$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa File: 33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa (raw, json) Hash identifier: 5vRv5EsD+DuFi4jS1x+HeqbNzvXk+JCJ0rqGGle267Y= Subject key identifier: 35:4C:33:E8:36:EC:3D:2D:E9:86:DA:25:AD:87:BC:40:B3:FA:3E:2F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584929E3CD13C43805BC8D731200 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 9009 IP address blocks: 172.111.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:cd:13:c4:38:05:bc:8d:73:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=5c1172ce-e812-4412-839c-6dfa17c34623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:47:ff:33:f0:b9:e6:40:91:e8:9d:c9:35:82: 61:8a:e9:80:6e:05:f0:ee:4d:26:88:e0:cb:6d:5d: 7e:c1:e9:a9:83:01:a8:65:a0:a4:35:4a:9f:a3:83: df:85:a3:db:69:ee:53:ec:2c:58:42:91:6b:e4:a9: d2:2f:49:9c:d2:d8:a8:4c:75:40:43:9e:7d:7e:50: ca:3c:e6:2a:a5:63:16:93:b7:38:20:82:b8:5f:d6: 1f:24:08:da:e2:ee:eb:01:69:78:b1:7a:89:a6:b3: a0:d9:85:36:2e:bc:6d:5a:9a:a5:ae:ab:c7:20:82: 18:79:b2:7c:17:5d:8f:17:d0:82:63:53:40:02:a4: 64:2f:2b:67:0a:df:4a:bf:06:19:17:aa:d5:c0:af: 68:d6:e8:52:30:56:f5:1d:26:5a:91:91:7d:d8:35: aa:fc:89:f7:cb:08:54:ba:c8:57:c0:1a:7b:aa:c1: 70:46:d4:af:67:fc:1e:35:d4:2e:f0:40:75:cc:3e: 1d:98:c3:70:0f:36:3e:2b:37:de:8a:49:40:7e:2d: 36:bb:4c:0b:c4:bf:da:7c:7e:76:3c:97:9d:38:30: b4:5b:aa:6d:2f:c2:73:9d:63:ae:9d:e5:04:04:ba: 7b:74:4d:99:b6:7f:0a:25:14:1f:88:6c:96:6e:10: f6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4C:33:E8:36:EC:3D:2D:E9:86:DA:25:AD:87:BC:40:B3:FA:3E:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:5a:a5:81:09:d4:ba:51:ff:91:43:cd:65:7e:90:11:17:65: df:7c:e4:4c:57:56:05:18:3a:7f:fc:bf:96:92:c1:16:9d:ba: 7f:ca:7b:42:63:f1:29:1e:7e:f1:15:aa:73:4e:5e:b3:60:57: ba:81:3c:e1:9d:b6:0b:69:47:4c:46:ab:14:ee:60:7e:ff:05: 79:78:66:81:0d:5d:dd:af:03:32:fe:d5:ae:01:69:61:c8:19: ae:0e:63:9e:fe:5a:60:ec:3f:a7:7d:b7:4f:84:bb:4a:94:3b: 62:51:e1:29:c1:9b:be:35:40:3a:2a:b9:31:a8:74:58:70:24: 94:c0:27:a6:e0:af:1b:f3:46:80:2d:4a:bb:7d:15:35:aa:c6: 6f:79:9a:c5:85:2b:10:1b:dd:30:ae:cd:b0:d1:8a:3b:92:40: 95:b6:07:34:ef:ee:21:ee:2f:3e:b7:49:75:ac:ab:7e:d5:ce: 29:6a:01:ca:77:89:01:ca:77:19:6b:f6:a8:39:18:11:b7:8c: 32:c4:6d:df:26:93:db:fe:07:f9:f6:87:a6:98:a8:18:63:58: 0e:41:64:b3:ef:95:1d:ce:22:e7:81:17:b3:d4:8d:3a:89:04: b5:95:5f:26:b5:b6:80:00:b9:53:86:46:0d:8c:62:f1:70:c2: d5:ab:0a:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkp480TxDgFvI1zEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk NWMxMTcyY2UtZTgxMi00NDEyLTgzOWMtNmRmYTE3YzM0NjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0f/M/C55kCR6J3JNYJhiumAbgXw7k0miODL bV1+wempgwGoZaCkNUqfo4PfhaPbae5T7CxYQpFr5KnSL0mc0tioTHVAQ559flDK POYqpWMWk7c4IIK4X9YfJAja4u7rAWl4sXqJprOg2YU2LrxtWpqlrqvHIIIYebJ8 F12PF9CCY1NAAqRkLytnCt9KvwYZF6rVwK9o1uhSMFb1HSZakZF92DWq/In3ywhU ushXwBp7qsFwRtSvZ/weNdQu8EB1zD4dmMNwDzY+KzfeiklAfi02u0wLxL/afH52 PJedODC0W6ptL8JznWOuneUEBLp7dE2Ztn8KJRQfiGyWbhD2IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVMM+g27D0t6YbaJa2HvECz+j4vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzNhMGZmMzItYmFiZS0z YmRmLTg0NDEtYmIxZTgxYjBhOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBapYEJ1LpR/5FDzWV+kBEXZd985ExXVgUYOn/8v5aSwRadun/Ke0Jj 8SkefvEVqnNOXrNgV7qBPOGdtgtpR0xGqxTuYH7/BXl4ZoENXd2vAzL+1a4BaWHI Ga4OY57+WmDsP6d9t0+Eu0qUO2JR4SnBm741QDoquTGodFhwJJTAJ6bgrxvzRoAt Srt9FTWqxm95msWFKxAb3TCuzbDRijuSQJW2BzTv7iHuLz63SXWsq37VzilqAcp3 iQHKdxlr9qg5GBG3jDLEbd8mk9v+B/n2h6aYqBhjWA5BZLPvlR3OIueBF7PUjTqJ BLWVXya1toAAuVOGRg2MYvFwwtWrCr0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:20:21 2025 by rpki-client