$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86a68893-fe5c-3cda-b2d6-45eeb48d4ed3.roa File: 86a68893-fe5c-3cda-b2d6-45eeb48d4ed3.roa (raw, json) Hash identifier: Q/LfRqqqwwqI9OFRGas6fiBTClnqbVRHPbDz58SNXe0= Subject key identifier: 65:B0:1D:A3:FA:F7:72:6C:DB:75:14:E2:95:EB:FE:A7:D7:4E:AB:D7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858497279C48EE2E96054D1CA9A90 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86a68893-fe5c-3cda-b2d6-45eeb48d4ed3.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 15169 IP address blocks: 192.178.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:c4:8e:e2:e9:60:54:d1:ca:9a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=0475acc6-854d-4196-b0e5-de6510759332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:72:62:37:1f:00:f9:02:ab:5a:00:00:2a:72: 39:a4:d5:45:ce:9f:7e:d3:56:b9:e4:e0:0b:39:a8: 95:ef:80:56:e2:ad:38:75:82:e6:4c:e3:5b:a3:e2: 44:76:b1:1c:68:eb:6e:62:82:fe:1e:73:0d:ec:2c: 2b:a1:20:97:1a:b2:9d:3e:90:0c:86:f0:2c:d0:e3: de:48:4b:15:7d:82:b7:ef:1c:8b:b1:6e:49:36:e9: 61:ba:30:35:78:ce:23:b4:cc:8e:6d:8b:cc:d2:14: 33:20:86:b5:d8:9b:f8:51:28:96:2d:76:84:06:71: a7:66:99:e5:6c:a8:98:53:a1:d9:65:0a:38:c7:94: 9b:88:96:33:9c:91:8d:fb:56:20:10:89:5b:59:0d: c3:4b:c4:8a:76:17:e2:be:e8:e0:ae:f5:5e:14:fa: 82:49:22:9b:39:10:8e:8f:cb:88:be:00:3a:aa:47: 95:b6:0b:eb:b1:01:e2:94:30:91:c0:01:00:ca:5d: 62:e0:86:64:93:26:6e:5b:ce:a9:09:ca:f0:95:32: ec:a8:ff:a6:62:0e:76:8c:58:40:01:f8:11:68:9e: 76:6d:96:77:64:50:c4:4b:aa:d7:a2:93:a4:53:92: b9:11:86:2e:42:be:d7:21:eb:fd:c0:e4:af:6f:b0: 88:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B0:1D:A3:FA:F7:72:6C:DB:75:14:E2:95:EB:FE:A7:D7:4E:AB:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86a68893-fe5c-3cda-b2d6-45eeb48d4ed3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:da:37:18:88:ef:a5:39:ac:6d:02:24:d3:4e:fe:8b:77:ce: 41:f6:49:da:fc:25:3e:ae:93:27:06:b1:c5:44:43:95:9a:88: e5:42:f3:18:53:71:e3:19:f3:13:ee:c8:10:0d:ff:08:a7:39: d0:4c:08:55:dd:3d:4e:cf:3b:5e:b1:03:3c:77:2b:b6:13:2c: 64:58:67:c2:45:4f:42:62:09:5b:6b:e1:bc:74:99:b0:c1:53: 2f:95:97:6d:77:37:42:9d:f8:63:46:77:16:24:40:c5:ab:c3: ef:6d:7e:19:e8:88:74:b6:58:3a:30:01:26:1b:e4:99:d9:14: 32:2a:2c:2b:8c:08:1b:27:6a:33:bf:4d:35:ca:e7:4c:dc:df: 96:0a:08:ad:a3:08:b3:48:63:9d:3b:2c:45:4a:cd:90:2d:8d: 96:4c:73:12:60:94:19:9a:75:1f:25:5f:dc:cf:b5:94:94:c6: 90:b6:e8:8e:9c:bb:59:b9:44:10:60:43:7e:8e:0c:dd:eb:48: e5:82:86:8b:fa:f9:d0:a8:99:3c:44:02:dd:fe:da:c6:3a:e4: 3a:1b:22:ae:81:90:ab:92:f8:1e:1c:0d:28:6b:03:72:fe:dd: 56:72:55:d4:ca:64:ce:03:9e:c5:50:90:e0:53:91:a2:dc:8a: 0e:09:dc:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyecSO4ulgVNHKmpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk MDQ3NWFjYzYtODU0ZC00MTk2LWIwZTUtZGU2NTEwNzU5MzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXJiNx8A+QKrWgAAKnI5pNVFzp9+01a55OAL OaiV74BW4q04dYLmTONbo+JEdrEcaOtuYoL+HnMN7CwroSCXGrKdPpAMhvAs0OPe SEsVfYK37xyLsW5JNulhujA1eM4jtMyObYvM0hQzIIa12Jv4USiWLXaEBnGnZpnl bKiYU6HZZQo4x5SbiJYznJGN+1YgEIlbWQ3DS8SKdhfivujgrvVeFPqCSSKbORCO j8uIvgA6qkeVtgvrsQHilDCRwAEAyl1i4IZkkyZuW86pCcrwlTLsqP+mYg52jFhA AfgRaJ52bZZ3ZFDES6rXopOkU5K5EYYuQr7XIev9wOSvb7CIiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWwHaP693Js23UU4pXr/qfXTqvXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODZhNjg4OTMtZmU1Yy0z Y2RhLWIyZDYtNDVlZWI0OGQ0ZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7aNxiI76U5rG0CJNNO/ot3zkH2Sdr8JT6ukycGscVEQ5WaiOVC8xhT ceMZ8xPuyBAN/winOdBMCFXdPU7PO16xAzx3K7YTLGRYZ8JFT0JiCVtr4bx0mbDB Uy+Vl213N0Kd+GNGdxYkQMWrw+9tfhnoiHS2WDowASYb5JnZFDIqLCuMCBsnajO/ TTXK50zc35YKCK2jCLNIY507LEVKzZAtjZZMcxJglBmadR8lX9zPtZSUxpC26I6c u1m5RBBgQ36ODN3rSOWChov6+dComTxEAt3+2sY65DobIq6BkKuS+B4cDShrA3L+ 3VZyVdTKZM4DnsVQkOBTkaLcig4J3ME= -----END CERTIFICATE-----Generated at Sun Apr 27 03:25:04 2025 by rpki-client