$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa File: 70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa (raw, json) Hash identifier: bvW3dofe1LXsRXCatO6TZDBnM8O8o7gFfIXYr+8NUAw= Subject key identifier: 7E:1B:40:80:BB:E5:7C:CC:AF:C0:16:2C:97:D1:7F:03:13:45:FE:62 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858489A3B41AB39A35538112EC080 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa Signing time: Mon 20 Jan 2025 02:00:40 +0000 ROA not before: Mon 20 Jan 2025 02:00:40 +0000 ROA not after: Sun 20 Apr 2025 01:00:40 +0000 asID: 15169 IP address blocks: 192.178.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9a:3b:41:ab:39:a3:55:38:11:2e:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jan 20 02:00:40 2025 GMT Not After : Apr 20 01:00:40 2025 GMT Subject: CN=d9a70d0a-eb2b-41ee-a158-5402260b1622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:42:99:66:21:7d:2b:6e:ae:1d:3a:66:91:37: f9:59:08:f4:fe:b5:22:d6:3b:44:5e:99:af:ad:dd: 17:70:b6:2a:e3:2d:d6:54:4e:e1:11:85:c4:40:0c: f3:9e:83:c9:f1:a1:03:ef:e2:bf:4c:aa:6d:97:b7: fe:03:25:83:84:36:68:d2:41:d1:16:af:3b:76:16: 75:08:87:cb:77:5f:a7:53:2b:31:09:c1:36:7c:00: 3b:8d:6d:d4:bb:c9:a3:b8:57:74:13:8c:b7:fd:7a: e2:bd:b5:c5:0c:b7:98:b1:f9:df:dd:d8:10:9b:0b: d6:d3:5b:78:cd:a6:5d:dd:1b:4a:3e:eb:df:16:74: c0:4e:aa:95:12:23:93:cb:ba:3f:99:8c:78:24:00: 4e:78:02:0e:32:b7:08:37:2c:97:04:0c:5c:38:0b: d1:2b:fb:43:cc:81:09:c1:aa:6e:86:67:4b:7b:7b: 6b:1f:65:0c:c6:09:f2:c5:d7:2c:17:58:6c:82:55: a4:9e:89:73:5f:f8:f1:66:ae:5e:a9:30:00:f2:cf: b4:e7:1b:58:a7:51:04:17:b0:df:8e:52:05:4c:41: e0:d9:6b:20:33:c8:fd:5e:f9:07:d0:9b:e4:a6:ac: 1d:b9:8c:b8:73:4d:33:a9:4f:99:0e:a9:fa:88:f9: b4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1B:40:80:BB:E5:7C:CC:AF:C0:16:2C:97:D1:7F:03:13:45:FE:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:93:21:6b:91:ab:9e:2c:c1:0d:88:c8:c3:f0:dd:3a:b4:62: 15:a8:ab:1c:f2:7f:ab:9d:1f:d9:6e:a7:1a:46:7a:e1:98:b1: fd:8a:c4:fc:4c:0d:49:94:35:70:42:f4:a1:cb:1e:c8:65:44: ac:cd:25:25:03:e1:3f:58:57:7c:44:c4:a8:3b:88:62:cc:13: 8a:ce:c2:e4:44:00:82:f3:c5:8c:a1:d0:7d:24:27:a5:da:56: 46:98:7b:a2:0f:a5:7d:a8:b8:5f:24:71:e2:d8:44:21:cc:cd: ec:a9:b8:1e:5e:44:c8:0a:e7:ca:22:e3:50:e9:4b:1c:99:46: be:fa:aa:0b:79:f3:fc:74:5e:07:8f:25:c0:dd:54:08:d5:c4: 2a:a1:02:48:a5:35:4b:96:55:92:04:98:0b:58:4e:33:e8:dd: 3c:b7:05:64:88:8b:38:2a:a0:cb:b1:82:ee:9a:16:19:cc:ea: 3a:56:a1:0c:3c:e5:33:9f:70:f4:60:28:e1:b6:1a:24:cc:5d: 3c:25:f0:b5:c1:93:ba:f6:78:9a:2d:26:07:f0:d0:e4:be:88: 96:e1:11:c4:6e:4b:df:b5:04:82:ae:02:da:b1:18:db:cf:ac: 34:f5:18:bb:61:d9:89:bc:36:89:e6:91:fe:54:46:08:f0:7d: 0d:be:4a:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO0GrOaNVOBEuwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk ZDlhNzBkMGEtZWIyYi00MWVlLWExNTgtNTQwMjI2MGIxNjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEKZZiF9K26uHTpmkTf5WQj0/rUi1jtEXpmv rd0XcLYq4y3WVE7hEYXEQAzznoPJ8aED7+K/TKptl7f+AyWDhDZo0kHRFq87dhZ1 CIfLd1+nUysxCcE2fAA7jW3Uu8mjuFd0E4y3/XrivbXFDLeYsfnf3dgQmwvW01t4 zaZd3RtKPuvfFnTATqqVEiOTy7o/mYx4JABOeAIOMrcINyyXBAxcOAvRK/tDzIEJ wapuhmdLe3trH2UMxgnyxdcsF1hsglWknolzX/jxZq5eqTAA8s+05xtYp1EEF7Df jlIFTEHg2WsgM8j9XvkH0JvkpqwduYy4c00zqU+ZDqn6iPm0owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4bQIC75XzMr8AWLJfRfwMTRf5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzBiNmViM2ItM2EwNC0z ZjVhLWJjZjEtMTI5MDRlNDI2Mzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOTIWuRq54swQ2IyMPw3Tq0YhWoqxzyf6udH9lupxpGeuGYsf2KxPxM DUmUNXBC9KHLHshlRKzNJSUD4T9YV3xExKg7iGLME4rOwuREAILzxYyh0H0kJ6Xa VkaYe6IPpX2ouF8kceLYRCHMzeypuB5eRMgK58oi41DpSxyZRr76qgt58/x0XgeP JcDdVAjVxCqhAkilNUuWVZIEmAtYTjPo3Ty3BWSIizgqoMuxgu6aFhnM6jpWoQw8 5TOfcPRgKOG2GiTMXTwl8LXBk7r2eJotJgfw0OS+iJbhEcRuS9+1BIKuAtqxGNvP rDT1GLth2Ym8Nonmkf5URgjwfQ2+Slo= -----END CERTIFICATE-----Generated at Fri Apr 4 08:37:32 2025 by rpki-client