$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2cc338bb-17f7-3d63-b37c-74d0bcb9afa2.roa File: 2cc338bb-17f7-3d63-b37c-74d0bcb9afa2.roa (raw, json) Hash identifier: qSA6Tt46Re+46IW/GytzDMHoapnxdFxzzlJN7kWKB0s= Subject key identifier: 3C:2E:D7:07:3F:F7:CA:A7:7C:19:49:25:3F:84:F0:C3:18:10:5C:67 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584960541D2C150C7A8409CE3820 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2cc338bb-17f7-3d63-b37c-74d0bcb9afa2.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 15169 IP address blocks: 192.178.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:1d:2c:15:0c:7a:84:09:ce:38:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=6f1dd58c-b2cc-4eb5-a6ee-977e40fe6e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c9:a7:6b:1b:9c:44:67:41:93:6a:ac:29:70: e2:e4:b2:15:44:13:3f:07:30:a6:18:bd:f9:c3:ad: 4c:9a:dc:d1:2f:43:8f:bd:d2:b1:95:4a:45:27:34: d3:34:e6:1d:38:c2:f8:2f:f3:e4:d9:12:88:07:2d: 87:8b:66:91:70:c0:5f:0d:8d:89:1d:61:eb:34:36: 4e:fe:8e:dd:6d:76:b3:30:ab:48:a3:17:1e:9c:ca: 1e:a0:5a:0b:bb:48:ab:45:17:78:72:ce:d6:7a:54: 22:93:e5:ba:98:7a:45:2a:47:3a:c6:bf:80:f6:09: 8d:d8:1d:fa:65:3e:79:9b:a1:97:3d:ed:d0:99:ef: 7b:9b:f5:ba:1c:78:82:a6:5e:d9:1e:4d:bb:1d:b5: d3:67:e5:8e:48:6f:7e:68:d7:2f:2e:4c:e0:2a:79: d9:07:5e:0a:30:4c:17:f4:b9:5e:78:60:83:4f:2d: 50:ad:9e:de:90:b3:8d:91:ac:ac:52:fe:72:0a:9e: f5:e2:97:38:2b:b1:ef:aa:66:8f:14:23:f3:08:f9: c4:89:45:30:14:3e:3d:7e:ca:72:a6:23:cc:43:63: eb:e2:4a:2e:59:fc:0c:39:82:2f:9e:95:99:51:20: b6:df:df:9f:00:3b:d4:1e:52:88:1c:dd:69:2d:ec: 3a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2E:D7:07:3F:F7:CA:A7:7C:19:49:25:3F:84:F0:C3:18:10:5C:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2cc338bb-17f7-3d63-b37c-74d0bcb9afa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:95:08:6f:e3:54:dd:26:d0:83:86:15:74:d8:2d:9d:e3:01: 21:b8:87:a2:81:19:0d:db:c6:3e:7d:8e:21:2a:4c:2b:e4:d1: 01:39:d2:0c:79:54:23:12:e4:16:5a:c7:a5:1a:df:01:b7:b0: ad:e0:2a:54:9d:49:35:a8:cb:f7:a1:78:7a:10:fa:aa:b4:a3: 1e:27:d4:ad:89:a4:d5:3e:25:89:65:f6:14:de:d4:79:d8:26: 7e:25:bc:41:93:ee:df:30:e1:a2:48:0b:08:57:a0:a5:a9:81: 30:45:7f:73:52:28:ba:c1:a7:49:d6:ae:09:a3:c5:85:70:19: 35:f8:82:50:91:e1:5f:bb:fc:e2:00:2e:72:86:bb:d1:2f:f1: 50:21:16:3e:0f:4b:dc:f9:12:27:43:0a:c8:9d:c4:ec:b8:72: 62:2f:1d:86:a5:a7:0a:fc:e6:27:46:3c:6f:7e:3c:54:c3:58: ba:de:21:13:b7:ed:eb:e7:7d:c1:9a:e5:ad:5f:51:37:2d:84: 27:8e:2f:7c:6f:9d:61:11:16:27:27:59:be:7d:bd:0e:a3:78: 4d:92:d9:92:f2:52:3b:a2:85:fa:8f:88:40:4c:46:85:b4:e6: 65:54:9a:ba:4e:ad:f9:69:66:93:30:ec:58:3b:68:72:ec:11: b0:18:5d:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVB0sFQx6hAnOOCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk NmYxZGQ1OGMtYjJjYy00ZWI1LWE2ZWUtOTc3ZTQwZmU2ZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8mnaxucRGdBk2qsKXDi5LIVRBM/BzCmGL35 w61MmtzRL0OPvdKxlUpFJzTTNOYdOML4L/Pk2RKIBy2Hi2aRcMBfDY2JHWHrNDZO /o7dbXazMKtIoxcenMoeoFoLu0irRRd4cs7WelQik+W6mHpFKkc6xr+A9gmN2B36 ZT55m6GXPe3Qme97m/W6HHiCpl7ZHk27HbXTZ+WOSG9+aNcvLkzgKnnZB14KMEwX 9LleeGCDTy1QrZ7ekLONkaysUv5yCp714pc4K7HvqmaPFCPzCPnEiUUwFD49fspy piPMQ2Pr4kouWfwMOYIvnpWZUSC239+fADvUHlKIHN1pLew65QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwu1wc/98qnfBlJJT+E8MMYEFxnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMmNjMzM4YmItMTdmNy0z ZDYzLWIzN2MtNzRkMGJjYjlhZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+VCG/jVN0m0IOGFXTYLZ3jASG4h6KBGQ3bxj59jiEqTCvk0QE50gx5 VCMS5BZax6Ua3wG3sK3gKlSdSTWoy/eheHoQ+qq0ox4n1K2JpNU+JYll9hTe1HnY Jn4lvEGT7t8w4aJICwhXoKWpgTBFf3NSKLrBp0nWrgmjxYVwGTX4glCR4V+7/OIA LnKGu9Ev8VAhFj4PS9z5EidDCsidxOy4cmIvHYalpwr85idGPG9+PFTDWLreIRO3 7evnfcGa5a1fUTcthCeOL3xvnWERFicnWb59vQ6jeE2S2ZLyUjuihfqPiEBMRoW0 5mVUmrpOrflpZpMw7Fg7aHLsEbAYXco= -----END CERTIFICATE-----Generated at Sun Apr 27 09:11:30 2025 by rpki-client