$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7989e3c-b727-32b3-a17e-85c7c99d3b60.roa File: a7989e3c-b727-32b3-a17e-85c7c99d3b60.roa (raw, json) Hash identifier: EN9HgtjWAdskm+DAW9X16Gvaou4rE1nRyCySd4eBI9A= Subject key identifier: 6D:89:AC:25:D2:C8:98:68:92:63:48:92:25:5E:C6:EE:D6:9C:28:D6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584883E5BFA64584587BADA69A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7989e3c-b727-32b3-a17e-85c7c99d3b60.roa Signing time: Sun 12 Jan 2025 02:00:38 +0000 ROA not before: Sun 12 Jan 2025 02:00:38 +0000 ROA not after: Sat 12 Apr 2025 01:00:38 +0000 asID: 15169 IP address blocks: 192.178.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:e5:bf:a6:45:84:58:7b:ad:a6:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jan 12 02:00:38 2025 GMT Not After : Apr 12 01:00:38 2025 GMT Subject: CN=54484fcf-41d5-4b57-aa26-fe4a0baeaa40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6a:b7:42:24:01:77:96:eb:c6:13:9e:35:18: a8:31:71:36:fb:31:e6:3f:7f:56:98:30:49:b6:41: 97:e9:8c:46:4c:9a:a0:7e:28:7a:c8:59:46:ab:e0: a3:d8:1b:a2:dc:d7:e7:35:38:56:cf:8e:66:bc:b9: e1:2d:43:23:23:6c:d0:2c:71:a5:69:6c:11:08:e7: af:60:a5:1a:0f:e8:31:27:52:7f:13:ee:9f:a8:da: 20:82:51:10:83:66:5f:57:10:47:e6:7b:3c:87:6a: 01:87:d6:bb:27:b4:34:0a:0f:1d:40:9c:b2:bd:2e: bd:c6:fc:2a:0f:9c:1f:b1:5d:f9:af:40:73:5c:f4: 7d:12:b9:41:5b:b4:60:46:4d:4e:1e:01:34:9b:73: f4:58:74:0d:aa:12:34:09:fc:81:7f:2d:9a:77:c6: 6f:3f:2d:ef:2a:c9:3c:6b:ff:41:e8:fc:35:bd:7a: 45:ac:32:e3:c3:c6:a3:dc:47:85:00:5a:ea:b9:fd: f6:14:bd:8a:00:2e:1c:b2:ee:aa:ae:8c:01:41:54: 90:69:14:a6:94:d3:ee:cd:f6:88:84:0d:34:ff:9a: ad:83:af:11:3f:f8:50:e6:49:ea:c3:68:c5:d8:de: ac:fb:52:0e:4d:d1:4c:0b:30:48:0a:c6:8f:7f:ce: e0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:89:AC:25:D2:C8:98:68:92:63:48:92:25:5E:C6:EE:D6:9C:28:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7989e3c-b727-32b3-a17e-85c7c99d3b60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:bc:f2:ac:e6:c8:d9:67:ad:77:e7:1a:94:d2:67:5f:b7:6b: bb:29:7a:b3:3a:11:3b:06:87:ef:65:fe:f8:6b:11:81:48:7e: 59:d9:0a:93:5e:8a:0d:5d:be:7c:0c:8d:05:f6:f1:e3:5c:d7: 30:b2:d7:46:7c:1f:ff:00:63:1b:38:64:ca:39:60:d2:3d:74: 52:70:ad:50:86:f4:e2:cc:00:3d:07:dd:ff:2a:8a:dc:9a:10: 91:08:4c:70:51:c4:c6:f5:cf:cd:81:5a:81:26:1a:83:69:b3: 68:a5:38:57:47:49:ad:79:c7:7a:6f:d2:c6:02:1e:0d:c5:85: 7c:83:ec:68:e9:0b:c5:e3:c3:d7:e2:37:ee:19:06:5b:c2:eb: c0:5b:89:e9:92:c8:07:85:db:70:3d:0d:a0:8b:e2:ab:87:41: 6b:62:38:fe:07:1e:7b:2a:90:b7:06:7e:c1:14:01:07:e9:e1: fe:c3:b5:fa:2c:95:5a:ba:7e:9b:6b:e3:95:6f:40:39:34:07: 46:2b:27:d9:0f:d3:21:36:d4:c8:72:49:ff:86:16:3f:f9:d5: 15:cb:4a:4c:58:f4:63:60:b7:aa:5b:83:54:b3:a5:6c:b9:c7: 63:5b:ba:c8:ae:4c:f9:5d:f3:fc:dd:65:3a:a6:dc:5c:35:9c: 6c:7f:6c:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5b+mRYRYe62mmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk NTQ0ODRmY2YtNDFkNS00YjU3LWFhMjYtZmU0YTBiYWVhYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWq3QiQBd5brxhOeNRioMXE2+zHmP39WmDBJ tkGX6YxGTJqgfih6yFlGq+Cj2Bui3NfnNThWz45mvLnhLUMjI2zQLHGlaWwRCOev YKUaD+gxJ1J/E+6fqNogglEQg2ZfVxBH5ns8h2oBh9a7J7Q0Cg8dQJyyvS69xvwq D5wfsV35r0BzXPR9ErlBW7RgRk1OHgE0m3P0WHQNqhI0CfyBfy2ad8ZvPy3vKsk8 a/9B6Pw1vXpFrDLjw8aj3EeFAFrquf32FL2KAC4csu6qrowBQVSQaRSmlNPuzfaI hA00/5qtg68RP/hQ5knqw2jF2N6s+1IOTdFMCzBICsaPf87gHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2JrCXSyJhokmNIkiVexu7WnCjWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTc5ODllM2MtYjcyNy0z MmIzLWExN2UtODVjN2M5OWQzYjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFe88qzmyNlnrXfnGpTSZ1+3a7sperM6ETsGh+9l/vhrEYFIflnZCpNe ig1dvnwMjQX28eNc1zCy10Z8H/8AYxs4ZMo5YNI9dFJwrVCG9OLMAD0H3f8qitya EJEITHBRxMb1z82BWoEmGoNps2ilOFdHSa15x3pv0sYCHg3FhXyD7GjpC8Xjw9fi N+4ZBlvC68BbiemSyAeF23A9DaCL4quHQWtiOP4HHnsqkLcGfsEUAQfp4f7Dtfos lVq6fptr45VvQDk0B0YrJ9kP0yE21MhySf+GFj/51RXLSkxY9GNgt6pbg1SzpWy5 x2NbusiuTPld8/zdZTqm3Fw1nGx/bBg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:47 2025 by rpki-client