$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89c763ab-13dd-3b24-8c22-2a785ba3be64.roa File: 89c763ab-13dd-3b24-8c22-2a785ba3be64.roa (raw, json) Hash identifier: x8VVoAiMyfGKCBv7F7rx/xWRzodme2al8UIC7oO+Rys= Subject key identifier: 87:9B:14:F9:EB:64:9A:10:B3:01:A2:B8:11:AC:4D:5D:68:0B:CF:4E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848E8666077BD372338AA70E900 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89c763ab-13dd-3b24-8c22-2a785ba3be64.roa Signing time: Mon 17 Feb 2025 02:00:38 +0000 ROA not before: Mon 17 Feb 2025 02:00:38 +0000 ROA not after: Sun 18 May 2025 01:00:38 +0000 asID: 9009 IP address blocks: 172.111.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:66:60:77:bd:37:23:38:aa:70:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 17 02:00:38 2025 GMT Not After : May 18 01:00:38 2025 GMT Subject: CN=99c402f5-ea76-4b4f-a5f1-f4a047012c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d0:52:8e:9f:9a:45:5c:9a:7a:f5:e9:99:67: 69:9f:64:c5:06:b4:2b:6a:a7:52:ca:91:2c:e6:24: 45:e0:f3:55:f5:18:85:3c:6f:be:7b:ae:a4:1b:bf: f0:68:be:82:c5:ef:e6:f2:35:ef:77:64:1f:f7:4a: 82:5c:7c:50:8a:7f:6f:16:91:48:53:10:46:94:46: 26:9c:99:c1:c0:3c:cf:4d:af:1f:d0:c7:1d:36:5e: 78:22:1a:de:e7:3c:c9:a1:ce:73:97:93:4d:8b:a0: 08:b1:d0:84:96:7b:c4:63:fd:62:f0:57:e6:63:71: 5b:21:71:44:a7:1e:54:de:fd:d8:fe:0a:3f:a5:ee: f3:ab:06:42:69:82:5b:dd:35:74:f1:ff:40:e9:32: d4:07:66:29:8f:73:1c:ba:bd:3a:56:83:63:6b:23: 88:54:ac:7f:51:64:31:c0:bc:e5:a8:af:00:e1:21: a9:45:94:63:92:31:f1:07:8a:7d:8a:45:4b:8e:0e: 53:7d:60:86:43:4e:23:79:a4:ce:55:08:99:2c:d8: 91:a1:4d:38:cb:b2:4d:71:c8:12:52:76:48:35:3e: 16:62:0f:fc:f5:4b:c2:3d:08:e8:5e:1d:46:b3:fc: c1:bd:17:0a:4e:a6:9e:2d:96:a4:fd:bc:2b:ba:b5: 6e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9B:14:F9:EB:64:9A:10:B3:01:A2:B8:11:AC:4D:5D:68:0B:CF:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89c763ab-13dd-3b24-8c22-2a785ba3be64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c3:ca:08:e8:18:59:0f:cf:72:04:14:70:59:27:97:c1:1d: 0f:4e:5b:b5:c0:89:d3:3d:f3:78:2f:b3:9b:dd:b5:21:0e:d1: dc:a2:1c:e2:47:a5:6d:f9:c3:f8:33:10:cd:3e:c8:81:cc:70: 74:11:6c:56:65:6e:bf:f2:11:3d:fc:c4:bc:42:40:5a:44:9a: 4c:76:b0:13:f3:fe:94:59:96:c8:16:51:20:5b:4c:1c:46:8c: 35:ce:bc:ef:e4:15:8b:9f:2d:11:e1:38:e4:40:42:11:2b:8f: c9:88:37:2f:b4:ee:8e:8a:fa:c5:b2:29:9d:f7:d1:af:26:ce: e4:da:ec:c1:88:f0:0d:25:29:a1:f4:7c:a0:95:33:f2:d0:d6: 81:98:1c:96:dd:d6:10:dc:d5:02:c2:ac:47:c7:be:4a:6f:ad: c6:c9:40:02:fe:dc:71:ec:97:6a:61:26:a4:78:69:b6:4f:c3: ff:57:d2:3f:93:11:5f:76:d1:ee:af:7c:57:9f:1e:60:cc:a3: d5:b5:6a:7c:e2:63:95:d9:d5:af:c7:a8:89:5a:f3:10:8d:96: a6:4c:34:21:bd:6f:16:52:25:a4:6e:b7:cd:1d:48:0e:27:db: d3:3a:f6:b8:55:a9:3d:18:ba:e5:b2:5b:6b:40:7d:12:f4:d4: 20:1d:02:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZmB3vTcjOKpw6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk OTljNDAyZjUtZWE3Ni00YjRmLWE1ZjEtZjRhMDQ3MDEyYzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNBSjp+aRVyaevXpmWdpn2TFBrQraqdSypEs 5iRF4PNV9RiFPG++e66kG7/waL6Cxe/m8jXvd2Qf90qCXHxQin9vFpFIUxBGlEYm nJnBwDzPTa8f0McdNl54Ihre5zzJoc5zl5NNi6AIsdCElnvEY/1i8FfmY3FbIXFE px5U3v3Y/go/pe7zqwZCaYJb3TV08f9A6TLUB2Ypj3Mcur06VoNjayOIVKx/UWQx wLzlqK8A4SGpRZRjkjHxB4p9ikVLjg5TfWCGQ04jeaTOVQiZLNiRoU04y7JNccgS UnZINT4WYg/89UvCPQjoXh1Gs/zBvRcKTqaeLZak/bwrurVu9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIebFPnrZJoQswGiuBGsTV1oC89OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODljNzYzYWItMTNkZC0z YjI0LThjMjItMmE3ODViYTNiZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjDygjoGFkPz3IEFHBZJ5fBHQ9OW7XAidM983gvs5vdtSEO0dyiHOJH pW35w/gzEM0+yIHMcHQRbFZlbr/yET38xLxCQFpEmkx2sBPz/pRZlsgWUSBbTBxG jDXOvO/kFYufLRHhOORAQhErj8mINy+07o6K+sWyKZ330a8mzuTa7MGI8A0lKaH0 fKCVM/LQ1oGYHJbd1hDc1QLCrEfHvkpvrcbJQAL+3HHsl2phJqR4abZPw/9X0j+T EV920e6vfFefHmDMo9W1anziY5XZ1a/HqIla8xCNlqZMNCG9bxZSJaRut80dSA4n 29M69rhVqT0YuuWyW2tAfRL01CAdAls= -----END CERTIFICATE-----Generated at Sat Apr 26 16:16:02 2025 by rpki-client