$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa File: 98c89c7a-b014-3805-924d-4831141ca4b6.roa (raw, json) Hash identifier: Uyq25gJFYEsC+VzPeH2LFO+UWiQ3gQfUD++EJgInJMQ= Subject key identifier: 33:CE:47:E4:48:D4:1C:16:ED:30:9C:4E:BB:BA:15:F7:42:39:AB:F1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584944693C7429F9C07174F188C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 137409 IP address blocks: 172.111.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:3c:74:29:f9:c0:71:74:f1:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=63ece672-ee79-4948-8bcb-21e4244a84e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:50:ce:79:69:74:f1:3a:8e:2a:46:02:ce:61: e0:8b:1b:13:e0:ea:03:d8:54:54:15:c3:14:cd:b1: 9e:30:e3:cd:eb:6f:43:39:75:f9:d7:d4:37:21:13: 1e:2e:19:84:af:8e:62:5c:d6:c4:f5:d3:bf:b8:3e: ad:78:7c:6f:5e:55:54:25:67:d9:2f:ad:57:eb:91: ee:c2:83:51:b3:ec:2e:4d:11:01:42:e1:00:cd:d3: ac:b0:3c:94:02:f0:35:0d:7f:55:75:b0:e1:62:50: c5:ca:9f:ba:38:8d:bb:ff:8b:1b:fb:63:59:7f:9f: 67:1a:4d:a1:6b:55:61:af:e8:80:8c:31:71:1b:8b: 65:a8:fd:d6:8a:df:fd:79:4f:3e:5e:ba:25:1d:27: 10:92:33:13:0b:cb:3c:05:bb:ef:a1:fd:3d:cb:d0: 13:d6:e7:34:52:3a:38:6d:c4:d3:28:5b:82:69:cd: c9:21:33:88:1b:cc:a8:f3:1e:b1:0c:30:dc:bb:08: 1e:e2:66:2a:3b:3d:66:7e:a9:f8:3c:c8:02:24:c8: 08:c6:e7:0a:21:8c:30:b9:6d:78:d4:e0:a6:eb:56: 9c:f1:ab:9d:fb:de:35:32:fb:fb:47:6e:e2:1f:8f: b4:4a:e8:65:8a:08:e8:37:50:af:90:1c:1e:25:7d: cf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CE:47:E4:48:D4:1C:16:ED:30:9C:4E:BB:BA:15:F7:42:39:AB:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e1:57:64:47:1e:1e:5f:3e:fc:4e:76:c2:00:f5:18:5b:42: 95:fe:d3:06:99:59:02:8d:16:8a:ed:78:5b:a7:07:72:34:aa: 27:6d:0e:05:65:56:b4:db:21:f2:32:e6:47:11:d3:53:d6:0b: c6:a7:fc:0f:3b:a2:fa:ed:65:54:d1:a6:e1:2d:1b:8c:be:c5: 37:ac:28:62:69:87:dc:1f:9c:54:a8:1d:70:6b:e1:e9:04:51: 43:a5:32:05:72:c4:ed:26:5e:27:d4:de:e5:fb:04:9e:de:67: 2a:9a:fd:ee:f2:32:02:4f:6f:d7:42:2f:ea:9e:09:ca:08:2d: c9:c3:67:0e:b7:c0:41:33:42:6d:1e:8f:5d:09:95:59:80:74: 9f:3e:73:eb:12:34:38:b7:82:1e:ee:d2:40:53:45:49:fd:ce: d0:1d:81:05:65:4f:47:09:a5:74:57:81:fb:25:76:23:5b:00: 82:21:71:6e:b6:1b:a3:15:8e:e8:01:0d:41:80:01:6a:42:3d: 1c:07:5c:40:54:65:e9:ff:4a:20:cf:ad:b7:df:ea:9c:93:ed: d0:0b:93:9f:9b:de:ad:f4:8c:f7:7d:91:5d:20:1b:3c:03:d2: 01:60:11:18:0d:5f:f7:39:46:c1:dc:f5:d2:a6:85:cd:ef:28: 05:c5:e7:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTx0KfnAcXTxiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NjNlY2U2NzItZWU3OS00OTQ4LThiY2ItMjFlNDI0NGE4NGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVDOeWl08TqOKkYCzmHgixsT4OoD2FRUFcMU zbGeMOPN629DOXX519Q3IRMeLhmEr45iXNbE9dO/uD6teHxvXlVUJWfZL61X65Hu woNRs+wuTREBQuEAzdOssDyUAvA1DX9VdbDhYlDFyp+6OI27/4sb+2NZf59nGk2h a1Vhr+iAjDFxG4tlqP3Wit/9eU8+XrolHScQkjMTC8s8Bbvvof09y9AT1uc0Ujo4 bcTTKFuCac3JITOIG8yo8x6xDDDcuwge4mYqOz1mfqn4PMgCJMgIxucKIYwwuW14 1OCm61ac8aud+941Mvv7R27iH4+0SuhligjoN1CvkBweJX3PxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPOR+RI1BwW7TCcTru6FfdCOavxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOThjODljN2EtYjAxNC0z ODA1LTkyNGQtNDgzMTE0MWNhNGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACThV2RHHh5fPvxOdsIA9RhbQpX+0waZWQKNForteFunB3I0qidtDgVl VrTbIfIy5kcR01PWC8an/A87ovrtZVTRpuEtG4y+xTesKGJph9wfnFSoHXBr4ekE UUOlMgVyxO0mXifU3uX7BJ7eZyqa/e7yMgJPb9dCL+qeCcoILcnDZw63wEEzQm0e j10JlVmAdJ8+c+sSNDi3gh7u0kBTRUn9ztAdgQVlT0cJpXRXgfsldiNbAIIhcW62 G6MVjugBDUGAAWpCPRwHXEBUZen/SiDPrbff6pyT7dALk5+b3q30jPd9kV0gGzwD 0gFgERgNX/c5RsHc9dKmhc3vKAXF510= -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:32 2025 by rpki-client