$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86c33ef2-c12e-3c30-8177-f2e56b567ee7.roa File: 86c33ef2-c12e-3c30-8177-f2e56b567ee7.roa (raw, json) Hash identifier: 2VZWVt+FRA03LlwpA1Vykv5AL6hRS+tMm01yUr0+7lE= Subject key identifier: 64:33:91:89:AB:BD:33:B1:AE:EE:9C:71:C7:1F:94:49:0A:5A:4E:66 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584883E5C0A140C9250C3D38BC00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86c33ef2-c12e-3c30-8177-f2e56b567ee7.roa Signing time: Sun 12 Jan 2025 02:00:38 +0000 ROA not before: Sun 12 Jan 2025 02:00:38 +0000 ROA not after: Sat 12 Apr 2025 01:00:38 +0000 asID: 15169 IP address blocks: 192.178.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:e5:c0:a1:40:c9:25:0c:3d:38:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jan 12 02:00:38 2025 GMT Not After : Apr 12 01:00:38 2025 GMT Subject: CN=9955c971-21ae-4619-892e-4e677a98b2ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cb:01:01:fb:58:fc:de:d6:a8:55:26:cc:10: 67:48:bf:df:ea:40:2d:32:66:57:d6:13:31:a9:4e: 55:c7:70:62:0c:cd:8d:c6:6a:33:16:67:7f:4c:97: d5:85:3d:2c:01:87:bf:d0:a5:44:fe:9c:db:37:33: 03:a3:75:e2:11:1e:4e:3c:6b:bd:56:e2:9f:80:3f: 61:09:56:3f:73:1c:31:9b:53:6f:cd:e3:9f:b9:2f: ad:45:28:26:d2:4a:9b:4b:a0:11:03:dc:38:7e:39: aa:04:b9:77:75:ca:33:15:2a:55:ac:41:3f:0f:56: b6:03:e5:b8:36:72:0c:c8:35:25:1c:8e:8f:f2:80: 74:13:3c:a7:8b:a6:99:58:a4:62:a7:e1:7e:c2:aa: 9e:49:72:dc:ed:34:1a:47:e4:3a:1e:b4:f5:e1:8b: b6:c7:04:95:dd:42:e8:49:8a:56:ab:2f:6a:ca:77: ec:38:ff:86:3a:d5:e7:aa:c9:97:69:55:f3:50:1f: 3c:23:16:3c:28:3c:81:c9:a4:8c:5c:b5:78:cc:06: 46:ac:76:8d:62:e5:c8:05:96:70:f8:b4:c9:fb:a5: a6:20:e7:49:26:7b:b1:90:96:a0:43:90:15:5c:53: 23:70:22:2d:94:34:87:25:6a:c6:18:0c:b3:a0:03: 63:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:33:91:89:AB:BD:33:B1:AE:EE:9C:71:C7:1F:94:49:0A:5A:4E:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86c33ef2-c12e-3c30-8177-f2e56b567ee7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:2e:a8:73:04:f0:84:1c:5f:18:49:bb:85:1a:16:f2:86:96: 2f:c6:0d:d9:05:a0:db:9d:09:b8:3d:46:79:9d:43:ff:9c:56: 1c:1c:c7:b2:ee:5e:11:5a:70:1f:1c:0a:2a:81:3c:89:4e:b8: da:29:3d:41:40:79:ba:22:3b:96:38:9b:68:83:b4:1a:5a:c9: 17:9a:56:7a:2a:e6:16:d8:4c:55:28:4e:fa:3e:0a:92:74:a8: d2:dd:32:4f:c1:f8:ff:76:5d:3e:84:9f:16:ed:d3:ff:2b:d9: fc:05:6d:cb:66:d0:41:c7:eb:a0:61:5b:c3:8f:4d:fa:16:3a: 26:e5:4a:a5:14:39:6a:64:ce:54:3e:be:4e:f6:33:f8:a2:49: a5:55:fa:21:c1:c0:0a:7e:a8:18:a3:bf:3a:62:aa:1c:9c:67: 26:ab:c7:f0:da:cc:eb:a3:d4:f6:a5:ec:cc:ee:ac:63:db:6d: 6f:f6:4d:89:26:6b:0f:ce:a4:06:45:82:a6:7b:0b:d5:c6:f4: 85:55:58:7f:aa:f5:c6:e4:75:41:2b:ef:5e:e1:3a:c6:b9:d9: d4:bb:75:a7:b0:3f:ea:69:b3:e2:41:b7:10:fc:59:a5:68:be: 13:b7:e8:86:46:9d:59:e4:53:41:ba:ca:7e:96:cc:fc:e9:de: 2c:3b:4d:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5cChQMklDD04vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk OTk1NWM5NzEtMjFhZS00NjE5LTg5MmUtNGU2NzdhOThiMmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8sBAftY/N7WqFUmzBBnSL/f6kAtMmZX1hMx qU5Vx3BiDM2NxmozFmd/TJfVhT0sAYe/0KVE/pzbNzMDo3XiER5OPGu9VuKfgD9h CVY/cxwxm1NvzeOfuS+tRSgm0kqbS6ARA9w4fjmqBLl3dcozFSpVrEE/D1a2A+W4 NnIMyDUlHI6P8oB0Ezyni6aZWKRip+F+wqqeSXLc7TQaR+Q6HrT14Yu2xwSV3ULo SYpWqy9qynfsOP+GOtXnqsmXaVXzUB88IxY8KDyByaSMXLV4zAZGrHaNYuXIBZZw +LTJ+6WmIOdJJnuxkJagQ5AVXFMjcCItlDSHJWrGGAyzoANj6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQzkYmrvTOxru6ccccflEkKWk5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODZjMzNlZjItYzEyZS0z YzMwLTgxNzctZjJlNTZiNTY3ZWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQuqHME8IQcXxhJu4UaFvKGli/GDdkFoNudCbg9RnmdQ/+cVhwcx7Lu XhFacB8cCiqBPIlOuNopPUFAeboiO5Y4m2iDtBpayReaVnoq5hbYTFUoTvo+CpJ0 qNLdMk/B+P92XT6Enxbt0/8r2fwFbctm0EHH66BhW8OPTfoWOiblSqUUOWpkzlQ+ vk72M/iiSaVV+iHBwAp+qBijvzpiqhycZyarx/DazOuj1Pal7MzurGPbbW/2TYkm aw/OpAZFgqZ7C9XG9IVVWH+q9cbkdUEr717hOsa52dS7daewP+pps+JBtxD8WaVo vhO36IZGnVnkU0G6yn6WzPzp3iw7TaE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:30 2025 by rpki-client