$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68b5c59d-ce17-3d38-90cd-799bf0f8d771.roa File: 68b5c59d-ce17-3d38-90cd-799bf0f8d771.roa (raw, json) Hash identifier: acrVaMwo/hA2rJ1CdT2wkOBrk7TELGBgAUzcsTMA8vc= Subject key identifier: 79:6E:F5:20:08:D9:02:68:78:98:98:B7:BD:45:77:21:01:5F:68:E8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584883E5C0B323BEC29A1F5F1B00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68b5c59d-ce17-3d38-90cd-799bf0f8d771.roa Signing time: Sun 12 Jan 2025 02:00:38 +0000 ROA not before: Sun 12 Jan 2025 02:00:38 +0000 ROA not after: Sat 12 Apr 2025 01:00:38 +0000 asID: 15169 IP address blocks: 192.178.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:e5:c0:b3:23:be:c2:9a:1f:5f:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jan 12 02:00:38 2025 GMT Not After : Apr 12 01:00:38 2025 GMT Subject: CN=21f872cb-2336-4730-b3d1-0a858d409b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7a:bd:bc:10:a4:b9:f4:80:00:96:5c:76:66: 29:dc:d9:fc:f7:e0:c6:53:78:b3:cd:8b:db:60:41: 27:5d:58:ee:00:71:f2:ef:b4:4d:82:2b:a3:f9:37: 7c:7d:8a:10:1e:50:be:d5:09:ec:78:43:46:a2:f0: 71:86:f3:a8:cb:2e:2a:cc:65:41:ab:f8:ae:20:c0: 8c:29:18:f4:9a:d8:7b:d1:4e:dd:df:69:d2:f0:84: b1:97:5c:c8:a8:51:be:00:7e:36:6f:c1:7e:84:1a: bd:79:7c:93:aa:c6:82:22:4b:83:d6:37:8a:8b:c3: 6a:21:88:08:45:39:0b:36:03:9c:9b:a7:48:4d:31: 29:38:d7:3e:fb:d2:46:bb:80:7b:d0:3d:a2:76:83: ef:cf:d3:12:c3:80:48:e4:a0:0c:17:d5:81:ee:2a: e8:85:40:34:91:88:5e:a6:29:cc:12:5a:4f:6c:df: b7:fe:b3:40:ed:f2:bb:c0:87:64:3c:f6:1f:1e:35: bc:13:68:53:ca:aa:b7:1a:54:77:93:0f:7d:80:34: 4a:ac:24:24:f8:ac:80:bb:cf:e4:ee:1b:d0:48:ea: 8d:af:96:ef:61:d6:22:8f:27:11:a8:3e:ad:af:1d: 36:5e:6d:c5:7f:9c:63:10:9b:71:e3:59:15:ba:8c: ac:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6E:F5:20:08:D9:02:68:78:98:98:B7:BD:45:77:21:01:5F:68:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68b5c59d-ce17-3d38-90cd-799bf0f8d771.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:98:74:6c:d0:2b:3c:d3:e6:e4:73:fe:e9:bb:28:61:6e:e1: a3:0b:96:97:fe:ed:e3:80:dc:17:b8:44:f1:0e:70:47:a5:82: ea:60:bb:ed:58:12:cf:63:50:0e:66:63:a2:9b:e6:6c:17:60: 7c:a3:f6:22:76:1d:7a:b7:c0:84:c4:ea:c9:76:e0:55:37:5b: ec:0a:dc:76:3e:52:a5:c0:eb:8c:d0:77:38:27:2f:29:b3:76: 6c:03:d4:d5:8c:f9:f0:8a:8e:ae:73:6c:15:09:c7:79:f8:6a: 8e:32:b9:86:f5:13:f8:74:f7:4a:78:27:67:80:34:c2:0b:9a: 1f:0d:10:8c:96:1a:e7:a8:f0:69:9a:0c:a0:1b:67:4c:b3:95: f1:f7:70:74:19:f2:12:e2:92:ce:7b:34:08:1b:62:62:64:8c: f6:08:a7:07:33:b0:75:6f:40:04:89:84:ef:4f:5e:3b:c7:7d: 8c:36:9e:40:4f:73:b3:35:16:d1:c4:b0:b3:71:79:38:87:19: ee:4b:b0:a3:09:55:5b:97:83:05:85:09:e2:f7:88:2a:32:37: 1e:1e:b2:01:0f:ba:9a:c6:20:af:21:50:d1:f1:3a:3d:8e:ee: f3:6e:53:19:16:f0:b2:97:44:dc:29:25:e2:ad:91:55:75:7a: 92:a5:3f:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5cCzI77Cmh9fGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk MjFmODcyY2ItMjMzNi00NzMwLWIzZDEtMGE4NThkNDA5YjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3q9vBCkufSAAJZcdmYp3Nn89+DGU3izzYvb YEEnXVjuAHHy77RNgiuj+Td8fYoQHlC+1QnseENGovBxhvOoyy4qzGVBq/iuIMCM KRj0mth70U7d32nS8ISxl1zIqFG+AH42b8F+hBq9eXyTqsaCIkuD1jeKi8NqIYgI RTkLNgOcm6dITTEpONc++9JGu4B70D2idoPvz9MSw4BI5KAMF9WB7irohUA0kYhe pinMElpPbN+3/rNA7fK7wIdkPPYfHjW8E2hTyqq3GlR3kw99gDRKrCQk+KyAu8/k 7hvQSOqNr5bvYdYijycRqD6trx02Xm3Ff5xjEJtx41kVuoys2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlu9SAI2QJoeJiYt71FdyEBX2joMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjhiNWM1OWQtY2UxNy0z ZDM4LTkwY2QtNzk5YmYwZjhkNzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeYdGzQKzzT5uRz/um7KGFu4aMLlpf+7eOA3Be4RPEOcEelgupgu+1Y Es9jUA5mY6Kb5mwXYHyj9iJ2HXq3wITE6sl24FU3W+wK3HY+UqXA64zQdzgnLymz dmwD1NWM+fCKjq5zbBUJx3n4ao4yuYb1E/h090p4J2eANMILmh8NEIyWGueo8Gma DKAbZ0yzlfH3cHQZ8hLiks57NAgbYmJkjPYIpwczsHVvQASJhO9PXjvHfYw2nkBP c7M1FtHEsLNxeTiHGe5LsKMJVVuXgwWFCeL3iCoyNx4esgEPuprGIK8hUNHxOj2O 7vNuUxkW8LKXRNwpJeKtkVV1epKlP1g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:25 2025 by rpki-client