$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa File: c9a346b1-e60d-3223-91d4-e14b1326a280.roa (raw, json) Hash identifier: 5kVKwBTb4n8eOMa73tM/PbzH6u/iQHSU13s8divFzQA= Subject key identifier: F1:A2:F5:4A:15:35:80:8D:1A:BC:CB:5F:50:E3:EC:6F:AF:CC:F9:BF Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584930DE7451A70299DAC753D180 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 212238 IP address blocks: 172.111.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:74:51:a7:02:99:da:c7:53:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=16bf8a63-f8f1-434e-a27a-4d503c8a6fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3a:0b:ed:c1:42:fa:ac:04:2d:82:82:1d:57: 27:f5:3a:50:e6:78:39:06:0f:35:5d:aa:88:ca:df: c1:26:bf:1f:46:fa:1a:e0:d0:ed:35:5a:98:a2:de: 9e:0f:9e:c9:7a:ec:bf:91:19:0e:f9:21:19:19:9e: f5:74:c3:25:03:ed:90:d7:db:c1:00:df:a7:d6:9b: 2f:43:d0:00:e8:21:8a:80:50:e1:d6:ce:0d:10:a6: 47:36:56:7d:5e:0b:5a:b8:48:7b:09:6e:a7:2d:57: 69:ca:80:43:38:f2:d0:1f:7d:3b:19:08:84:10:30: 3e:16:d4:84:47:bc:82:8b:63:bd:62:6f:ed:ee:7e: dc:0e:e4:30:d0:78:ee:a3:1f:cf:98:c4:6c:68:c9: 2a:84:da:03:f1:37:1b:df:8a:b2:75:39:79:bb:7a: 72:a8:23:99:b0:3f:be:ae:5b:52:11:f5:fb:db:c7: 1e:da:7b:2b:ca:25:11:34:c6:d8:2f:d4:1e:7d:8a: 8b:36:27:8d:9d:9b:07:99:3f:c4:b4:89:cf:ec:7d: 5d:a8:e9:6e:62:da:b7:19:a2:d5:89:36:0b:04:df: 3c:ca:2e:76:a7:bf:54:b1:4a:1a:0e:9c:22:98:ee: a6:b5:94:28:5c:62:d5:24:f7:ab:30:a2:bd:07:8b: fd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A2:F5:4A:15:35:80:8D:1A:BC:CB:5F:50:E3:EC:6F:AF:CC:F9:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:41:a1:49:b2:fc:41:1e:00:3d:84:73:17:fb:2f:a2:39:a9: 2d:de:b0:d3:2b:6d:c4:6d:3f:d4:de:c1:2c:71:e5:21:93:c3: aa:5c:ee:7c:26:6e:90:68:ad:9e:0d:62:b1:30:f3:ca:3b:9f: 0e:e9:56:bb:64:c1:26:7e:23:39:43:eb:22:94:38:33:b6:ab: 81:9d:21:bd:f7:d6:2e:45:8c:13:bc:a0:77:1b:fc:c7:dd:93: 91:74:0c:1a:f0:b0:ed:d9:1d:d7:f2:5c:b4:84:90:16:d4:82: d8:d6:12:a7:33:ec:92:a1:30:6f:c6:11:9a:3f:df:62:a1:90: c9:74:4d:88:81:5e:20:10:2a:00:99:9e:e4:db:04:2f:ce:53: 0d:e0:22:43:dc:21:f6:a5:6c:fe:ae:ab:92:25:5d:49:65:bf: ed:26:58:a0:8e:52:21:fc:bd:ba:e9:6b:25:a1:09:72:8f:e5: 18:2b:45:50:df:b2:2d:c6:33:26:25:66:7d:51:40:29:0d:1a: 5d:35:48:07:a8:36:21:9c:7b:3d:06:3b:3f:cf:e9:1e:4e:3a: 02:08:fb:c3:33:14:db:fd:e8:db:cf:37:8e:08:32:b8:e6:20: a1:d7:73:9d:b4:05:25:9d:15:16:da:df:79:ee:b2:80:15:b8: 44:ab:af:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nRRpwKZ2sdT0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk MTZiZjhhNjMtZjhmMS00MzRlLWEyN2EtNGQ1MDNjOGE2ZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzoL7cFC+qwELYKCHVcn9TpQ5ng5Bg81XaqI yt/BJr8fRvoa4NDtNVqYot6eD57Jeuy/kRkO+SEZGZ71dMMlA+2Q19vBAN+n1psv Q9AA6CGKgFDh1s4NEKZHNlZ9XgtauEh7CW6nLVdpyoBDOPLQH307GQiEEDA+FtSE R7yCi2O9Ym/t7n7cDuQw0Hjuox/PmMRsaMkqhNoD8Tcb34qydTl5u3pyqCOZsD++ rltSEfX728ce2nsryiURNMbYL9QefYqLNieNnZsHmT/EtInP7H1dqOluYtq3GaLV iTYLBN88yi52p79UsUoaDpwimO6mtZQoXGLVJPerMKK9B4v9xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGi9UoVNYCNGrzLX1Dj7G+vzPm/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzlhMzQ2YjEtZTYwZC0z MjIzLTkxZDQtZTE0YjEzMjZhMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5BoUmy/EEeAD2Ecxf7L6I5qS3esNMrbcRtP9TewSxx5SGTw6pc7nwm bpBorZ4NYrEw88o7nw7pVrtkwSZ+IzlD6yKUODO2q4GdIb331i5FjBO8oHcb/Mfd k5F0DBrwsO3ZHdfyXLSEkBbUgtjWEqcz7JKhMG/GEZo/32KhkMl0TYiBXiAQKgCZ nuTbBC/OUw3gIkPcIfalbP6uq5IlXUllv+0mWKCOUiH8vbrpayWhCXKP5RgrRVDf si3GMyYlZn1RQCkNGl01SAeoNiGcez0GOz/P6R5OOgII+8MzFNv96NvPN44IMrjm IKHXc520BSWdFRba33nusoAVuESrr+U= -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:26 2025 by rpki-client