$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa File: 70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa (raw, json) Hash identifier: CMaZqcDvplDIFo+VrSirc/zfe6ixAzdnOiX2r4lG1kE= Subject key identifier: 1F:91:8B:CE:07:D1:78:25:B1:34:3C:5E:72:DB:6E:A9:8F:4B:F7:BF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584979745023D5A96F6F22D3D9C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 15169 IP address blocks: 192.178.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:50:23:d5:a9:6f:6f:22:d3:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=8c19283c-84a7-4776-b7aa-8c0996e0e881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8f:bd:25:e0:27:31:7f:b4:91:70:f8:1b:db: 07:39:2e:72:b3:3d:84:6c:4b:23:79:e7:1e:2f:2f: 30:22:42:f7:ad:02:41:d3:00:55:07:65:25:14:b7: 92:04:7a:da:03:eb:c3:38:41:bf:52:73:66:a4:ef: 3c:5e:82:c8:0d:7d:61:04:59:d4:27:dd:70:3b:d9: 54:02:c3:40:3e:72:b8:5f:f0:18:85:49:e9:b0:91: 17:f4:f4:84:e7:fc:31:d7:cb:97:d9:1c:ad:03:a2: 00:7c:9c:74:40:5d:4d:b0:1a:25:ef:0f:26:b5:f9: 4e:b7:f1:b7:e4:c0:77:e2:40:1e:52:64:ec:3b:3e: 7c:88:3e:d6:29:aa:bc:c2:8d:81:5d:52:f6:24:51: 9b:c4:98:ef:d9:38:73:31:40:28:cd:0d:e9:d9:a7: 10:95:9b:81:54:5e:f8:9f:a3:5d:80:44:38:38:be: ea:18:48:de:f3:52:50:9a:74:a7:26:2d:43:3a:e3: e0:72:bd:24:c7:7f:76:17:a9:d5:8d:81:30:d1:d0: bb:c6:04:a7:8c:2d:00:8f:8a:ff:aa:2f:51:8d:61: 04:32:0a:5a:bb:d2:86:3b:26:6d:bf:86:13:8f:84: f9:f0:60:64:e1:08:5e:1e:b8:d8:8a:18:13:ae:ab: f2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:91:8B:CE:07:D1:78:25:B1:34:3C:5E:72:DB:6E:A9:8F:4B:F7:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/70b6eb3b-3a04-3f5a-bcf1-12904e426389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:19:8c:37:e8:cc:b4:78:1d:52:55:16:29:32:0b:f0:e3:91: 19:d6:ef:1c:00:77:45:03:14:8e:e1:27:e2:bb:20:1b:b1:5f: 0a:2d:d9:11:4e:d1:db:7b:5f:88:07:0e:18:49:4f:e6:10:4c: f4:e1:6c:ef:31:77:2f:73:b7:5a:99:14:8e:51:8d:ac:0a:8b: 60:d8:2d:1b:1b:29:cd:1a:28:b5:02:4a:a8:93:9c:eb:01:76: 1b:96:1c:c3:4d:8b:6d:e0:e8:22:1b:02:2c:10:80:57:69:55: 4b:8a:ce:9d:80:c0:fe:72:88:3a:70:52:f3:a3:ba:fd:ad:5f: 3c:30:a1:fb:ab:30:54:f6:eb:07:87:2a:29:79:a9:af:42:d7: 6e:b3:1c:db:1a:ed:99:36:c3:0a:e6:8c:d3:8b:61:bd:8d:81: 1d:e5:7f:cc:c9:d2:1f:7b:b9:69:d1:6c:8f:cd:43:e4:66:cb: 7f:fe:b2:5b:f9:13:17:a3:95:22:7f:2e:e0:b5:15:72:16:9e: d7:38:74:0f:f6:8f:26:dc:fc:bb:1e:08:1c:f9:9b:ee:1c:d1: 45:c9:1e:9f:50:ef:1b:d1:33:27:72:9f:f8:68:45:e5:41:4f: cc:97:eb:3d:0b:14:4a:73:e7:b4:26:22:9e:73:e5:85:24:b6: 81:07:d2:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dFAj1alvbyLT2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk OGMxOTI4M2MtODRhNy00Nzc2LWI3YWEtOGMwOTk2ZTBlODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4+9JeAnMX+0kXD4G9sHOS5ysz2EbEsjeece Ly8wIkL3rQJB0wBVB2UlFLeSBHraA+vDOEG/UnNmpO88XoLIDX1hBFnUJ91wO9lU AsNAPnK4X/AYhUnpsJEX9PSE5/wx18uX2RytA6IAfJx0QF1NsBol7w8mtflOt/G3 5MB34kAeUmTsOz58iD7WKaq8wo2BXVL2JFGbxJjv2ThzMUAozQ3p2acQlZuBVF74 n6NdgEQ4OL7qGEje81JQmnSnJi1DOuPgcr0kx392F6nVjYEw0dC7xgSnjC0Aj4r/ qi9RjWEEMgpau9KGOyZtv4YTj4T58GBk4QheHrjYihgTrqvyuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+Ri84H0XglsTQ8XnLbbqmPS/e/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzBiNmViM2ItM2EwNC0z ZjVhLWJjZjEtMTI5MDRlNDI2Mzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoZjDfozLR4HVJVFikyC/DjkRnW7xwAd0UDFI7hJ+K7IBuxXwot2RFO 0dt7X4gHDhhJT+YQTPThbO8xdy9zt1qZFI5RjawKi2DYLRsbKc0aKLUCSqiTnOsB dhuWHMNNi23g6CIbAiwQgFdpVUuKzp2AwP5yiDpwUvOjuv2tXzwwofurMFT26weH Kil5qa9C126zHNsa7Zk2wwrmjNOLYb2NgR3lf8zJ0h97uWnRbI/NQ+Rmy3/+slv5 ExejlSJ/LuC1FXIWntc4dA/2jybc/LseCBz5m+4c0UXJHp9Q7xvRMydyn/hoReVB T8yX6z0LFEpz57QmIp5z5YUktoEH0vc= -----END CERTIFICATE-----Generated at Sun Apr 27 11:20:31 2025 by rpki-client