$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f89a595d-4679-3ba3-87ea-01bb796c68e2.roa File: f89a595d-4679-3ba3-87ea-01bb796c68e2.roa (raw, json) Hash identifier: OaaZtlRbqv/82byHihXGpGaVtAqyRil5R989B0UxB18= Subject key identifier: 56:04:D4:FE:4F:E6:5C:3A:27:13:9E:18:16:F9:1E:DA:C9:1C:CA:62 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584893409E39EA4BA05FB98C5880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f89a595d-4679-3ba3-87ea-01bb796c68e2.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 15169 IP address blocks: 192.178.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:9e:39:ea:4b:a0:5f:b9:8c:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=57b25d21-11a9-4fa4-b3e5-ace85d3c6c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a8:a8:6a:b4:6c:ce:5a:4d:fa:a6:ca:79:8a: 53:dd:eb:9b:c5:f7:11:31:f5:c7:ad:3f:26:0b:6c: e6:21:4a:1d:8e:9d:00:df:6e:8a:da:5d:e8:47:22: 0a:0d:52:51:38:ed:db:3a:93:7b:bb:aa:1d:7f:ea: 4e:04:14:d0:68:0b:2c:77:3d:84:dd:88:17:ec:d9: f6:f4:14:d8:9d:44:d2:98:94:fa:fc:dd:17:fc:cc: e5:26:a9:61:07:29:5e:20:48:00:f3:97:db:f8:7e: c0:f2:e6:51:5e:0f:db:36:00:90:5d:c1:c2:41:a2: 1c:a1:03:e9:22:87:0b:e6:83:15:90:69:ed:4a:53: 85:44:ac:27:ac:1d:6d:f1:8a:e9:59:24:e5:7a:4a: e6:ea:a6:1b:33:81:a0:3a:db:a5:7a:31:a0:cc:14: 80:4a:03:b6:b7:34:97:38:b7:ca:eb:e8:a3:ee:53: 66:8e:1d:0f:e7:db:1f:fe:82:b6:97:89:14:ed:0d: b4:6f:fc:59:ac:d1:10:ab:41:15:8b:ac:b8:4b:dd: 2e:8b:11:14:4e:eb:32:9e:6d:64:db:cb:04:36:6f: d1:cb:7d:03:30:43:66:64:ef:83:80:30:3e:c2:c6: cc:cf:35:b7:ae:b0:e5:c6:0d:fe:63:1e:ab:ee:76: c8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:04:D4:FE:4F:E6:5C:3A:27:13:9E:18:16:F9:1E:DA:C9:1C:CA:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f89a595d-4679-3ba3-87ea-01bb796c68e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:97:00:2d:f4:8a:86:91:0f:4a:54:56:06:0e:4d:5e:ef:8e: d0:79:56:8c:2c:10:73:a8:b6:3d:bb:b8:f9:1e:aa:28:34:44: db:69:2b:73:75:99:bf:1f:df:e9:99:f3:81:35:3b:ac:bd:f8: 0a:0a:4c:99:d3:e4:0c:b5:60:e4:db:04:ab:b2:c2:02:bc:6a: ef:b5:a8:0a:31:e0:f3:96:df:69:7c:4a:00:f1:4a:34:7c:2c: ae:ab:a3:a4:46:03:1b:cf:b7:8a:e4:ad:71:31:26:e8:91:55: 7c:e9:76:1f:b3:62:ea:a1:da:cd:b6:f2:19:b2:ce:f7:17:d0: 83:e3:25:76:42:41:58:f8:af:3a:04:8c:5f:5d:ba:9e:9c:1c: e5:f6:3a:f7:f3:29:f8:66:5a:ae:ed:95:b2:a3:1e:1b:30:aa: c3:ae:cb:46:c9:2c:1c:3d:c3:6c:4c:42:d2:a3:a9:62:14:17: 73:bc:cf:90:2f:6d:1e:78:f0:63:04:0d:70:72:ad:d6:fe:7d: 7e:59:08:8d:73:e4:0f:cc:bb:ad:cf:98:25:a0:98:d7:b1:6c: e7:20:11:09:74:cf:d2:b6:e8:64:fc:49:cf:f5:fa:60:d9:25: 49:94:5b:d4:e8:c2:84:1b:8d:25:03:59:7d:c1:1e:ea:3e:50: d3:b9:2a:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQJ456kugX7mMWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk NTdiMjVkMjEtMTFhOS00ZmE0LWIzZTUtYWNlODVkM2M2YzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqioarRszlpN+qbKeYpT3eubxfcRMfXHrT8m C2zmIUodjp0A326K2l3oRyIKDVJROO3bOpN7u6odf+pOBBTQaAssdz2E3YgX7Nn2 9BTYnUTSmJT6/N0X/MzlJqlhByleIEgA85fb+H7A8uZRXg/bNgCQXcHCQaIcoQPp IocL5oMVkGntSlOFRKwnrB1t8YrpWSTlekrm6qYbM4GgOtulejGgzBSASgO2tzSX OLfK6+ij7lNmjh0P59sf/oK2l4kU7Q20b/xZrNEQq0EVi6y4S90uixEUTusynm1k 28sENm/Ry30DMENmZO+DgDA+wsbMzzW3rrDlxg3+Yx6r7nbIlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYE1P5P5lw6JxOeGBb5HtrJHMpiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjg5YTU5NWQtNDY3OS0z YmEzLTg3ZWEtMDFiYjc5NmM2OGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+XAC30ioaRD0pUVgYOTV7vjtB5VowsEHOotj27uPkeqig0RNtpK3N1 mb8f3+mZ84E1O6y9+AoKTJnT5Ay1YOTbBKuywgK8au+1qAox4POW32l8SgDxSjR8 LK6ro6RGAxvPt4rkrXExJuiRVXzpdh+zYuqh2s228hmyzvcX0IPjJXZCQVj4rzoE jF9dup6cHOX2OvfzKfhmWq7tlbKjHhswqsOuy0bJLBw9w2xMQtKjqWIUF3O8z5Av bR548GMEDXByrdb+fX5ZCI1z5A/Mu63PmCWgmNexbOcgEQl0z9K26GT8Sc/1+mDZ JUmUW9TowoQbjSUDWX3BHuo+UNO5KnA= -----END CERTIFICATE-----Generated at Fri Mar 14 08:46:26 2025 by rpki-client