$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2d3a7e40-3bd7-35c9-a1e1-4812dfee4865.roa File: 2d3a7e40-3bd7-35c9-a1e1-4812dfee4865.roa (raw, json) Hash identifier: h6coubZFXl444OZuQcyv4MbN+i5utifGrAuN4I4/qKc= Subject key identifier: 3D:33:1C:49:23:33:95:8C:24:B6:6F:C5:B0:51:F8:3B:48:66:99:2D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858499C59E98AE68B1D507A7D7240 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2d3a7e40-3bd7-35c9-a1e1-4812dfee4865.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 53356 IP address blocks: 172.111.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:e9:8a:e6:8b:1d:50:7a:7d:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=0025cda5-021e-4eb8-b605-22561528ac8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:42:05:45:02:1e:c7:fe:1a:87:ba:f1:b1:ea: c2:ec:e5:fc:9f:e9:4a:8f:7e:3a:55:6b:36:6f:96: ed:05:a3:98:47:b2:cf:6d:ce:62:6b:06:f8:15:46: 40:4d:bb:ae:9a:0f:84:b2:69:bd:b2:61:45:89:98: c6:cc:9f:74:4f:48:79:d4:43:48:97:72:50:eb:7a: c0:94:3d:9f:09:e5:a9:2a:78:3c:67:12:d3:6c:38: 58:47:59:7b:16:c4:d2:94:32:2a:76:1d:b2:8b:72: 40:c3:b9:3d:41:90:9c:73:b5:5f:6a:b6:30:e2:b2: 5e:c4:c9:a5:81:76:ce:0b:19:91:77:9b:44:42:3b: 76:e8:48:dd:57:10:48:a0:3a:5a:91:08:de:37:9d: 90:57:d5:4f:b6:de:ee:00:52:c4:24:2e:b0:ed:c8: 7b:5c:bc:c0:0e:24:d4:b5:78:f2:41:75:7c:2c:d4: 2a:74:24:eb:c6:eb:b7:00:ee:6a:35:7b:4a:f4:74: 31:78:e0:db:85:a1:5d:29:3e:78:c8:80:de:aa:9d: 06:3c:07:b0:d0:5f:89:7f:51:46:46:a0:55:5e:ce: 53:d1:64:19:12:59:e9:ff:f1:c6:d3:fb:9c:0a:7c: 90:64:12:f1:2b:62:e5:99:34:30:d5:e3:32:55:1f: 65:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:33:1C:49:23:33:95:8C:24:B6:6F:C5:B0:51:F8:3B:48:66:99:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2d3a7e40-3bd7-35c9-a1e1-4812dfee4865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ae:dc:3c:0b:fc:9d:62:8e:c9:38:cc:81:78:08:ee:ce:5d: 0c:ac:a2:84:6b:d5:e2:8d:a5:e9:54:a1:6f:62:c0:25:04:19: 85:fc:42:6a:e5:4b:6f:ed:a9:23:f5:6e:5d:de:af:94:00:90: 38:71:96:5f:79:23:57:73:cc:5e:09:31:51:30:c2:97:cf:b3: ff:46:c1:aa:cd:e6:7e:c8:de:18:4d:76:a1:51:64:42:a2:36: 7c:22:7f:0d:d4:c5:52:0b:67:ed:bf:cb:0f:db:f9:88:94:1d: 50:5a:55:a9:81:a2:a6:ad:14:3c:c8:74:f9:a0:56:18:d7:f6: e0:0c:cd:02:7b:6c:a9:d7:d8:39:fa:26:10:97:f6:90:be:4a: 3d:6c:32:e8:3a:6c:04:21:55:42:85:11:fe:63:9f:5d:3a:56: 71:db:40:de:3a:d5:d2:9a:16:9b:e2:e6:40:97:10:84:fb:54: 77:1b:60:e4:e3:25:19:f2:81:f4:c3:de:ca:73:81:b4:ed:3c: ad:73:f3:04:c8:c1:96:31:8c:bf:09:30:44:34:a3:82:8d:2a: d5:2b:fa:f8:e9:5b:80:43:95:db:78:e3:b3:10:03:67:63:47: 37:70:10:84:6e:eb:7e:a2:1a:e1:8c:c9:3c:10:b2:ae:02:67: 8c:d9:6a:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWemK5osdUHp9ckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk MDAyNWNkYTUtMDIxZS00ZWI4LWI2MDUtMjI1NjE1MjhhYzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEIFRQIex/4ah7rxserC7OX8n+lKj346VWs2 b5btBaOYR7LPbc5iawb4FUZATbuumg+Esmm9smFFiZjGzJ90T0h51ENIl3JQ63rA lD2fCeWpKng8ZxLTbDhYR1l7FsTSlDIqdh2yi3JAw7k9QZCcc7VfarYw4rJexMml gXbOCxmRd5tEQjt26EjdVxBIoDpakQjeN52QV9VPtt7uAFLEJC6w7ch7XLzADiTU tXjyQXV8LNQqdCTrxuu3AO5qNXtK9HQxeODbhaFdKT54yIDeqp0GPAew0F+Jf1FG RqBVXs5T0WQZElnp//HG0/ucCnyQZBLxK2LlmTQw1eMyVR9l3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0zHEkjM5WMJLZvxbBR+DtIZpktMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmQzYTdlNDAtM2JkNy0z NWM5LWExZTEtNDgxMmRmZWU0ODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeu3DwL/J1ijsk4zIF4CO7OXQysooRr1eKNpelUoW9iwCUEGYX8Qmrl S2/tqSP1bl3er5QAkDhxll95I1dzzF4JMVEwwpfPs/9GwarN5n7I3hhNdqFRZEKi Nnwifw3UxVILZ+2/yw/b+YiUHVBaVamBoqatFDzIdPmgVhjX9uAMzQJ7bKnX2Dn6 JhCX9pC+Sj1sMug6bAQhVUKFEf5jn106VnHbQN461dKaFpvi5kCXEIT7VHcbYOTj JRnygfTD3spzgbTtPK1z8wTIwZYxjL8JMEQ0o4KNKtUr+vjpW4BDldt447MQA2dj RzdwEIRu636iGuGMyTwQsq4CZ4zZapU= -----END CERTIFICATE-----Generated at Sat Apr 26 19:54:50 2025 by rpki-client