$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa File: 211bf909-5b40-31a9-9871-addf1a48e134.roa (raw, json) Hash identifier: bjhnMxfVYM5YmGFlQNQRuQbKjnnkAwTNSSPkTC0cnsw= Subject key identifier: 69:59:23:57:E1:6A:56:87:5A:46:F6:87:99:02:D0:82:9D:63:E3:E3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAC770C4EC33589AB97600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 192.178.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c7:70:c4:ec:33:58:9a:b9:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2e10e472-b165-402a-a1f4-359c416f1ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:18:3a:d7:e3:61:89:e1:ae:62:49:ae:96: 2f:ae:2e:b6:9d:78:82:62:52:dc:98:6e:a8:6d:b7: 58:08:e9:64:2a:72:0e:01:43:5d:c9:0d:4f:a4:a8: 67:2f:46:f8:1b:e8:33:af:5e:3f:ca:20:1a:81:ac: 6a:51:3f:af:5b:90:f9:c5:5c:8b:8e:22:75:95:14: ea:2f:1c:e5:c9:2a:d1:5e:d6:5e:c1:38:88:63:c4: d5:6c:f4:65:75:33:1f:4e:2f:50:bb:0e:99:09:c7: d3:29:5a:7f:15:f1:4e:93:4b:0f:f2:4e:ed:50:1b: 57:5a:4c:b7:0a:2b:c2:76:b2:c6:83:fa:b4:87:a9: 0d:43:4f:83:0f:86:c9:6a:a7:76:28:c0:36:09:b4: 3e:4a:9c:8f:97:00:a4:c4:25:2d:b4:dd:10:84:fb: 11:70:22:f3:81:68:83:b1:07:fd:fe:b9:b9:04:0f: c7:0f:9f:fc:9e:80:f9:1c:4c:14:5a:7a:d1:8c:e3: fb:34:97:66:bc:c1:cc:c6:0b:db:d3:1d:d8:29:6a: 89:b3:a6:2a:81:03:84:39:48:6e:60:c4:eb:b8:81: d8:d3:cf:4a:87:ff:37:fd:b0:37:88:b4:bb:10:6e: 9f:88:b8:58:25:ac:de:7a:c6:ee:5f:1b:54:23:9d: 0e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:59:23:57:E1:6A:56:87:5A:46:F6:87:99:02:D0:82:9D:63:E3:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:44:30:40:fb:0a:b7:29:26:a6:ac:77:ca:48:b9:f7:04:9a: 2c:70:19:31:ca:7d:bc:3d:85:61:04:28:51:79:42:93:77:04: 89:72:0f:12:92:bb:06:f7:53:2a:60:a4:46:8a:51:8f:b8:9d: b4:ca:db:eb:77:3c:73:dd:74:bb:89:1b:1d:a5:db:c8:1a:24: 68:3b:1b:5f:25:5c:bf:c1:ec:e0:c8:13:49:68:c9:90:f3:59: 50:11:c3:8a:f7:45:a4:7a:cc:d4:fb:76:6c:f6:84:02:f9:80: 2a:36:f4:f9:83:f0:5c:29:c8:63:4b:c1:88:65:b5:d0:0a:35: 75:00:56:0b:83:57:fe:55:ec:70:81:e3:fd:d1:e9:b1:fd:d7: 7e:60:68:a3:22:e7:ad:07:b6:a9:f5:c7:0c:ba:b6:ff:48:8e: 7b:e3:cc:d5:0e:a1:89:df:35:45:27:31:0a:82:a5:8a:bf:7c: 4e:68:c3:72:26:3b:77:31:93:82:cd:cb:2c:ac:a0:31:06:2e: 50:32:72:cf:89:e3:85:18:08:36:b2:80:ee:75:8f:76:de:f4: 84:90:32:46:0e:47:cb:59:f6:dc:3f:a4:72:d9:fb:06:88:ff: b5:87:0f:29:ff:e1:20:40:90:36:0d:4f:56:7e:4d:3a:9f:f0: 73:68:5d:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusdwxOwzWJq5dgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmUxMGU0NzItYjE2NS00MDJhLWExZjQtMzU5YzQxNmYxZWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos8YOtfjYYnhrmJJrpYvri62nXiCYlLcmG6o bbdYCOlkKnIOAUNdyQ1PpKhnL0b4G+gzr14/yiAagaxqUT+vW5D5xVyLjiJ1lRTq LxzlySrRXtZewTiIY8TVbPRldTMfTi9Quw6ZCcfTKVp/FfFOk0sP8k7tUBtXWky3 CivCdrLGg/q0h6kNQ0+DD4bJaqd2KMA2CbQ+SpyPlwCkxCUttN0QhPsRcCLzgWiD sQf9/rm5BA/HD5/8noD5HEwUWnrRjOP7NJdmvMHMxgvb0x3YKWqJs6YqgQOEOUhu YMTruIHY089Kh/83/bA3iLS7EG6fiLhYJazeesbuXxtUI50OzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlZI1fhalaHWkb2h5kC0IKdY+PjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjExYmY5MDktNWI0MC0z MWE5LTk4NzEtYWRkZjFhNDhlMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLIqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpEMED7CrcpJqasd8pIufcEmixwGTHKfbw9hWEEKFF5QpN3BIlyDxKS uwb3UypgpEaKUY+4nbTK2+t3PHPddLuJGx2l28gaJGg7G18lXL/B7ODIE0loyZDz WVARw4r3RaR6zNT7dmz2hAL5gCo29PmD8FwpyGNLwYhltdAKNXUAVguDV/5V7HCB 4/3R6bH9135gaKMi560Htqn1xwy6tv9IjnvjzNUOoYnfNUUnMQqCpYq/fE5ow3Im O3cxk4LNyyysoDEGLlAycs+J44UYCDaygO51j3be9ISQMkYOR8tZ9tw/pHLZ+waI /7WHDyn/4SBAkDYNT1Z+TTqf8HNoXUw= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:44 2025 by rpki-client