$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f9fa9305-7511-3e13-bbe6-5737899cf23b.roa File: f9fa9305-7511-3e13-bbe6-5737899cf23b.roa (raw, json) Hash identifier: tHLpu2dMF/LnWKBC7LmAxrJIdtRgO1rQdzKBe3NxbuQ= Subject key identifier: 51:C1:53:01:C7:FD:6B:D2:DD:68:F9:AE:57:4E:01:01:95:F9:07:04 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849725285798BA5EAF018CF1500 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f9fa9305-7511-3e13-bbe6-5737899cf23b.roa Signing time: Mon 07 Apr 2025 11:42:15 +0000 ROA not before: Mon 07 Apr 2025 11:42:15 +0000 ROA not after: Sun 06 Jul 2025 11:42:15 +0000 asID: 9009 IP address blocks: 172.111.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:52:85:79:8b:a5:ea:f0:18:cf:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 7 11:42:15 2025 GMT Not After : Jul 6 11:42:15 2025 GMT Subject: CN=1731f415-4a59-4ec0-84ea-e263b4ae2b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fa:94:c3:3e:9e:64:bd:77:fa:75:da:63:c7: 8b:c9:91:be:e7:95:76:d2:8a:e4:5a:ee:d6:4f:ae: 32:08:04:f1:04:52:d3:90:de:1a:1d:49:08:28:39: 0a:13:a9:c2:c2:8c:6f:53:db:50:05:68:39:d8:e7: 2c:7a:cb:ef:d4:bf:30:88:db:5f:ab:6d:4b:2f:33: 58:a7:f2:97:15:15:e0:cf:a8:23:31:38:04:7b:61: b0:0e:fa:b8:11:78:7e:bf:6e:0a:67:3a:a8:f1:d2: da:6a:73:84:a1:14:43:dc:88:28:a5:0f:ea:4e:99: 43:8b:6d:05:e3:b6:4f:09:98:e9:51:78:b1:87:39: 8e:2b:62:f8:75:6b:71:f4:b5:45:80:78:91:22:c1: a2:54:92:94:f7:c5:1d:9e:0a:21:54:84:d1:63:ef: d5:79:b6:e7:f1:61:3a:f9:54:ce:c6:0a:c8:3a:37: 2b:66:72:17:bf:a9:c8:4a:aa:9e:56:84:b3:3a:72: db:e8:3d:d7:19:04:4e:b8:44:cf:cb:cf:f0:74:8f: 7b:10:ea:9e:49:89:78:8f:ae:ba:93:f0:53:5d:61: fa:ab:7f:3b:3f:93:9d:14:2e:94:90:eb:b8:4e:b1: a1:bc:30:8c:c2:bb:53:f6:0a:ab:ec:0c:f9:39:57: 2e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C1:53:01:C7:FD:6B:D2:DD:68:F9:AE:57:4E:01:01:95:F9:07:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f9fa9305-7511-3e13-bbe6-5737899cf23b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e4:85:b1:6f:5e:6b:07:97:5e:11:d2:bb:36:d9:dc:0b:66: 51:55:aa:1f:a9:9e:56:72:61:5e:c4:93:af:0d:bd:e6:b0:ac: b7:cb:11:5f:d2:7d:ad:b0:f8:69:84:bf:8e:0e:d1:7c:f2:85: 2e:f4:02:15:6e:16:47:6a:4f:e4:12:d4:e0:6a:02:4a:af:36: 05:6d:a7:95:ef:c5:d7:47:7e:4a:73:55:6a:85:ea:6b:1b:ca: eb:d2:22:59:11:da:12:23:54:30:84:03:27:66:53:ce:85:c4: 48:54:89:0a:8b:77:62:60:29:fc:e1:ea:5a:72:09:f0:af:0f: d5:af:73:db:06:00:98:9d:6f:87:30:b8:a5:b7:d0:e4:e4:48: cc:7b:1c:9a:95:69:08:12:c1:8f:9f:2f:9f:b2:59:da:ab:d9: 92:a4:97:ee:e3:d9:65:50:13:4a:63:db:bf:52:91:f3:fa:43: 7b:00:5b:86:ef:2a:70:e6:9e:f4:bc:cd:18:55:65:7b:ea:dc: 9f:b8:7e:76:d1:5f:af:b4:d5:c6:7b:9e:c5:9a:e0:f4:06:ea: 27:d9:a3:d0:96:50:39:3a:e0:b7:55:cc:4f:56:db:45:d6:cb: 2b:71:7a:61:d4:02:61:6c:14:0a:0d:a2:40:97:75:39:9e:12: 6e:fd:a5:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyUoV5i6Xq8BjPFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQwNzExNDIxNVoXDTI1MDcwNjExNDIxNVowLzEtMCsGA1UEAxMk MTczMWY0MTUtNGE1OS00ZWMwLTg0ZWEtZTI2M2I0YWUyYjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvqUwz6eZL13+nXaY8eLyZG+55V20orkWu7W T64yCATxBFLTkN4aHUkIKDkKE6nCwoxvU9tQBWg52Ocsesvv1L8wiNtfq21LLzNY p/KXFRXgz6gjMTgEe2GwDvq4EXh+v24KZzqo8dLaanOEoRRD3IgopQ/qTplDi20F 47ZPCZjpUXixhzmOK2L4dWtx9LVFgHiRIsGiVJKU98UdngohVITRY+/Vebbn8WE6 +VTOxgrIOjcrZnIXv6nISqqeVoSzOnLb6D3XGQROuETPy8/wdI97EOqeSYl4j666 k/BTXWH6q387P5OdFC6UkOu4TrGhvDCMwrtT9gqr7Az5OVcuCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHBUwHH/WvS3Wj5rldOAQGV+QcEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjlmYTkzMDUtNzUxMS0z ZTEzLWJiZTYtNTczNzg5OWNmMjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTkhbFvXmsHl14R0rs22dwLZlFVqh+pnlZyYV7Ek68NveawrLfLEV/S fa2w+GmEv44O0XzyhS70AhVuFkdqT+QS1OBqAkqvNgVtp5XvxddHfkpzVWqF6msb yuvSIlkR2hIjVDCEAydmU86FxEhUiQqLd2JgKfzh6lpyCfCvD9Wvc9sGAJidb4cw uKW30OTkSMx7HJqVaQgSwY+fL5+yWdqr2ZKkl+7j2WVQE0pj279SkfP6Q3sAW4bv KnDmnvS8zRhVZXvq3J+4fnbRX6+01cZ7nsWa4PQG6ifZo9CWUDk64LdVzE9W20XW yytxemHUAmFsFAoNokCXdTmeEm79pdg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:31:20 2025 by rpki-client