$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/05ecd9f5-0c60-389e-a961-68db6277a2e8.roa File: 05ecd9f5-0c60-389e-a961-68db6277a2e8.roa (raw, json) Hash identifier: UqXl95rYpdshMnL2F4OHk2VEmNv5aw8oWjZ1v0JgKrc= Subject key identifier: CD:54:E0:FA:50:82:42:CE:A4:38:94:9A:03:57:FA:59:29:35:88:C0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858499C59E96606F8E6922D13D8C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/05ecd9f5-0c60-389e-a961-68db6277a2e8.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 53356 IP address blocks: 172.111.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:e9:66:06:f8:e6:92:2d:13:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=598433d4-9dca-4942-94da-db666286758f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1d:a7:97:e1:fe:08:61:d1:ba:66:d6:01:14: d4:e8:73:90:5a:00:50:1a:28:96:96:80:be:4d:2a: 24:dd:e9:d3:9a:02:42:d0:86:e8:31:d1:87:9a:5d: 38:48:b2:ba:2f:4e:1e:f8:6c:cb:44:d1:6d:fb:70: e4:db:ed:30:1a:fd:7d:ae:b3:e2:7f:c3:f5:97:66: a2:83:7b:0b:ba:d9:d6:3f:83:8f:77:a5:98:4e:42: 07:99:3b:a5:ae:da:e9:21:e0:7f:4a:0d:e6:2f:ea: f6:99:8f:34:cf:ff:2e:18:e9:0b:7b:e5:5f:3d:26: dd:4f:04:5a:23:50:49:e7:9d:bf:85:3f:7f:ee:9d: b8:55:ff:44:41:35:da:58:49:ac:9d:84:67:9b:87: e6:24:a7:77:1e:8b:6f:84:e4:82:c3:85:5c:8c:a3: 7d:79:e6:ac:e3:5c:1a:ee:63:83:0b:59:bb:a3:ce: 93:ab:70:d9:7c:7c:fe:c6:29:36:73:ff:ed:b2:cf: a1:12:37:47:41:ab:a1:eb:20:f1:36:38:9d:f9:da: f7:8f:ed:d7:8f:d7:6d:ba:ec:71:d2:59:1a:d1:bf: a8:0f:12:e1:02:1f:f1:b1:bb:44:ee:a3:ec:ed:d5: 49:69:0b:ad:f4:be:9e:43:c5:ee:45:2b:c6:e1:a4: b7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:54:E0:FA:50:82:42:CE:A4:38:94:9A:03:57:FA:59:29:35:88:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/05ecd9f5-0c60-389e-a961-68db6277a2e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:e6:83:04:9c:cd:40:56:46:d8:f3:2c:b8:b0:4e:7f:3b:54: 2c:9f:ad:e4:1f:8c:b4:40:23:9e:77:aa:ec:6b:2a:d8:fa:67: b2:1d:9d:f2:c9:67:2f:28:ac:39:20:7e:91:e9:dc:68:37:7c: 7c:d5:f4:9d:68:50:11:99:e3:6a:df:55:34:18:7a:1a:18:1a: 17:41:e3:d7:6c:f1:22:d7:d4:b2:5a:52:be:11:4c:dc:41:55: d3:81:66:33:93:a6:c1:29:90:35:ef:3b:c8:30:c9:f0:3b:c4: ec:e2:56:9e:66:2f:c1:cd:a3:40:a3:11:66:3c:f6:e4:ad:48: 89:56:44:e1:2b:45:0f:2b:6e:38:cc:f2:85:0a:7b:e5:8d:44: 01:0d:c2:39:3b:97:9b:2c:7d:f5:aa:e0:74:a4:f2:fc:b2:57: e1:31:5e:8e:bb:c1:ca:4a:af:b2:16:57:b4:26:ee:54:f4:fc: 22:cf:fc:da:6f:d8:10:ea:3c:c2:33:b7:97:fe:25:7e:6f:1c: fc:8f:a3:3e:2c:73:8c:c1:a8:76:99:5f:aa:f1:6b:83:bb:18: 35:22:53:cc:68:d2:57:29:25:02:02:9e:51:b6:17:1a:3a:df: 83:7c:12:b0:86:98:a7:9d:51:a2:9f:8b:ae:e7:7b:69:14:35: 23:27:db:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWelmBvjmki0T2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk NTk4NDMzZDQtOWRjYS00OTQyLTk0ZGEtZGI2NjYyODY3NThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh2nl+H+CGHRumbWARTU6HOQWgBQGiiWloC+ TSok3enTmgJC0IboMdGHml04SLK6L04e+GzLRNFt+3Dk2+0wGv19rrPif8P1l2ai g3sLutnWP4OPd6WYTkIHmTulrtrpIeB/Sg3mL+r2mY80z/8uGOkLe+VfPSbdTwRa I1BJ552/hT9/7p24Vf9EQTXaWEmsnYRnm4fmJKd3HotvhOSCw4VcjKN9eeas41wa 7mODC1m7o86Tq3DZfHz+xik2c//tss+hEjdHQauh6yDxNjid+dr3j+3Xj9dtuuxx 0lka0b+oDxLhAh/xsbtE7qPs7dVJaQut9L6eQ8XuRSvG4aS3fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1U4PpQgkLOpDiUmgNX+lkpNYjAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDVlY2Q5ZjUtMGM2MC0z ODllLWE5NjEtNjhkYjYyNzdhMmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/mgwSczUBWRtjzLLiwTn87VCyfreQfjLRAI553quxrKtj6Z7IdnfLJ Zy8orDkgfpHp3Gg3fHzV9J1oUBGZ42rfVTQYehoYGhdB49ds8SLX1LJaUr4RTNxB VdOBZjOTpsEpkDXvO8gwyfA7xOziVp5mL8HNo0CjEWY89uStSIlWROErRQ8rbjjM 8oUKe+WNRAENwjk7l5ssffWq4HSk8vyyV+ExXo67wcpKr7IWV7Qm7lT0/CLP/Npv 2BDqPMIzt5f+JX5vHPyPoz4sc4zBqHaZX6rxa4O7GDUiU8xo0lcpJQICnlG2Fxo6 34N8ErCGmKedUaKfi67ne2kUNSMn27g= -----END CERTIFICATE-----Generated at Sat Apr 26 19:56:24 2025 by rpki-client