$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/59a0a363-a10c-37c6-aaa4-73a27e3485ac.roa File: 59a0a363-a10c-37c6-aaa4-73a27e3485ac.roa (raw, json) Hash identifier: NnC7SNP+o31yLtoyZyRB9VMqo8VwJ2R4aEc00IoJ4dc= Subject key identifier: A3:05:A7:CA:82:BA:07:85:E8:51:B8:97:DB:B8:97:19:32:28:3B:82 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848E86660221B6D0A238434FA00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/59a0a363-a10c-37c6-aaa4-73a27e3485ac.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 45671 IP address blocks: 172.111.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:60:22:1b:6d:0a:23:84:34:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=6f267276-f507-4b5c-b645-000935e9a08f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e6:f5:14:a4:86:1c:95:ca:01:fe:cc:29:96: 05:6b:67:5f:69:d5:13:78:62:18:36:5e:57:96:0d: 64:1d:88:4b:a5:08:a0:ee:87:2f:7e:64:ee:df:43: 63:17:1c:02:ee:58:b4:e3:6d:8a:c5:4e:77:7d:20: 04:e1:42:6d:39:0e:e9:67:ba:61:de:e2:17:54:cd: 17:f0:d3:64:d8:41:b8:0d:78:97:2b:28:eb:b9:6a: cd:31:e9:93:23:2f:be:70:80:bc:cb:7d:5c:c9:b7: 2c:74:cf:f8:0e:05:a3:70:9c:6d:7a:2c:58:0c:06: 43:22:d8:29:c2:39:e9:62:bc:c8:13:b2:d6:6a:b0: 80:0a:16:92:10:3b:cf:8e:65:e6:8d:d3:45:48:08: 03:d4:5e:6d:78:0a:4c:1c:61:cf:5e:20:cd:a0:40: f9:27:62:9c:7e:de:19:64:a4:97:43:71:ca:85:98: 38:50:a2:4d:4a:d7:f0:50:64:5e:cd:9c:26:2c:92: d5:ba:3e:6e:b8:f5:6b:6f:64:ed:0f:a2:cd:49:fe: c4:96:28:7a:b6:4a:14:43:52:e2:80:04:38:67:f2: 45:a2:fb:47:b8:2f:b7:1f:14:77:a0:f1:01:0d:1b: 04:42:87:8b:7d:98:88:54:28:55:df:bb:21:1e:a5: 4f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:05:A7:CA:82:BA:07:85:E8:51:B8:97:DB:B8:97:19:32:28:3B:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/59a0a363-a10c-37c6-aaa4-73a27e3485ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:23:a5:f5:a1:f3:b2:17:af:ec:16:a1:75:f4:85:bb:4d:84: c3:c9:8e:3f:1b:85:73:72:2e:16:43:61:b3:a5:81:4d:a7:54: 38:9f:fa:f6:9b:14:79:94:8f:c0:cd:62:71:0b:c6:1a:16:f2: 84:fd:1a:55:b9:10:eb:c2:ba:0a:9f:a6:60:1d:eb:85:52:dc: af:2a:77:68:b1:72:16:59:e6:00:23:e9:57:f9:39:ca:d8:12: fb:91:c8:24:32:6e:68:f2:5e:2e:96:29:ee:cb:ff:e4:1e:22: 7e:14:9d:18:e1:db:fb:9a:25:d4:cb:7c:85:95:e6:b8:f2:23: b9:14:d5:8f:64:60:0d:30:50:6f:7e:0a:24:41:da:2e:96:f2: e9:c9:e8:48:ac:8f:97:a8:64:c4:26:2d:6d:fb:34:37:30:3d: 0e:62:1f:a4:aa:c8:39:d3:89:97:2d:ef:d6:e9:bc:5c:6e:26: 65:5a:cb:06:c8:bd:72:86:27:47:df:e8:02:3f:4e:c7:07:5b: ac:81:2c:89:f1:d7:b9:19:91:ce:b1:7b:b7:42:27:9c:b9:81: 3b:55:63:2e:2c:bc:17:ce:99:07:0f:0d:c4:e4:de:ab:7c:e9: ff:f6:d7:4d:06:10:e8:f3:6d:5a:d8:56:ab:09:13:98:b4:bd: 31:2b:67:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZmAiG20KI4Q0+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk NmYyNjcyNzYtZjUwNy00YjVjLWI2NDUtMDAwOTM1ZTlhMDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOb1FKSGHJXKAf7MKZYFa2dfadUTeGIYNl5X lg1kHYhLpQig7ocvfmTu30NjFxwC7li0422KxU53fSAE4UJtOQ7pZ7ph3uIXVM0X 8NNk2EG4DXiXKyjruWrNMemTIy++cIC8y31cybcsdM/4DgWjcJxteixYDAZDItgp wjnpYrzIE7LWarCAChaSEDvPjmXmjdNFSAgD1F5teApMHGHPXiDNoED5J2Kcft4Z ZKSXQ3HKhZg4UKJNStfwUGRezZwmLJLVuj5uuPVrb2TtD6LNSf7Elih6tkoUQ1Li gAQ4Z/JFovtHuC+3HxR3oPEBDRsEQoeLfZiIVChV37shHqVPnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMFp8qCugeF6FG4l9u4lxkyKDuCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTlhMGEzNjMtYTEwYy0z N2M2LWFhYTQtNzNhMjdlMzQ4NWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQjpfWh87IXr+wWoXX0hbtNhMPJjj8bhXNyLhZDYbOlgU2nVDif+vab FHmUj8DNYnELxhoW8oT9GlW5EOvCugqfpmAd64VS3K8qd2ixchZZ5gAj6Vf5OcrY EvuRyCQybmjyXi6WKe7L/+QeIn4UnRjh2/uaJdTLfIWV5rjyI7kU1Y9kYA0wUG9+ CiRB2i6W8unJ6Eisj5eoZMQmLW37NDcwPQ5iH6SqyDnTiZct79bpvFxuJmVaywbI vXKGJ0ff6AI/TscHW6yBLInx17kZkc6xe7dCJ5y5gTtVYy4svBfOmQcPDcTk3qt8 6f/2100GEOjzbVrYVqsJE5i0vTErZ/Y= -----END CERTIFICATE-----Generated at Sat Apr 26 15:56:49 2025 by rpki-client