$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f135a6c0-f413-3403-8690-6cddb169d2cb.roa File: f135a6c0-f413-3403-8690-6cddb169d2cb.roa (raw, json) Hash identifier: vDFtsd4Iuj8+78/b1JRLMxigvl0xNY+VsHGITZ85DTY= Subject key identifier: A6:A7:80:16:94:40:6C:48:6A:C9:53:BA:0E:F7:6C:B8:21:CE:29:77 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584902EC10458A0FC4141B414FC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f135a6c0-f413-3403-8690-6cddb169d2cb.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 3223 IP address blocks: 172.111.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:10:45:8a:0f:c4:14:1b:41:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=0a258ffc-4820-4bc1-88ac-7a95288bda1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0f:b4:13:c0:f1:d4:67:fd:71:27:f7:99:b6: 8c:a5:ef:ca:75:f5:43:99:a6:ae:cc:52:8e:24:13: 7a:ef:74:36:1c:f2:3b:e1:d5:42:f5:7f:71:ae:a3: 3e:41:ca:82:85:6d:4a:94:16:d5:92:3b:fd:8b:71: 35:b3:9b:b6:93:36:21:da:07:09:de:5a:11:1b:fe: 77:83:c2:4b:7f:dd:cb:26:50:72:9f:43:87:1f:f9: b0:d2:24:0e:3b:7f:50:1f:3b:8d:3a:68:9f:57:37: 27:0a:07:ca:ab:d6:59:53:ca:ec:4c:c1:b8:f9:a3: f5:b2:cd:8f:a2:62:e3:71:f6:90:6b:f9:be:96:d1: 02:44:5a:35:36:ca:73:9d:d9:47:1e:79:d6:62:e1: e4:d5:38:4c:a9:a1:7a:09:f5:ae:38:4f:6a:35:ed: 26:70:fb:39:c5:6a:84:05:cc:c8:87:34:9b:6b:28: 3d:29:bf:49:73:18:37:10:6e:a0:67:b1:90:db:2e: cd:e9:1b:b0:92:34:4f:96:d0:0a:b0:2f:30:21:9e: ed:31:2d:3c:e3:04:20:ed:99:47:75:f7:17:ac:aa: fc:77:4b:07:cc:00:d4:2d:ea:94:f4:cf:06:5f:ad: 1f:e9:f0:20:f3:59:34:77:90:aa:a0:e2:a8:e1:c1: ab:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A7:80:16:94:40:6C:48:6A:C9:53:BA:0E:F7:6C:B8:21:CE:29:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f135a6c0-f413-3403-8690-6cddb169d2cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:e9:71:00:b2:4e:c3:5a:31:e2:e9:27:47:93:2d:dd:98:1d: a9:f8:ba:6e:bb:ae:2f:02:eb:bc:e9:8f:e6:6c:06:ff:b2:57: 4e:cd:df:b9:93:79:6a:b1:a4:fe:11:03:8f:41:d5:0b:1f:42: 10:43:1b:b8:ab:3c:ad:2e:85:a7:2c:b3:4c:14:08:c3:46:2f: d2:c8:63:58:f2:7d:2c:e9:06:be:b2:6a:b3:a2:94:33:0b:bd: cf:69:1c:6a:2b:40:7f:1c:8c:19:ae:20:1a:62:43:d8:12:bc: 8f:16:c7:b2:2e:91:f0:31:bf:63:62:35:11:5e:c0:99:15:55: 3e:e0:f1:46:29:bd:b9:27:ff:69:2d:87:93:64:aa:a7:a1:0b: de:fb:db:e4:f4:73:7b:33:84:50:86:f2:79:bc:9a:c4:17:7b: 54:40:81:34:78:74:c4:7a:34:e1:6a:13:00:0b:99:05:96:0c: b2:92:8d:98:59:bf:15:07:08:30:40:d4:f7:e3:d7:45:63:8c: 09:ad:4a:51:f9:9d:de:3b:9f:ec:22:0b:96:29:52:51:92:a0: c4:d9:74:1b:69:01:96:ac:a3:2a:0c:0d:ef:2a:2e:13:28:5a: 1b:46:f1:4d:c1:fa:5f:76:55:0d:33:bb:bb:72:7c:fe:fa:25: a3:40:8b:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7BBFig/EFBtBT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MGEyNThmZmMtNDgyMC00YmMxLTg4YWMtN2E5NTI4OGJkYTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw+0E8Dx1Gf9cSf3mbaMpe/KdfVDmaauzFKO JBN673Q2HPI74dVC9X9xrqM+QcqChW1KlBbVkjv9i3E1s5u2kzYh2gcJ3loRG/53 g8JLf93LJlByn0OHH/mw0iQOO39QHzuNOmifVzcnCgfKq9ZZU8rsTMG4+aP1ss2P omLjcfaQa/m+ltECRFo1NspzndlHHnnWYuHk1ThMqaF6CfWuOE9qNe0mcPs5xWqE BczIhzSbayg9Kb9Jcxg3EG6gZ7GQ2y7N6RuwkjRPltAKsC8wIZ7tMS084wQg7ZlH dfcXrKr8d0sHzADULeqU9M8GX60f6fAg81k0d5CqoOKo4cGrtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKangBaUQGxIaslTug73bLghzil3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjEzNWE2YzAtZjQxMy0z NDAzLTg2OTAtNmNkZGIxNjlkMmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7pcQCyTsNaMeLpJ0eTLd2YHan4um67ri8C67zpj+ZsBv+yV07N37mT eWqxpP4RA49B1QsfQhBDG7irPK0uhacss0wUCMNGL9LIY1jyfSzpBr6yarOilDML vc9pHGorQH8cjBmuIBpiQ9gSvI8Wx7IukfAxv2NiNRFewJkVVT7g8UYpvbkn/2kt h5NkqqehC9772+T0c3szhFCG8nm8msQXe1RAgTR4dMR6NOFqEwALmQWWDLKSjZhZ vxUHCDBA1Pfj10VjjAmtSlH5nd47n+wiC5YpUlGSoMTZdBtpAZasoyoMDe8qLhMo WhtG8U3B+l92VQ0zu7tyfP76JaNAi4g= -----END CERTIFICATE-----Generated at Sat Apr 26 16:27:40 2025 by rpki-client