$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86a68893-fe5c-3cda-b2d6-45eeb48d4ed3.roa File: 86a68893-fe5c-3cda-b2d6-45eeb48d4ed3.roa (raw, json) Hash identifier: oFZPTN8RfiqFIHH6NhHBFmZzmqYDHQNGpVLuVsxT2YA= Subject key identifier: 57:5B:0C:60:12:81:FA:FE:30:CC:7B:20:47:1A:22:16:E2:04:45:3B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584893409DEF9E9F19F427BACAC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86a68893-fe5c-3cda-b2d6-45eeb48d4ed3.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 15169 IP address blocks: 192.178.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:9d:ef:9e:9f:19:f4:27:ba:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=d2d95e5e-c1f1-4f26-8f6f-0e2eac702478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f4:9b:2e:c4:6a:4f:34:20:e2:b6:26:90:ed: 3e:9c:76:ab:82:79:18:f7:20:e9:36:53:0b:e2:3d: e5:fe:65:92:20:13:f9:02:0e:05:c0:b0:92:5c:6f: 85:9e:94:a4:4e:6d:76:7a:72:89:09:04:b5:2a:53: d0:8a:21:d6:8a:9d:c5:8b:73:7a:22:73:93:ab:2e: 79:01:3f:fb:cd:05:25:e9:4b:29:e0:8a:50:73:3d: be:b9:78:43:b1:18:9a:37:51:8b:0c:f6:30:b2:d5: 84:d5:95:21:cd:3f:06:76:f9:d4:a4:f1:25:03:e4: c8:95:1b:bf:d0:6d:32:60:2f:d1:61:ed:0d:1a:1d: 26:7b:1c:a7:d3:24:1f:b6:86:06:9f:c4:cb:8c:95: 8c:dc:cf:5e:8b:b8:c7:10:23:bf:83:76:6e:01:f6: 2c:61:c5:dd:24:94:a5:29:f7:59:85:5b:9a:0b:c7: f9:70:79:70:27:f3:11:d4:28:af:a6:9a:25:d7:24: b5:73:06:2e:aa:29:d0:cb:01:e4:f3:e5:0c:e3:8b: c8:b9:35:e4:f2:9c:a6:27:c4:d1:a2:ca:68:83:74: e8:ce:a8:d0:fb:42:d1:72:42:1f:f4:9c:52:99:b5: db:43:14:eb:e6:c5:15:4e:39:ed:78:3e:57:45:9b: e2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5B:0C:60:12:81:FA:FE:30:CC:7B:20:47:1A:22:16:E2:04:45:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86a68893-fe5c-3cda-b2d6-45eeb48d4ed3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:52:b9:36:cf:7e:9d:59:2c:72:42:3f:ef:1a:14:83:c4:e8: e7:86:59:a7:15:9d:e8:79:56:52:6a:96:a3:32:9d:4a:4c:95: ba:7e:f2:22:7f:81:07:24:53:79:19:4c:41:d7:f6:f3:da:75: 6e:be:37:a7:3e:19:0e:e8:45:de:e8:75:30:a1:e2:2e:cc:fc: 91:21:08:1d:e8:26:47:e1:58:93:a3:d1:8a:4f:50:a1:84:bd: 9c:c5:34:f1:9c:08:4c:f3:72:6f:cf:1b:8b:71:41:fd:12:a7: f2:18:3e:ea:69:a7:42:cb:5c:a3:e7:09:ab:0e:de:fa:7a:e7: 6a:42:97:c2:29:0a:26:5f:db:5c:42:94:c6:ec:48:0f:00:d3: dd:7b:8b:98:3a:ef:67:e9:26:a8:07:54:b6:c1:f7:4a:f7:0b: 8c:8b:be:f6:5f:91:a5:f2:f7:05:82:93:8f:69:22:89:8a:c2: 34:02:a7:01:19:f8:3b:e3:78:09:3c:dd:dd:b8:bc:99:bb:a3: 45:e3:c1:37:30:0f:71:91:58:96:41:73:3c:47:d5:72:b4:f6: 95:b8:31:f6:26:b0:b8:5e:ee:54:0f:a1:37:a7:94:74:2c:3d: 23:29:56:5d:62:3c:e1:18:62:1b:aa:0b:9c:a8:6e:2c:24:4c: 9b:8d:88:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQJ3vnp8Z9Ce6ysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk ZDJkOTVlNWUtYzFmMS00ZjI2LThmNmYtMGUyZWFjNzAyNDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPSbLsRqTzQg4rYmkO0+nHargnkY9yDpNlML 4j3l/mWSIBP5Ag4FwLCSXG+FnpSkTm12enKJCQS1KlPQiiHWip3Fi3N6InOTqy55 AT/7zQUl6Usp4IpQcz2+uXhDsRiaN1GLDPYwstWE1ZUhzT8GdvnUpPElA+TIlRu/ 0G0yYC/RYe0NGh0mexyn0yQftoYGn8TLjJWM3M9ei7jHECO/g3ZuAfYsYcXdJJSl KfdZhVuaC8f5cHlwJ/MR1Civppol1yS1cwYuqinQywHk8+UM44vIuTXk8pymJ8TR ospog3TozqjQ+0LRckIf9JxSmbXbQxTr5sUVTjnteD5XRZviNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdbDGASgfr+MMx7IEcaIhbiBEU7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODZhNjg4OTMtZmU1Yy0z Y2RhLWIyZDYtNDVlZWI0OGQ0ZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9SuTbPfp1ZLHJCP+8aFIPE6OeGWacVneh5VlJqlqMynUpMlbp+8iJ/ gQckU3kZTEHX9vPadW6+N6c+GQ7oRd7odTCh4i7M/JEhCB3oJkfhWJOj0YpPUKGE vZzFNPGcCEzzcm/PG4txQf0Sp/IYPuppp0LLXKPnCasO3vp652pCl8IpCiZf21xC lMbsSA8A0917i5g672fpJqgHVLbB90r3C4yLvvZfkaXy9wWCk49pIomKwjQCpwEZ +DvjeAk83d24vJm7o0XjwTcwD3GRWJZBczxH1XK09pW4MfYmsLhe7lQPoTenlHQs PSMpVl1iPOEYYhuqC5yobiwkTJuNiKQ= -----END CERTIFICATE-----Generated at Fri Apr 4 08:34:36 2025 by rpki-client