$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2a3df30a-4781-3046-8e14-e9d3de17df29.roa File: 2a3df30a-4781-3046-8e14-e9d3de17df29.roa (raw, json) Hash identifier: HSeiUSwjcX22v0gAA1OOQePHFsu/7IviIrK0Gusggjo= Subject key identifier: 4F:76:F9:91:F3:D5:0E:FC:93:27:3F:AC:40:4C:C2:1B:76:2C:24:A4 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849A1B122564BFE1BD9009D9A80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2a3df30a-4781-3046-8e14-e9d3de17df29.roa Signing time: Thu 24 Apr 2025 10:55:52 +0000 ROA not before: Thu 24 Apr 2025 10:55:52 +0000 ROA not after: Wed 23 Jul 2025 10:55:52 +0000 asID: 43260 IP address blocks: 172.111.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b1:22:56:4b:fe:1b:d9:00:9d:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 24 10:55:52 2025 GMT Not After : Jul 23 10:55:52 2025 GMT Subject: CN=770a095d-32ef-4c40-a023-1ac36a8bb0cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ed:3e:d7:b8:60:44:6a:d1:53:66:45:46:2f: 90:90:8d:2b:04:04:92:2d:96:83:bf:02:77:94:13: 28:10:d2:0e:0a:fb:0d:b7:72:92:67:85:58:38:c8: aa:03:cb:87:9f:99:ac:43:7d:be:a4:d7:db:08:ce: 61:e7:35:b9:2c:e2:53:fb:62:e2:1d:14:fe:ae:f2: 4b:9a:a1:c4:6f:24:3c:e1:89:57:19:4e:b7:b1:bc: c1:87:f4:8d:01:9b:d8:c9:17:f4:16:d9:ed:df:be: a1:4d:39:6d:2e:81:20:42:ab:bf:31:9f:48:e3:67: 40:68:1f:bd:59:b3:1e:2f:ec:bc:8f:78:8b:db:c9: 35:75:32:e1:0c:a3:bf:8d:b5:8d:d0:73:c5:c2:6a: dd:da:fc:a2:c9:00:e2:47:2e:f8:0c:c5:c2:24:54: 14:fb:52:8c:1f:e1:23:2e:ca:dd:80:c0:1a:91:b1: 4a:c3:f5:4e:8a:a4:db:96:32:94:bd:d7:a5:29:e5: 49:1d:8d:d5:0b:63:19:d6:a2:b6:e9:ce:35:11:8a: 6e:42:b6:1a:05:30:20:92:b4:36:87:c4:e8:4c:64: f6:c7:ae:91:96:ca:c9:bf:77:85:e3:04:5e:4b:91: 6f:77:86:f1:3a:c3:e8:cd:3e:48:13:ea:e1:96:de: 2a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:76:F9:91:F3:D5:0E:FC:93:27:3F:AC:40:4C:C2:1B:76:2C:24:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2a3df30a-4781-3046-8e14-e9d3de17df29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:1f:6e:db:76:40:b1:74:d5:35:24:94:47:46:9e:a0:3b:65: d7:e8:7a:74:ed:c7:87:83:35:58:21:83:26:8d:e0:87:02:de: 83:36:ca:1a:e6:e5:a3:2e:e5:4d:00:be:e8:ed:ee:86:25:6c: 80:1d:56:66:05:69:ca:5d:cb:ad:e8:d4:e2:21:6f:7d:1e:74: 43:d8:1c:ce:44:6e:6c:b2:9b:a1:09:a1:42:d7:12:23:ba:ae: 36:5a:8d:24:bd:79:d7:47:f2:64:db:57:ff:6f:ef:58:aa:74: 35:d9:b3:1e:37:6d:f4:c1:72:b4:d3:97:dd:7d:c2:09:e3:88: 56:f5:bb:27:da:3e:22:3e:91:d6:48:cc:2f:a9:ef:38:4d:66: 6a:4b:25:39:c6:0b:4c:61:7e:7e:fa:90:4a:33:4d:79:5b:35: 8b:20:49:62:68:7c:bc:04:fc:03:ed:c6:d5:77:15:cb:00:98: 4c:5c:89:e4:6f:ef:5c:95:29:24:61:7d:7e:91:54:f7:d5:a1: f6:d3:1f:59:58:2f:e4:a1:07:43:4b:b9:d2:81:e6:3b:07:02: 2f:0e:96:2f:77:f9:e2:93:31:65:ba:fa:a9:be:a8:a1:84:57: 6c:94:2b:69:f9:50:1e:fd:c8:63:8d:1e:9a:8a:e9:77:fc:d1: 83:cb:7a:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhsSJWS/4b2QCdmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyNDEwNTU1MloXDTI1MDcyMzEwNTU1MlowLzEtMCsGA1UEAxMk NzcwYTA5NWQtMzJlZi00YzQwLWEwMjMtMWFjMzZhOGJiMGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu0+17hgRGrRU2ZFRi+QkI0rBASSLZaDvwJ3 lBMoENIOCvsNt3KSZ4VYOMiqA8uHn5msQ32+pNfbCM5h5zW5LOJT+2LiHRT+rvJL mqHEbyQ84YlXGU63sbzBh/SNAZvYyRf0Ftnt376hTTltLoEgQqu/MZ9I42dAaB+9 WbMeL+y8j3iL28k1dTLhDKO/jbWN0HPFwmrd2vyiyQDiRy74DMXCJFQU+1KMH+Ej LsrdgMAakbFKw/VOiqTbljKUvdelKeVJHY3VC2MZ1qK26c41EYpuQrYaBTAgkrQ2 h8ToTGT2x66RlsrJv3eF4wReS5Fvd4bxOsPozT5IE+rhlt4qIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE92+ZHz1Q78kyc/rEBMwht2LCSkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmEzZGYzMGEtNDc4MS0z MDQ2LThlMTQtZTlkM2RlMTdkZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgfbtt2QLF01TUklEdGnqA7ZdfoenTtx4eDNVghgyaN4IcC3oM2yhrm 5aMu5U0Avujt7oYlbIAdVmYFacpdy63o1OIhb30edEPYHM5Ebmyym6EJoULXEiO6 rjZajSS9eddH8mTbV/9v71iqdDXZsx43bfTBcrTTl919wgnjiFb1uyfaPiI+kdZI zC+p7zhNZmpLJTnGC0xhfn76kEozTXlbNYsgSWJofLwE/APtxtV3FcsAmExcieRv 71yVKSRhfX6RVPfVofbTH1lYL+ShB0NLudKB5jsHAi8Oli93+eKTMWW6+qm+qKGE V2yUK2n5UB79yGONHpqK6Xf80YPLevo= -----END CERTIFICATE-----Generated at Sat Apr 26 19:23:27 2025 by rpki-client