$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fa2f24d7-43cf-3c31-9b46-39cb3951cc39.roa File: fa2f24d7-43cf-3c31-9b46-39cb3951cc39.roa (raw, json) Hash identifier: SKSO0jSsnAXHHbfjBs8+o/Tt1z09QB7IlvwD7/GxtgY= Subject key identifier: D9:61:8F:B8:05:37:E7:97:BA:BB:3D:66:A2:73:9B:B7:7E:C1:E6:96 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584972783F6D567F7D533AA9E780 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fa2f24d7-43cf-3c31-9b46-39cb3951cc39.roa Signing time: Mon 07 Apr 2025 12:58:16 +0000 ROA not before: Mon 07 Apr 2025 12:58:16 +0000 ROA not after: Sun 06 Jul 2025 12:58:16 +0000 asID: 36352 IP address blocks: 172.111.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:78:3f:6d:56:7f:7d:53:3a:a9:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 7 12:58:16 2025 GMT Not After : Jul 6 12:58:16 2025 GMT Subject: CN=c9cd0302-48ff-4bcf-bda1-cd18a1c41929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:44:6a:6c:e9:86:67:b4:75:31:c4:c1:4e:73: 38:7b:eb:11:68:cc:cd:9d:41:14:dd:53:90:32:6b: 02:2e:39:9b:73:d1:a2:d6:91:fe:62:c3:30:93:c6: 66:c8:7d:0c:52:0a:f7:fd:6d:0c:a4:02:17:34:76: 44:1c:de:5f:c4:41:0a:c8:96:93:8d:b3:33:d2:b1: 94:cf:06:81:4b:60:02:11:75:8b:99:2d:86:dd:f5: 54:b0:e4:13:e6:6b:bf:99:b3:20:7b:7e:d0:eb:c3: 1d:0c:f7:97:4f:26:45:49:0b:2f:32:74:85:51:ae: 2e:77:7b:6d:8d:53:71:f6:7b:d2:a4:86:2a:b5:ba: 51:6e:ea:95:f4:15:b1:52:ea:6c:79:b6:1b:c6:89: 27:45:07:85:93:98:d8:30:04:1f:88:b6:bf:ec:ea: c3:86:21:87:50:7b:7d:c4:54:82:15:d7:7e:84:a9: 6b:ed:74:f5:09:e5:5b:77:f7:26:a3:12:90:29:ef: 98:37:30:5c:d6:9b:de:96:eb:d4:03:3f:82:26:5a: 3a:c6:53:cf:fb:9f:c7:8c:58:7b:45:41:b7:e5:a1: e0:24:20:55:e9:6f:ab:ab:47:43:08:0a:08:df:40: 10:28:f8:74:e4:73:83:31:54:e4:26:15:1e:bc:ac: 77:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:61:8F:B8:05:37:E7:97:BA:BB:3D:66:A2:73:9B:B7:7E:C1:E6:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fa2f24d7-43cf-3c31-9b46-39cb3951cc39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:2b:f6:1e:67:f6:97:0f:14:ea:24:cb:eb:d2:6c:9c:f8:38: c0:a5:e5:3a:52:a0:96:4e:e4:2c:c7:10:26:77:03:69:04:47: 41:da:c2:83:35:e8:41:b3:33:47:bc:54:5e:dc:df:bd:f2:ea: 9e:ae:8d:d8:5a:58:6d:9a:4f:eb:fc:1f:df:ce:e9:6f:ae:04: e2:6b:02:18:67:b8:81:e6:a0:35:d4:7c:76:d8:32:7f:88:d7: ca:df:6b:eb:c0:62:20:fa:c1:12:29:cc:ef:10:79:d8:b4:2a: 2b:17:d5:fa:c7:9f:21:95:41:08:6b:59:c1:0f:7a:cf:6f:31: 34:0f:9b:b9:59:1e:3b:35:7e:50:65:2f:8f:23:8d:e8:03:f2: 36:72:64:8c:fe:a7:87:94:52:56:00:62:8a:2f:d6:38:34:3b: d4:1a:36:88:e6:fd:c2:dd:d1:a6:a0:e2:0e:14:96:f3:8d:19: e2:ab:a3:89:dd:07:af:6b:4d:40:af:8e:34:62:a1:25:c3:71: 5e:53:cb:6d:fe:53:4f:0b:73:3d:73:54:b2:27:98:80:8b:e2: 78:75:15:9c:4f:98:93:d0:25:de:36:0f:68:a7:cc:65:f7:28: ed:3f:63:ec:75:5e:7a:a3:f8:a5:45:23:33:61:92:7c:12:a6: 21:2b:d2:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyeD9tVn99Uzqp54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQwNzEyNTgxNloXDTI1MDcwNjEyNTgxNlowLzEtMCsGA1UEAxMk YzljZDAzMDItNDhmZi00YmNmLWJkYTEtY2QxOGExYzQxOTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoERqbOmGZ7R1McTBTnM4e+sRaMzNnUEU3VOQ MmsCLjmbc9Gi1pH+YsMwk8ZmyH0MUgr3/W0MpAIXNHZEHN5fxEEKyJaTjbMz0rGU zwaBS2ACEXWLmS2G3fVUsOQT5mu/mbMge37Q68MdDPeXTyZFSQsvMnSFUa4ud3tt jVNx9nvSpIYqtbpRbuqV9BWxUupsebYbxoknRQeFk5jYMAQfiLa/7OrDhiGHUHt9 xFSCFdd+hKlr7XT1CeVbd/cmoxKQKe+YNzBc1pveluvUAz+CJlo6xlPP+5/HjFh7 RUG35aHgJCBV6W+rq0dDCAoI30AQKPh05HODMVTkJhUevKx36wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlhj7gFN+eXurs9ZqJzm7d+weaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmEyZjI0ZDctNDNjZi0z YzMxLTliNDYtMzljYjM5NTFjYzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8r9h5n9pcPFOoky+vSbJz4OMCl5TpSoJZO5CzHECZ3A2kER0HawoM1 6EGzM0e8VF7c373y6p6ujdhaWG2aT+v8H9/O6W+uBOJrAhhnuIHmoDXUfHbYMn+I 18rfa+vAYiD6wRIpzO8Qedi0KisX1frHnyGVQQhrWcEPes9vMTQPm7lZHjs1flBl L48jjegD8jZyZIz+p4eUUlYAYoov1jg0O9QaNojm/cLd0aag4g4UlvONGeKro4nd B69rTUCvjjRioSXDcV5Ty23+U08Lcz1zVLInmICL4nh1FZxPmJPQJd42D2inzGX3 KO0/Y+x1Xnqj+KVFIzNhknwSpiEr0ic= -----END CERTIFICATE-----Generated at Sat Apr 26 16:27:21 2025 by rpki-client