$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a5fadc25-0dd9-373b-93bb-8d41c0da47ba.roa File: a5fadc25-0dd9-373b-93bb-8d41c0da47ba.roa (raw, json) Hash identifier: j9nUOeND6ZuRTymPjOSgDRbLPn7rHCxqFy9TpWz3M8I= Subject key identifier: 66:8B:FD:FD:70:AF:5D:9C:34:B1:D2:03:B8:F7:91:00:AA:CF:C3:BC Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848FF9DE67F2AC5E3D0B5253780 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a5fadc25-0dd9-373b-93bb-8d41c0da47ba.roa Signing time: Tue 25 Feb 2025 09:36:10 +0000 ROA not before: Tue 25 Feb 2025 09:36:10 +0000 ROA not after: Mon 26 May 2025 08:36:10 +0000 asID: 329007 IP address blocks: 172.111.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ff:9d:e6:7f:2a:c5:e3:d0:b5:25:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 25 09:36:10 2025 GMT Not After : May 26 08:36:10 2025 GMT Subject: CN=bcd66add-ceef-4d4b-8256-878cf829e920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ba:b6:64:86:0b:51:fd:1e:14:c6:f6:03:97: 98:1b:43:9f:4b:18:9b:12:bf:c8:3d:63:9a:70:36: a1:4f:eb:68:a8:8a:19:71:97:6b:55:bf:e8:de:2c: 2a:58:cf:ef:43:15:68:1c:64:e0:72:ac:42:8f:ab: 00:a3:bf:6c:74:fb:9b:52:2f:5a:4b:48:74:ac:35: d8:f2:22:51:a9:af:d1:cc:9d:68:53:e1:bf:a0:5e: 1a:b4:27:71:d1:5e:31:cc:21:3b:b7:8b:d6:f5:1d: f6:c0:f8:26:a1:1e:18:f4:9a:4f:6e:92:c2:90:56: 75:03:8f:1e:11:5c:3a:85:56:65:70:7c:0b:75:7f: 9a:c1:d2:8c:e9:7c:83:f7:9d:68:67:a5:6f:6e:46: b9:6a:52:31:56:dd:df:f3:35:ab:0a:32:df:db:d4: 86:02:fe:70:19:52:2d:d3:75:f2:6d:1c:e2:de:28: 1b:75:79:84:e6:b6:84:11:cc:c3:25:89:d6:ec:98: a0:26:65:57:e0:23:07:54:d8:40:7f:bb:df:b2:ed: b3:01:21:1d:f2:ef:fa:d0:1c:ac:42:05:f4:70:ea: f5:99:1b:b6:e0:27:97:30:38:f9:29:22:88:33:0d: c9:7d:40:a9:f2:f6:a0:c9:ea:27:a3:f4:7c:2f:6c: 15:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8B:FD:FD:70:AF:5D:9C:34:B1:D2:03:B8:F7:91:00:AA:CF:C3:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a5fadc25-0dd9-373b-93bb-8d41c0da47ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:67:20:8c:03:a7:d0:e4:a1:4b:a9:42:f8:91:b1:d4:77:72: 77:28:6f:d7:9c:08:03:c2:a5:d8:4b:e5:51:dc:68:84:6a:1b: 37:ca:fd:46:0e:c8:9e:7f:b4:66:53:c8:0a:60:45:8e:fa:24: 47:01:f7:74:df:bd:2f:8b:92:a8:15:91:f8:e9:b8:a8:12:b2: a5:07:06:c3:91:c5:04:1e:45:29:fb:8c:e3:04:cc:3d:31:56: a4:cd:82:99:dc:39:67:07:5b:d3:ff:5d:6c:7b:89:57:97:8e: 90:5f:d0:81:70:95:2b:4b:77:fd:6c:c0:30:19:e3:de:2a:4a: 8e:03:4a:03:9b:1d:18:22:1f:dd:dc:c8:12:87:9b:1d:0f:d6: bc:d2:b8:e3:9c:30:51:58:b8:e2:46:87:d9:77:6d:62:c2:12: e3:7f:a5:64:1d:37:15:4e:bf:da:b1:99:8c:90:79:83:9d:b2: 71:e8:f3:84:e9:94:e2:cd:4c:63:84:10:b1:cc:64:40:aa:31: 6e:06:ad:69:94:b9:a5:80:cb:2c:45:cf:b5:d3:43:1c:87:cf: be:cd:2f:0c:61:e0:9b:fe:03:fa:32:a8:94:97:66:51:3a:91: 33:f6:7a:62:f3:73:8a:51:2d:bf:b3:48:58:e1:f5:de:64:7a: b9:21:e7:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj/neZ/KsXj0LUlN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIyNTA5MzYxMFoXDTI1MDUyNjA4MzYxMFowLzEtMCsGA1UEAxMk YmNkNjZhZGQtY2VlZi00ZDRiLTgyNTYtODc4Y2Y4MjllOTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7q2ZIYLUf0eFMb2A5eYG0OfSxibEr/IPWOa cDahT+toqIoZcZdrVb/o3iwqWM/vQxVoHGTgcqxCj6sAo79sdPubUi9aS0h0rDXY 8iJRqa/RzJ1oU+G/oF4atCdx0V4xzCE7t4vW9R32wPgmoR4Y9JpPbpLCkFZ1A48e EVw6hVZlcHwLdX+awdKM6XyD951oZ6Vvbka5alIxVt3f8zWrCjLf29SGAv5wGVIt 03XybRzi3igbdXmE5raEEczDJYnW7JigJmVX4CMHVNhAf7vfsu2zASEd8u/60Bys QgX0cOr1mRu24CeXMDj5KSKIMw3JfUCp8vagyeono/R8L2wVXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaL/f1wr12cNLHSA7j3kQCqz8O8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTVmYWRjMjUtMGRkOS0z NzNiLTkzYmItOGQ0MWMwZGE0N2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFnIIwDp9DkoUupQviRsdR3cncob9ecCAPCpdhL5VHcaIRqGzfK/UYO yJ5/tGZTyApgRY76JEcB93TfvS+LkqgVkfjpuKgSsqUHBsORxQQeRSn7jOMEzD0x VqTNgpncOWcHW9P/XWx7iVeXjpBf0IFwlStLd/1swDAZ494qSo4DSgObHRgiH93c yBKHmx0P1rzSuOOcMFFYuOJGh9l3bWLCEuN/pWQdNxVOv9qxmYyQeYOdsnHo84Tp lOLNTGOEELHMZECqMW4GrWmUuaWAyyxFz7XTQxyHz77NLwxh4Jv+A/oyqJSXZlE6 kTP2emLzc4pRLb+zSFjh9d5kerkh54I= -----END CERTIFICATE-----Generated at Sun Apr 27 16:46:34 2025 by rpki-client