$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/623bb9fc-c963-3f91-a5c8-8cb92677297b.roa File: 623bb9fc-c963-3f91-a5c8-8cb92677297b.roa (raw, json) Hash identifier: QSb043/cBBA77OLIb8LWgqGg5hiYtM3+jdkFwcHc2rg= Subject key identifier: 9A:62:FD:9F:8D:D4:48:10:92:49:12:80:F7:00:98:46:B2:00:77:39 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858499C59E9446AAE2210C89D6A20 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/623bb9fc-c963-3f91-a5c8-8cb92677297b.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 53356 IP address blocks: 172.111.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:e9:44:6a:ae:22:10:c8:9d:6a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=9e71b7e0-ef81-4fa7-a236-edbe8961383d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:47:89:b2:22:f5:b5:9e:c9:32:55:a2:6d:be: 84:41:7d:0f:b2:85:e0:27:0c:72:b5:a9:fb:ca:48: 94:b6:a0:e8:4e:73:b9:80:55:41:a1:17:65:be:ce: 2c:e1:6c:9b:a8:a3:05:6a:8e:6b:10:18:3e:af:d7: 15:a8:a0:a2:4a:20:04:8a:fa:67:96:83:f2:bd:c2: 24:03:be:b8:f2:2b:da:96:72:1e:ba:df:8f:12:7a: c9:f3:2c:77:0e:4b:ed:a7:61:5e:30:8f:0f:26:77: 83:1f:2a:16:c5:99:7f:e1:74:1f:03:ec:ce:7c:ce: 6a:55:00:99:ea:0b:8f:4f:ba:b0:2f:f5:ae:b3:78: b5:7d:05:04:40:3d:75:e7:9d:09:c8:d9:0b:8d:9b: 96:41:ea:95:01:0c:ba:ea:40:8f:58:21:44:cf:83: 64:2a:8d:9f:03:4c:cd:ab:01:b3:2b:b4:49:3b:f1: c2:55:fd:1a:0f:9f:84:80:db:70:a9:0b:13:7b:6e: e8:b3:c8:30:31:b1:18:a4:e2:b5:a0:e5:4c:ad:d5: d3:73:c2:ee:f5:02:7a:9f:26:70:b5:b3:8b:64:a2: cb:94:be:54:ac:3b:16:fe:73:9a:3e:f4:15:8f:ee: 29:41:ec:33:55:8b:6a:60:40:e7:5a:f2:7d:90:1b: cc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:62:FD:9F:8D:D4:48:10:92:49:12:80:F7:00:98:46:B2:00:77:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/623bb9fc-c963-3f91-a5c8-8cb92677297b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d9:c6:2f:32:25:ed:d4:bd:f4:af:de:44:07:f7:00:6f:b4: 8d:c3:46:64:c0:8e:5f:ff:29:5b:ff:4f:89:35:c2:e9:b7:bc: 07:28:84:21:a6:53:4c:b0:d5:80:24:74:ea:6a:23:b8:39:76: 77:ec:6d:3f:44:f0:cc:90:0f:a7:97:b6:65:82:e9:4f:ce:4c: e2:43:82:d7:b8:03:75:2b:7f:c9:0e:ce:b7:61:21:4e:8c:2c: 99:0a:71:0a:be:3a:2a:e9:c7:bd:f0:17:eb:69:10:bc:0c:82: ec:78:99:e1:13:d4:b6:66:f4:f1:32:93:ff:57:62:f6:4c:3d: 5c:f2:66:29:9c:99:fb:d2:6e:28:b6:4f:71:a4:06:f0:f1:40: 3a:60:c7:2d:4c:02:9c:ef:67:6e:2a:f5:86:84:c2:25:55:15: dc:4a:47:d7:f7:b2:4e:28:5c:9d:c3:aa:80:0e:6b:d3:c7:5a: 64:d9:4f:76:c9:17:0e:78:dd:bd:fb:b4:49:a4:8b:e7:0a:b5: ef:45:2a:b7:89:7e:0a:d2:96:c1:52:7e:b1:f3:02:15:64:dc: 04:51:35:d2:78:ce:6d:0b:ca:02:8e:4d:87:13:c6:14:2b:7c: ba:c3:95:db:6b:77:0d:c7:2f:d3:75:ea:28:69:4c:24:8c:8f: 88:03:67:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWelEaq4iEMidaiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk OWU3MWI3ZTAtZWY4MS00ZmE3LWEyMzYtZWRiZTg5NjEzODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkeJsiL1tZ7JMlWibb6EQX0PsoXgJwxytan7 ykiUtqDoTnO5gFVBoRdlvs4s4WybqKMFao5rEBg+r9cVqKCiSiAEivpnloPyvcIk A7648ivalnIeut+PEnrJ8yx3Dkvtp2FeMI8PJneDHyoWxZl/4XQfA+zOfM5qVQCZ 6guPT7qwL/Wus3i1fQUEQD11550JyNkLjZuWQeqVAQy66kCPWCFEz4NkKo2fA0zN qwGzK7RJO/HCVf0aD5+EgNtwqQsTe27os8gwMbEYpOK1oOVMrdXTc8Lu9QJ6nyZw tbOLZKLLlL5UrDsW/nOaPvQVj+4pQewzVYtqYEDnWvJ9kBvMUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpi/Z+N1EgQkkkSgPcAmEayAHc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjIzYmI5ZmMtYzk2My0z ZjkxLWE1YzgtOGNiOTI2NzcyOTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjZxi8yJe3UvfSv3kQH9wBvtI3DRmTAjl//KVv/T4k1wum3vAcohCGm U0yw1YAkdOpqI7g5dnfsbT9E8MyQD6eXtmWC6U/OTOJDgte4A3Urf8kOzrdhIU6M LJkKcQq+Oirpx73wF+tpELwMgux4meET1LZm9PEyk/9XYvZMPVzyZimcmfvSbii2 T3GkBvDxQDpgxy1MApzvZ24q9YaEwiVVFdxKR9f3sk4oXJ3DqoAOa9PHWmTZT3bJ Fw543b37tEmki+cKte9FKreJfgrSlsFSfrHzAhVk3ARRNdJ4zm0LygKOTYcTxhQr fLrDldtrdw3HL9N16ihpTCSMj4gDZ8w= -----END CERTIFICATE-----Generated at Sat Apr 26 19:59:33 2025 by rpki-client