$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa File: 9d435f49-9dcd-3273-914a-89e66b8a1f88.roa (raw, json) Hash identifier: V555Aooedhkxfn/3uXBxxhhK5lg+eHKkUboIULGtptw= Subject key identifier: 5E:6A:70:73:97:2B:4D:BA:9A:DF:21:04:0A:DD:7F:0F:16:FB:D1:93 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584949FE95A2670A2CBFAC9B75C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 9009 IP address blocks: 172.111.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:95:a2:67:0a:2c:bf:ac:9b:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=d18f8619-5ec9-4deb-be93-9e3206d73ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:18:ed:43:2d:c3:5a:9e:bd:2f:b6:cf:0a:97: 38:6b:84:68:d8:47:46:07:0d:89:35:02:2c:96:94: 09:d2:49:c4:92:1d:be:69:d9:de:35:9d:4e:00:67: 9e:70:f5:22:0b:1b:37:2b:f9:64:75:46:15:ad:be: 95:cd:ba:4d:c8:a4:0c:c7:5e:bd:f9:42:d6:56:e4: 89:5f:07:c8:88:71:83:f4:2b:01:5d:3a:74:7d:9b: cc:49:63:39:64:db:9a:2a:b3:fa:69:b9:91:6c:28: ed:68:cc:92:ef:fc:5e:e9:b9:02:9e:d0:b0:cb:0e: 66:fb:27:dc:23:f9:7f:9e:f6:2a:b6:c1:14:27:70: 93:35:84:e9:82:cb:e3:06:1c:95:29:cf:0b:69:df: 57:13:3b:76:da:d6:92:bb:16:6b:f5:7a:da:e0:f5: 90:79:d5:ee:01:7d:80:f5:42:85:74:fb:46:56:42: 5d:57:e7:dc:bb:b8:d4:65:2c:8e:a9:0b:eb:e1:de: 13:57:60:df:09:9e:17:f8:13:4c:fc:cc:b2:c2:29: 51:54:ab:a7:0a:3a:1f:11:cf:6b:b1:6e:cd:52:68: 3e:11:fe:ea:90:15:17:33:55:e8:1e:1b:f8:7d:8b: 06:34:59:4b:50:ed:08:c1:87:e1:9d:72:9d:58:33: 09:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6A:70:73:97:2B:4D:BA:9A:DF:21:04:0A:DD:7F:0F:16:FB:D1:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:d2:3b:ee:b3:e3:2d:c5:7a:c2:db:92:9b:3d:5b:21:c9:28: da:d6:b3:ae:c8:4c:c9:1d:46:bf:d9:35:39:a1:85:5b:17:e8: 89:7b:42:90:8f:59:91:a6:64:3b:42:8f:34:6c:55:37:61:17: a4:67:93:bb:34:85:ba:64:e2:6f:8b:d1:35:64:b2:98:4c:a3: 77:53:de:79:72:0a:d2:d7:b3:c2:39:6c:af:a9:d1:48:7d:4a: 3b:07:91:58:0b:9a:dd:7a:be:d8:53:ba:31:00:5b:07:60:f5: bd:da:4b:72:e0:49:38:6a:27:ae:9d:7b:da:64:65:9c:b0:d3: 66:be:a5:33:9b:83:2e:29:3c:1f:ac:65:ad:98:d3:03:03:43: 0a:3a:58:9e:9a:e8:7a:6f:3e:73:3b:db:ef:6d:da:97:8d:5f: f5:a3:71:a2:9d:36:cf:c5:0f:aa:b9:10:90:ea:5a:30:8c:e8: 01:c6:4a:b2:f0:d8:89:b8:96:14:59:fa:6f:ce:43:58:1c:fd: 00:ec:0e:b8:02:8f:47:b9:fc:56:90:88:49:c3:e1:b4:b9:68: 59:fb:60:cb:44:9a:42:a7:4b:cd:30:b9:f7:a3:e4:92:1c:6a: 03:ab:3c:60:70:80:6d:1c:54:72:f3:65:6f:d1:e1:5f:4c:40: 29:43:2e:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/pWiZwosv6ybdcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk ZDE4Zjg2MTktNWVjOS00ZGViLWJlOTMtOWUzMjA2ZDczYWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRjtQy3DWp69L7bPCpc4a4Ro2EdGBw2JNQIs lpQJ0knEkh2+adneNZ1OAGeecPUiCxs3K/lkdUYVrb6VzbpNyKQMx169+ULWVuSJ XwfIiHGD9CsBXTp0fZvMSWM5ZNuaKrP6abmRbCjtaMyS7/xe6bkCntCwyw5m+yfc I/l/nvYqtsEUJ3CTNYTpgsvjBhyVKc8Lad9XEzt22taSuxZr9Xra4PWQedXuAX2A 9UKFdPtGVkJdV+fcu7jUZSyOqQvr4d4TV2DfCZ4X+BNM/MyywilRVKunCjofEc9r sW7NUmg+Ef7qkBUXM1XoHhv4fYsGNFlLUO0IwYfhnXKdWDMJ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5qcHOXK026mt8hBArdfw8W+9GTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWQ0MzVmNDktOWRjZC0z MjczLTkxNGEtODllNjZiOGExZjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/SO+6z4y3FesLbkps9WyHJKNrWs67ITMkdRr/ZNTmhhVsX6Il7QpCP WZGmZDtCjzRsVTdhF6Rnk7s0hbpk4m+L0TVksphMo3dT3nlyCtLXs8I5bK+p0Uh9 SjsHkVgLmt16vthTujEAWwdg9b3aS3LgSThqJ66de9pkZZyw02a+pTObgy4pPB+s Za2Y0wMDQwo6WJ6a6HpvPnM72+9t2peNX/WjcaKdNs/FD6q5EJDqWjCM6AHGSrLw 2Im4lhRZ+m/OQ1gc/QDsDrgCj0e5/FaQiEnD4bS5aFn7YMtEmkKnS80wufej5JIc agOrPGBwgG0cVHLzZW/R4V9MQClDLmI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:20:05 2025 by rpki-client