$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0fdcaa24-e3b0-3eca-983a-c86646b16ede.roa File: 0fdcaa24-e3b0-3eca-983a-c86646b16ede.roa (raw, json) Hash identifier: y+iee9ETx3OD7YH3LIHcX5Orp8DYLdmoRViuDMZS0Gk= Subject key identifier: 56:53:34:82:E4:96:90:AC:04:3E:A2:6B:3E:56:6D:2A:99:01:8F:D6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584900216DEC00490409E20EFDF0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0fdcaa24-e3b0-3eca-983a-c86646b16ede.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 9009 IP address blocks: 172.111.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:6d:ec:00:49:04:09:e2:0e:fd:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=4c3bcc8c-d93d-41b5-a11e-34d2eaa66e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b6:8f:e7:22:eb:1b:b9:5e:41:dc:8e:3b:b0: 33:b6:71:0e:6f:12:40:6e:b6:9e:df:b3:6b:68:41: 85:cd:f8:42:86:29:4c:41:c6:e3:4b:0d:67:97:1a: 3a:bd:da:44:3a:ba:c0:65:92:5d:e3:98:73:a3:ac: 53:b4:dd:c5:e9:d7:a6:59:a0:a2:e4:55:b2:79:fe: 24:96:f3:fc:81:25:6c:d5:46:15:41:6f:eb:3a:7f: e1:86:ee:74:5e:3a:e3:c4:3f:f7:fa:32:0d:e7:1b: 12:00:bb:e6:e1:76:85:22:84:fe:32:14:81:ca:86: 28:80:dc:8c:05:0b:b5:7b:14:8d:cc:4c:68:38:c5: 45:5e:51:8d:99:b7:cd:39:c4:c2:2e:f0:21:ed:cf: ae:f3:7d:e3:dd:5a:9c:57:eb:05:87:92:97:da:0b: ff:3c:29:be:47:b2:2d:91:21:fb:f0:d9:5d:5b:38: 2e:8b:6f:b2:13:74:57:4c:84:e7:3d:6e:0a:d3:5e: d3:b0:ee:48:ef:37:e2:cc:3f:75:9c:d4:95:ec:de: a7:31:6d:6c:9a:1e:a1:25:5b:4c:0a:16:b6:4b:2b: 12:43:8c:8e:13:0f:6b:3f:7e:d3:0f:4a:e7:b5:b5: b6:dc:0a:9f:97:63:05:87:45:59:15:bc:01:48:2a: 2c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:53:34:82:E4:96:90:AC:04:3E:A2:6B:3E:56:6D:2A:99:01:8F:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0fdcaa24-e3b0-3eca-983a-c86646b16ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a8:db:eb:a7:1a:a1:bc:10:1a:13:05:76:62:88:ab:97:a5: fe:31:2b:03:fc:ce:3c:c9:9d:52:ca:d7:45:39:b7:b8:83:16: 81:03:f7:17:ff:a5:28:4a:70:dc:33:d8:f6:31:a4:b0:d6:da: f9:89:97:d9:2f:52:48:9e:8b:b1:c1:d5:f2:76:5b:1d:b5:f0: aa:1c:82:31:11:44:5a:e6:b0:c2:71:ed:a5:b1:a2:70:c1:42: 21:93:7e:8b:f8:b5:e6:aa:44:ae:46:d4:a1:1c:d7:d5:24:89: a1:91:cb:31:e1:fa:06:96:00:c3:6d:59:3b:8e:41:2f:6c:55: 11:4e:ee:6d:6d:a7:d7:02:2f:a1:c7:ae:21:b5:29:ad:f5:e6: 57:21:a0:3b:c2:40:80:c1:35:5d:3c:21:60:26:23:f1:2d:47: c5:0f:d3:40:ec:b6:21:e5:55:ad:e8:4e:74:6e:5e:1f:ee:75: d2:9f:83:00:52:e8:a8:36:a8:62:0a:0d:91:a7:53:2c:79:b7: d7:e3:6e:49:e2:2e:6e:59:41:37:c9:d6:fb:f6:36:a7:54:42: 0a:46:b5:10:6f:ea:e7:67:a8:59:18:d6:19:c2:8c:11:7a:f7: 75:8c:3a:60:7d:cf:bc:80:1a:16:6e:d9:15:4b:96:16:89:3a: 88:4c:45:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIW3sAEkECeIO/fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk NGMzYmNjOGMtZDkzZC00MWI1LWExMWUtMzRkMmVhYTY2ZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLaP5yLrG7leQdyOO7AztnEObxJAbrae37Nr aEGFzfhChilMQcbjSw1nlxo6vdpEOrrAZZJd45hzo6xTtN3F6demWaCi5FWyef4k lvP8gSVs1UYVQW/rOn/hhu50XjrjxD/3+jIN5xsSALvm4XaFIoT+MhSByoYogNyM BQu1exSNzExoOMVFXlGNmbfNOcTCLvAh7c+u833j3VqcV+sFh5KX2gv/PCm+R7It kSH78NldWzgui2+yE3RXTITnPW4K017TsO5I7zfizD91nNSV7N6nMW1smh6hJVtM Cha2SysSQ4yOEw9rP37TD0rntbW23Aqfl2MFh0VZFbwBSCosOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZTNILklpCsBD6iaz5WbSqZAY/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGZkY2FhMjQtZTNiMC0z ZWNhLTk4M2EtYzg2NjQ2YjE2ZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKo2+unGqG8EBoTBXZiiKuXpf4xKwP8zjzJnVLK10U5t7iDFoED9xf/ pShKcNwz2PYxpLDW2vmJl9kvUkiei7HB1fJ2Wx218KocgjERRFrmsMJx7aWxonDB QiGTfov4teaqRK5G1KEc19UkiaGRyzHh+gaWAMNtWTuOQS9sVRFO7m1tp9cCL6HH riG1Ka315lchoDvCQIDBNV08IWAmI/EtR8UP00DstiHlVa3oTnRuXh/uddKfgwBS 6Kg2qGIKDZGnUyx5t9fjbkniLm5ZQTfJ1vv2NqdUQgpGtRBv6udnqFkY1hnCjBF6 93WMOmB9z7yAGhZu2RVLlhaJOohMRYk= -----END CERTIFICATE-----Generated at Sat Apr 26 19:20:46 2025 by rpki-client