$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2aaffdd-9e59-3b29-b45a-19a78fa36ea9.roa File: b2aaffdd-9e59-3b29-b45a-19a78fa36ea9.roa (raw, json) Hash identifier: XrOu/P03VEdCYOmeK8VU1VlFQiyO41isTeyAiRU28Sw= Subject key identifier: E3:72:13:AF:FB:23:17:33:B3:77:67:C3:DF:38:9C:8F:2C:09:E5:D5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858497279C4AA05804D9BA18C5F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2aaffdd-9e59-3b29-b45a-19a78fa36ea9.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 15169 IP address blocks: 192.178.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:c4:aa:05:80:4d:9b:a1:8c:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=43d188b3-fc14-49d1-bc4f-76a9c0df5058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:36:85:89:07:02:eb:96:bf:bb:5f:7e:cb:9c: a5:74:33:6f:e4:ce:dc:fd:f5:94:4d:68:ab:a7:63: 6c:14:ec:b1:e4:a7:fa:ba:3a:31:70:b5:c6:1f:62: 35:75:d2:0f:e2:ab:f7:5a:00:c0:c2:14:bb:0d:ab: ef:65:a4:d8:73:06:58:f3:be:40:92:fa:c6:fe:5c: 3f:ca:b4:05:85:03:db:04:e4:64:a7:16:75:6b:ba: 29:37:1c:3f:e6:fd:f8:a0:55:31:e2:21:89:f3:2e: 71:ff:63:e3:03:a9:5b:f3:f9:e7:86:8a:00:46:ee: 35:17:da:11:97:16:86:79:97:72:dc:06:53:61:8e: ef:7d:38:48:5a:3e:22:1f:5a:ee:e8:f8:0f:4f:57: d5:bf:81:5d:1c:0e:e7:27:17:dd:b0:ca:49:8e:c5: e9:f8:58:4a:78:97:6c:16:c0:e6:84:6e:25:f8:55: 48:23:95:e7:57:0b:db:07:28:b3:01:d4:d9:f6:e9: 01:09:61:61:c7:ba:ae:36:e0:d2:70:67:a8:c4:f1: ed:60:45:9b:55:ad:15:72:cb:38:10:8a:f6:2b:aa: da:5b:1b:1e:f5:19:e8:34:b0:95:9a:fa:ca:24:25: c3:f7:46:8b:86:1d:c9:83:92:7a:5d:33:af:71:69: 96:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:72:13:AF:FB:23:17:33:B3:77:67:C3:DF:38:9C:8F:2C:09:E5:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2aaffdd-9e59-3b29-b45a-19a78fa36ea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:27:77:21:b6:b9:7f:3c:b9:41:e5:54:39:d0:9c:7e:5a:a2: 6a:5b:ba:d3:24:a6:a0:8d:c3:4f:fe:1d:a5:7e:35:a3:4b:fa: 28:c9:1b:d7:30:39:58:90:c5:4f:4c:bc:52:35:b6:19:f3:65: 71:c7:25:40:cc:ae:f7:6d:55:ff:ef:80:7f:ab:66:79:2b:69: 77:30:08:c6:aa:82:43:e9:b9:1b:b3:9e:36:67:c3:f7:95:a2: 6b:1d:34:8c:3c:af:ca:cb:df:25:47:d1:bc:9d:94:62:4a:6a: 82:e6:77:9b:61:5a:2d:4e:ee:b0:ca:f6:7a:92:86:f9:af:7f: a6:db:4f:cd:0a:c0:a1:ba:ec:28:a6:12:64:0c:4b:64:2e:df: d0:21:64:6f:08:11:95:fc:ce:02:b2:21:49:01:5e:18:8f:3e: ba:0b:71:d0:57:67:a0:1b:c9:7f:e2:bc:33:9e:5a:c5:22:b7: ce:f7:e1:49:2e:c5:fc:0d:5b:ac:04:00:e6:8d:23:da:7d:ca: eb:35:1d:28:d4:22:28:05:31:b3:19:55:bc:2e:f9:cd:91:ea: 7d:08:b7:41:7b:dd:9b:50:fe:36:df:2d:53:ac:c0:4f:59:b3: ce:91:80:41:48:a4:f7:45:ea:67:79:0e:d5:4c:31:a7:6c:e0: 30:70:cf:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyecSqBYBNm6GMX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk NDNkMTg4YjMtZmMxNC00OWQxLWJjNGYtNzZhOWMwZGY1MDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjaFiQcC65a/u19+y5yldDNv5M7c/fWUTWir p2NsFOyx5Kf6ujoxcLXGH2I1ddIP4qv3WgDAwhS7DavvZaTYcwZY875AkvrG/lw/ yrQFhQPbBORkpxZ1a7opNxw/5v34oFUx4iGJ8y5x/2PjA6lb8/nnhooARu41F9oR lxaGeZdy3AZTYY7vfThIWj4iH1ru6PgPT1fVv4FdHA7nJxfdsMpJjsXp+FhKeJds FsDmhG4l+FVII5XnVwvbByizAdTZ9ukBCWFhx7quNuDScGeoxPHtYEWbVa0Vcss4 EIr2K6raWxse9RnoNLCVmvrKJCXD90aLhh3Jg5J6XTOvcWmW2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONyE6/7Ixczs3dnw984nI8sCeXVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjJhYWZmZGQtOWU1OS0z YjI5LWI0NWEtMTlhNzhmYTM2ZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0ndyG2uX88uUHlVDnQnH5aompbutMkpqCNw0/+HaV+NaNL+ijJG9cw OViQxU9MvFI1thnzZXHHJUDMrvdtVf/vgH+rZnkraXcwCMaqgkPpuRuznjZnw/eV omsdNIw8r8rL3yVH0bydlGJKaoLmd5thWi1O7rDK9nqShvmvf6bbT80KwKG67Cim EmQMS2Qu39AhZG8IEZX8zgKyIUkBXhiPProLcdBXZ6AbyX/ivDOeWsUit8734Uku xfwNW6wEAOaNI9p9yus1HSjUIigFMbMZVbwu+c2R6n0It0F73ZtQ/jbfLVOswE9Z s86RgEFIpPdF6md5DtVMMads4DBwz9A= -----END CERTIFICATE-----Generated at Sat Apr 26 19:51:57 2025 by rpki-client