr4qoSzJCQs6rYu8g6h14ytSeQeMFQI3DVNL68nto= Subject key identifier: CB:40:67:0E:81:6C:17:ED:A0:C8:E4:78:D7:C0:BB:CE:E8:8E:CA:F4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584883E5C1D753D971AC48FDE300 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/172c185b-2433-3ace-8416-a4f6da3639bf.roa Signing time: Sun 12 Jan 2025 02:00:38 +0000 ROA not before: Sun 12 Jan 2025 02:00:38 +0000 ROA not after: Sat 12 Apr 2025 01:00:38 +0000 asID: 15169 IP address blocks: 192.178.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:e5:c1:d7:53:d9:71:ac:48:fd:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jan 12 02:00:38 2025 GMT Not After : Apr 12 01:00:38 2025 GMT Subject: CN=72b1a91c-794f-4135-905d-eb08e83c96f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:53:3d:d3:74:e7:45:fe:41:55:7b:6c:61:25: 5d:ea:de:41:5d:cb:2e:6d:67:ba:3e:5a:33:e0:1b: c3:b9:2e:25:f6:e3:d2:0c:80:2e:37:62:1f:26:f4: ca:ce:7e:e6:24:dd:d3:a1:d7:e2:4d:e9:af:f8:46: 8d:3d:71:b5:44:cf:b4:c0:10:33:48:59:2c:81:ab: af:41:0d:ec:8f:8a:6b:19:da:c0:79:7c:cc:51:89: 24:92:bf:e6:bc:6f:c7:4f:f7:fc:9c:78:73:d5:96: e6:a7:68:84:ba:cd:db:8c:e9:fb:da:85:af:ef:7e: 62:6e:b7:6f:c3:85:3f:35:af:7f:ed:8b:7e:d8:6c: d4:c7:48:6f:8e:c8:63:cb:7d:00:79:0b:e9:4a:88: b6:82:d6:3d:47:c0:47:6f:18:0a:66:0f:cf:7d:66: 59:29:fa:ce:ce:7e:ba:52:0f:ee:d0:64:ed:c0:5d: 9a:b7:5c:b9:4e:5f:7d:52:c1:4b:de:40:af:47:84: 20:c0:f3:93:63:fa:dd:a2:ec:74:ff:71:18:1e:14: 77:bb:d6:19:6f:43:4c:6d:d0:0d:43:7b:d1:30:1d: 40:c3:b0:05:b1:78:35:4e:eb:79:84:f7:81:59:f2: 75:25:19:52:0d:0f:0f:d8:30:b4:ae:c1:4f:e8:58: 94:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:40:67:0E:81:6C:17:ED:A0:C8:E4:78:D7:C0:BB:CE:E8:8E:CA:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/172c185b-2433-3ace-8416-a4f6da3639bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:b4:63:be:b4:88:1f:4c:2c:d3:90:a0:4d:83:57:3a:c9:61: 8e:0f:a7:7b:7e:6c:ef:81:fc:8d:7c:8e:2d:c8:5d:b5:65:32: 83:6e:54:a4:3f:37:32:fe:41:dd:aa:39:f1:d3:b5:2f:c6:d6: c3:24:51:70:de:73:ca:2c:69:ed:2f:af:e5:bd:67:b0:b2:fd: 0a:3c:d0:e7:0e:f4:72:7c:2c:62:f8:bc:8f:2b:3e:7f:17:1c: b6:dd:7d:43:6f:a4:1c:f1:4f:66:79:b3:82:39:87:27:c3:11: d6:c2:7f:b5:eb:e8:78:92:c9:41:8c:1e:12:a4:e4:1e:de:e8: 95:7f:c9:df:50:7d:01:0b:7f:f0:1c:fd:10:a0:96:ad:e5:ae: 9b:29:4e:2f:4b:fd:c5:70:7a:6a:8f:f7:04:fa:d2:4e:a5:07: 25:76:00:82:84:0c:3c:e4:d4:d3:51:8e:74:cb:a1:c6:90:3d: 4d:b9:ce:da:29:61:71:7f:3d:46:3d:12:2d:49:ed:55:6b:c4: 4b:70:f5:21:d3:19:2e:a0:fc:1d:af:c4:c2:21:12:7e:c3:84: b7:b5:b4:f7:cb:d2:49:4a:a0:5c:d9:f6:6a:58:b1:bc:a4:2b: 04:ce:49:cb:64:13:04:5e:7f:95:3f:80:b2:80:4b:35:fd:84: 4f:f9:28:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5cHXU9lxrEj94wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk NzJiMWE5MWMtNzk0Zi00MTM1LTkwNWQtZWIwOGU4M2M5NmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1M903TnRf5BVXtsYSVd6t5BXcsubWe6Ploz 4BvDuS4l9uPSDIAuN2IfJvTKzn7mJN3TodfiTemv+EaNPXG1RM+0wBAzSFksgauv QQ3sj4prGdrAeXzMUYkkkr/mvG/HT/f8nHhz1Zbmp2iEus3bjOn72oWv735ibrdv w4U/Na9/7Yt+2GzUx0hvjshjy30AeQvpSoi2gtY9R8BHbxgKZg/PfWZZKfrOzn66 Ug/u0GTtwF2at1y5Tl99UsFL3kCvR4QgwPOTY/rdoux0/3EYHhR3u9YZb0NMbdAN Q3vRMB1Aw7AFsXg1Tut5hPeBWfJ1JRlSDQ8P2DC0rsFP6FiUJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtAZw6BbBftoMjkeNfAu87ojsr0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTcyYzE4NWItMjQzMy0z YWNlLTg0MTYtYTRmNmRhMzYzOWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGi0Y760iB9MLNOQoE2DVzrJYY4Pp3t+bO+B/I18ji3IXbVlMoNuVKQ/ NzL+Qd2qOfHTtS/G1sMkUXDec8osae0vr+W9Z7Cy/Qo80OcO9HJ8LGL4vI8rPn8X HLbdfUNvpBzxT2Z5s4I5hyfDEdbCf7Xr6HiSyUGMHhKk5B7e6JV/yd9QfQELf/Ac /RCglq3lrpspTi9L/cVwemqP9wT60k6lByV2AIKEDDzk1NNRjnTLocaQPU25ztop YXF/PUY9Ei1J7VVrxEtw9SHTGS6g/B2vxMIhEn7DhLe1tPfL0klKoFzZ9mpYsbyk KwTOSctkEwRef5U/gLKASzX9hE/5KGI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:56 2025 by rpki-client