$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a3cbb92-a227-38ac-ab9b-531da381fcd9.roa File: 5a3cbb92-a227-38ac-ab9b-531da381fcd9.roa (raw, json) Hash identifier: 2S/spG2KjngvdDdDhG5RxJji5P8Xc4i5zJ/Vc+gvZCo= Subject key identifier: 98:08:E8:A5:2A:67:5F:58:FF:CE:07:13:7F:ED:57:37:42:B3:41:90 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584883E5BFCBA3C8DE39C0876000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a3cbb92-a227-38ac-ab9b-531da381fcd9.roa Signing time: Sun 12 Jan 2025 02:00:38 +0000 ROA not before: Sun 12 Jan 2025 02:00:38 +0000 ROA not after: Sat 12 Apr 2025 01:00:38 +0000 asID: 15169 IP address blocks: 192.178.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:e5:bf:cb:a3:c8:de:39:c0:87:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jan 12 02:00:38 2025 GMT Not After : Apr 12 01:00:38 2025 GMT Subject: CN=14db0b5a-6738-41ca-a20e-5442255fe03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:cd:da:ba:a1:7d:c7:b2:46:22:33:f6:04: 59:1b:75:9c:4e:42:1d:73:cd:d4:01:14:d8:81:a1: 02:ac:47:80:0f:0d:b0:3c:69:8c:96:7b:95:66:c3: 8d:2c:07:32:38:62:08:f3:95:23:5f:e1:bc:53:1a: b8:73:6c:6d:50:53:5a:02:d3:76:6a:c3:be:ee:15: 79:a7:0c:e4:19:b3:37:e9:de:9a:70:ea:4b:aa:6b: 15:b3:38:07:f4:79:c5:d3:13:30:bd:ef:c1:e6:97: 00:06:4f:cb:64:38:ee:93:74:d7:44:d2:4e:ad:77: 80:da:97:34:42:58:99:09:c7:3c:63:43:c9:bb:05: 71:87:b2:20:8c:6b:b2:d0:46:9b:fa:1c:4d:85:c1: ae:55:03:09:d6:c5:35:f5:c0:1b:95:06:e4:f1:b6: 35:de:a5:74:3d:d4:f6:7e:60:27:65:d0:76:23:b9: b7:0f:39:27:f9:59:0b:da:a2:a7:13:ec:5a:79:29: 33:c4:87:22:66:1b:70:4b:50:77:ad:fd:d6:f6:f0: ad:c1:52:54:90:08:31:3b:e2:f0:c1:9f:88:d6:e7: 46:4a:ee:46:8f:52:f7:64:b5:e3:9e:cf:99:dc:9d: f6:c8:d9:4e:21:a1:92:c9:4c:4e:cf:b6:f5:2e:08: 8b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:08:E8:A5:2A:67:5F:58:FF:CE:07:13:7F:ED:57:37:42:B3:41:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a3cbb92-a227-38ac-ab9b-531da381fcd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:bc:c4:f6:2b:83:11:ff:f1:98:d9:66:f9:00:31:7c:4c:c3: 21:c3:20:4c:dd:ff:75:fc:1d:ba:1b:55:fc:66:36:4a:c8:65: d5:32:31:d2:92:43:49:d3:25:9f:3c:1c:77:d3:50:a5:f8:01: 0c:dc:d6:c5:08:e6:f0:ee:f1:5f:13:40:2e:d3:34:22:71:cb: 76:66:17:b9:ae:c8:9d:29:0d:4a:c4:e0:18:0f:94:a6:c5:fe: 27:03:09:e0:8b:9e:e9:0c:37:89:ca:7d:12:a5:31:49:58:53: 9a:9e:63:0a:dd:fd:5f:7b:ac:3e:c1:6e:06:32:7d:b0:20:27: 5a:ae:09:be:6d:6e:09:69:26:f1:e2:9f:d0:a4:f9:29:99:48: a4:3a:b3:7b:62:2c:ba:3c:9d:81:78:01:e0:1f:6b:28:89:e4: 85:ce:e3:8e:00:da:28:31:84:be:80:05:35:4b:3f:e8:cd:99: 13:3f:46:9b:05:b8:58:d0:64:06:3d:da:0a:5f:a6:cd:a0:4d: c7:c8:ca:3f:0e:95:04:11:2e:86:db:4c:04:8f:80:ac:51:92: 47:71:0e:48:4c:ec:5c:2d:5d:ea:07:7a:4d:fe:8c:1c:63:11: 6f:05:17:af:8e:2a:46:7c:53:b8:c6:5c:24:28:b0:09:cd:12: 25:06:6d:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5b/Lo8jeOcCHYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk MTRkYjBiNWEtNjczOC00MWNhLWEyMGUtNTQ0MjI1NWZlMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKbN2rqhfceyRiIz9gRZG3WcTkIdc83UARTY gaECrEeADw2wPGmMlnuVZsONLAcyOGII85UjX+G8Uxq4c2xtUFNaAtN2asO+7hV5 pwzkGbM36d6acOpLqmsVszgH9HnF0xMwve/B5pcABk/LZDjuk3TXRNJOrXeA2pc0 QliZCcc8Y0PJuwVxh7IgjGuy0Eab+hxNhcGuVQMJ1sU19cAblQbk8bY13qV0PdT2 fmAnZdB2I7m3Dzkn+VkL2qKnE+xaeSkzxIciZhtwS1B3rf3W9vCtwVJUkAgxO+Lw wZ+I1udGSu5Gj1L3ZLXjns+Z3J32yNlOIaGSyUxOz7b1LgiL+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgI6KUqZ19Y/84HE3/tVzdCs0GQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWEzY2JiOTItYTIyNy0z OGFjLWFiOWItNTMxZGEzODFmY2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALW8xPYrgxH/8ZjZZvkAMXxMwyHDIEzd/3X8HbobVfxmNkrIZdUyMdKS Q0nTJZ88HHfTUKX4AQzc1sUI5vDu8V8TQC7TNCJxy3ZmF7muyJ0pDUrE4BgPlKbF /icDCeCLnukMN4nKfRKlMUlYU5qeYwrd/V97rD7BbgYyfbAgJ1quCb5tbglpJvHi n9Ck+SmZSKQ6s3tiLLo8nYF4AeAfayiJ5IXO444A2igxhL6ABTVLP+jNmRM/RpsF uFjQZAY92gpfps2gTcfIyj8OlQQRLobbTASPgKxRkkdxDkhM7FwtXeoHek3+jBxj EW8FF6+OKkZ8U7jGXCQosAnNEiUGbSc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:04 2025 by rpki-client