$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/321d9a01-1eab-3340-95bf-2be6da2ee8ae.roa File: 321d9a01-1eab-3340-95bf-2be6da2ee8ae.roa (raw, json) Hash identifier: 00ESOrBj+BIyJG5qK9IWZ9ycdTSM88W467g4Z8QL2nY= Subject key identifier: C8:3B:55:EF:0C:BC:B5:90:0D:59:D5:C9:BA:61:D9:57:48:1D:C4:E2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848FF9C1400FFBFE73E30700680 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/321d9a01-1eab-3340-95bf-2be6da2ee8ae.roa Signing time: Tue 25 Feb 2025 09:32:30 +0000 ROA not before: Tue 25 Feb 2025 09:32:30 +0000 ROA not after: Mon 26 May 2025 08:32:30 +0000 asID: 329007 IP address blocks: 172.111.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ff:9c:14:00:ff:bf:e7:3e:30:70:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 25 09:32:30 2025 GMT Not After : May 26 08:32:30 2025 GMT Subject: CN=106d28a2-8aee-491a-b935-939200235807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:e9:09:f7:08:10:3f:76:24:0f:18:32:22: 7b:5e:51:fe:71:6d:b8:6f:bf:7a:39:7e:3f:35:16: 8f:83:4e:8d:64:b4:74:b9:6a:1d:7f:6f:d1:e4:0a: dc:f0:3e:ac:76:17:81:46:f6:3a:92:57:af:3d:5a: fd:9b:22:ac:5e:30:01:62:a2:2f:81:cd:f3:7e:c1: 6d:10:2a:a0:0c:2a:3d:2b:ec:69:f3:77:83:ad:a5: 01:7d:cb:b9:57:a6:89:92:d5:b0:47:63:75:bf:d4: 9c:f5:78:fa:8f:80:d9:7b:66:56:1f:ef:60:69:da: 3e:d7:c2:17:31:4a:ca:b9:5c:aa:e6:a8:1f:00:b1: 75:89:a5:9c:95:66:87:40:db:c5:15:20:4a:51:b8: 9a:0a:12:01:a7:e7:33:ef:ae:f0:ad:1e:09:9e:e4: 95:f4:08:22:38:8b:ed:85:72:cb:ac:73:e4:e6:b6: 85:af:3e:3f:f3:db:a0:53:33:63:84:02:e1:a6:05: 1e:c7:b6:aa:04:82:fd:59:3a:52:06:30:a4:30:65: 9a:91:95:3b:d7:dc:ec:0b:6a:41:e9:4b:96:b6:6d: 4e:dd:2b:2f:df:01:a0:a5:a0:c1:64:c3:9a:df:f3: 14:ef:12:6d:88:12:01:de:8f:ce:fa:0c:46:62:54: a3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3B:55:EF:0C:BC:B5:90:0D:59:D5:C9:BA:61:D9:57:48:1D:C4:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/321d9a01-1eab-3340-95bf-2be6da2ee8ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:16:c2:37:09:40:7b:55:22:2c:a5:d4:11:59:7d:62:b1:e3: ba:e1:89:3f:39:2d:b7:17:55:9a:c0:5f:38:dd:23:43:e9:68: 98:42:e1:81:90:4d:03:81:6f:33:bd:a0:a5:0d:63:75:48:8f: 54:e6:66:e7:2d:1f:b4:39:9d:4b:1d:b9:f2:ee:6d:e5:98:a8: 05:3c:a7:23:fc:68:d8:36:cc:0e:dd:bb:c0:50:bf:c1:84:37: d8:9b:17:64:ae:bf:24:4c:45:b7:9c:5c:a6:65:6b:fd:72:ba: 9a:b4:5d:b7:0b:1f:75:9c:23:3d:95:bf:17:e5:c5:61:71:79: a8:24:77:4e:a8:9d:16:61:d4:57:7b:f0:f3:ea:79:5d:b2:97: 68:ea:54:a8:09:bf:8a:6a:25:31:68:89:be:6b:f8:e2:ae:fb: 70:51:2b:2b:fd:ba:0d:5f:b9:05:45:b3:d2:b1:72:88:e7:9f: 74:99:b5:32:e0:94:cd:66:ce:af:2f:f4:ec:a0:f1:52:de:10: 56:cf:e3:0a:53:aa:8d:0b:fd:2c:10:6e:c0:de:b4:a4:1a:7a: 39:80:c4:9a:67:65:62:ba:1d:a6:f5:1c:d0:fd:e1:d3:ad:a7: ff:c2:3f:37:75:c6:ac:05:db:ba:fd:3d:a1:d0:c8:01:cd:e5: 9c:f0:95:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj/nBQA/7/nPjBwBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIyNTA5MzIzMFoXDTI1MDUyNjA4MzIzMFowLzEtMCsGA1UEAxMk MTA2ZDI4YTItOGFlZS00OTFhLWI5MzUtOTM5MjAwMjM1ODA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIbpCfcIED92JA8YMiJ7XlH+cW24b796OX4/ NRaPg06NZLR0uWodf2/R5Arc8D6sdheBRvY6klevPVr9myKsXjABYqIvgc3zfsFt ECqgDCo9K+xp83eDraUBfcu5V6aJktWwR2N1v9Sc9Xj6j4DZe2ZWH+9gado+18IX MUrKuVyq5qgfALF1iaWclWaHQNvFFSBKUbiaChIBp+cz767wrR4JnuSV9AgiOIvt hXLLrHPk5raFrz4/89ugUzNjhALhpgUex7aqBIL9WTpSBjCkMGWakZU719zsC2pB 6UuWtm1O3Ssv3wGgpaDBZMOa3/MU7xJtiBIB3o/O+gxGYlSjzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMg7Ve8MvLWQDVnVybph2VdIHcTiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzIxZDlhMDEtMWVhYi0z MzQwLTk1YmYtMmJlNmRhMmVlOGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcWwjcJQHtVIiyl1BFZfWKx47rhiT85LbcXVZrAXzjdI0PpaJhC4YGQ TQOBbzO9oKUNY3VIj1TmZuctH7Q5nUsdufLubeWYqAU8pyP8aNg2zA7du8BQv8GE N9ibF2SuvyRMRbecXKZla/1yupq0XbcLH3WcIz2VvxflxWFxeagkd06onRZh1Fd7 8PPqeV2yl2jqVKgJv4pqJTFoib5r+OKu+3BRKyv9ug1fuQVFs9Kxcojnn3SZtTLg lM1mzq8v9Oyg8VLeEFbP4wpTqo0L/SwQbsDetKQaejmAxJpnZWK6Hab1HND94dOt p//CPzd1xqwF27r9PaHQyAHN5ZzwlbI= -----END CERTIFICATE-----Generated at Sun Apr 27 03:49:42 2025 by rpki-client