$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/97b861ab-5b89-3661-8626-d54ec5210d6c.roa File: 97b861ab-5b89-3661-8626-d54ec5210d6c.roa (raw, json) Hash identifier: j4kFiZaK6Cj0xBTCuKA9aq7CfZF2MCbAdv6HwArY5BA= Subject key identifier: 53:81:0D:FF:9D:F9:53:1D:3A:A2:55:40:E1:D8:79:8E:15:9A:5F:6E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858499C59E99C3AA580A394635990 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/97b861ab-5b89-3661-8626-d54ec5210d6c.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 53356 IP address blocks: 172.111.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:e9:9c:3a:a5:80:a3:94:63:59:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=c5062344-2a88-4846-9814-cf2a130e42ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2d:a6:ff:94:bf:75:3e:68:0b:15:69:18:d7: d8:b9:e2:91:d6:3c:f6:fb:3a:e0:18:0d:7a:86:07: 06:f3:2c:bb:ff:1c:53:11:18:e7:26:30:87:5a:96: eb:2a:cf:97:3f:c5:55:49:31:56:9b:c1:88:fc:39: e4:ef:34:17:7d:e5:55:96:1a:e1:c9:51:e6:ad:24: 95:03:40:48:0f:8b:a3:cd:b5:9f:f0:a0:9b:3e:ad: 67:e0:d6:36:a8:45:0a:d9:0d:7b:e3:0b:9f:af:55: cd:6f:7f:00:45:23:2a:ff:e1:c1:49:4e:12:b6:e2: 22:d4:9d:d3:fc:b9:d9:30:e8:57:4e:3f:fb:74:93: a0:2d:1c:a8:50:78:3f:28:87:09:ed:8f:be:1d:a1: e8:23:1e:3a:9f:c0:b7:94:ad:7c:48:f9:2c:1d:80: 87:28:54:61:db:ae:ef:aa:92:4a:28:c8:b7:46:1d: f1:0a:9a:64:4a:f2:1e:a1:ea:d6:26:88:60:f2:07: f1:db:f0:a0:c0:e9:f4:25:2d:36:b7:5f:01:b4:37: 9d:d2:0f:3d:19:a4:a9:2a:11:bf:32:ef:18:bb:17: 9d:c2:6e:26:8f:a4:93:63:7d:da:38:23:6e:36:be: 52:ec:1a:09:da:d6:20:12:bb:fa:99:29:15:e9:2b: 38:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:81:0D:FF:9D:F9:53:1D:3A:A2:55:40:E1:D8:79:8E:15:9A:5F:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/97b861ab-5b89-3661-8626-d54ec5210d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:3d:6b:de:72:0f:7b:8a:f9:4f:e2:7e:e7:2c:64:84:17:00: 16:33:e4:86:ee:2d:7c:3c:27:89:8a:7c:5f:49:77:d2:81:93: 6b:66:a7:89:f7:7b:c6:a0:f3:2d:11:21:9d:b8:25:ef:58:75: 3e:40:6e:6f:aa:8f:9a:c0:9e:22:92:c8:ac:1a:97:e3:9b:11: b3:4b:7c:f0:6a:43:05:a9:52:cd:2a:a8:1b:ee:40:f5:96:64: bd:94:12:76:58:58:39:52:ff:67:2b:69:62:47:bc:59:0d:c6: 74:1b:e9:a4:88:dd:ea:1e:1b:67:dd:91:91:8e:5a:76:67:6a: 53:40:30:10:21:48:16:68:d0:59:a4:3f:f9:20:ce:f5:88:0b: 5d:4b:c2:ff:aa:44:a5:8a:5a:e7:2e:d9:f4:ee:74:d7:62:9c: ba:c9:26:c2:f9:d9:a3:89:84:f7:cc:7b:62:41:f8:fe:fc:55: d0:2e:b4:99:81:e5:50:af:e8:7f:62:52:af:74:9b:4c:79:6d: 9c:f5:be:dd:37:86:ea:58:e3:42:b1:04:ce:89:af:da:b4:43: 3c:d9:37:ab:6d:2b:04:ff:66:e8:92:25:d9:16:0e:83:33:a7: bf:d7:4b:72:3d:56:dd:53:44:2a:23:fb:f2:26:99:27:a2:fa: 3a:ff:17:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWemcOqWAo5RjWZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk YzUwNjIzNDQtMmE4OC00ODQ2LTk4MTQtY2YyYTEzMGU0MmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC2m/5S/dT5oCxVpGNfYueKR1jz2+zrgGA16 hgcG8yy7/xxTERjnJjCHWpbrKs+XP8VVSTFWm8GI/Dnk7zQXfeVVlhrhyVHmrSSV A0BID4ujzbWf8KCbPq1n4NY2qEUK2Q174wufr1XNb38ARSMq/+HBSU4StuIi1J3T /LnZMOhXTj/7dJOgLRyoUHg/KIcJ7Y++HaHoIx46n8C3lK18SPksHYCHKFRh267v qpJKKMi3Rh3xCppkSvIeoerWJohg8gfx2/CgwOn0JS02t18BtDed0g89GaSpKhG/ Mu8Yuxedwm4mj6STY33aOCNuNr5S7BoJ2tYgErv6mSkV6Ss4UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOBDf+d+VMdOqJVQOHYeY4Vml9uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTdiODYxYWItNWI4OS0z NjYxLTg2MjYtZDU0ZWM1MjEwZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs9a95yD3uK+U/ifucsZIQXABYz5IbuLXw8J4mKfF9Jd9KBk2tmp4n3 e8ag8y0RIZ24Je9YdT5Abm+qj5rAniKSyKwal+ObEbNLfPBqQwWpUs0qqBvuQPWW ZL2UEnZYWDlS/2craWJHvFkNxnQb6aSI3eoeG2fdkZGOWnZnalNAMBAhSBZo0Fmk P/kgzvWIC11Lwv+qRKWKWucu2fTudNdinLrJJsL52aOJhPfMe2JB+P78VdAutJmB 5VCv6H9iUq90m0x5bZz1vt03hupY40KxBM6Jr9q0QzzZN6ttKwT/ZuiSJdkWDoMz p7/XS3I9Vt1TRCoj+/ImmSei+jr/F1Y= -----END CERTIFICATE-----Generated at Sat Apr 26 20:01:01 2025 by rpki-client