$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7538ae53-9e17-3ffb-83a6-e567100506e4.roa File: 7538ae53-9e17-3ffb-83a6-e567100506e4.roa (raw, json) Hash identifier: ADzr/2qn6ZKVXFBR/J+qKhSC8xVXb77KjKQK5z6m364= Subject key identifier: D0:C5:09:20:FC:8B:AA:25:8D:A2:8F:22:A1:8D:8A:28:89:21:4A:41 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C42ED3633B6F18973CC080 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7538ae53-9e17-3ffb-83a6-e567100506e4.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 172.111.121.128/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:2e:d3:63:3b:6f:18:97:3c:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=5af2b3b8-5156-4c29-be1b-c09d876c72b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:cd:d5:2a:ef:0b:83:48:92:e4:d9:72:b7:0b: 94:0f:1c:09:cd:f4:49:de:aa:d0:e5:30:7b:8e:54: b9:36:82:24:5e:e1:7e:ce:67:b8:b5:ee:4e:ba:c0: 07:57:23:a0:1d:29:37:63:06:9e:fa:32:81:e3:5b: ab:6c:1d:9e:3f:d1:bc:2b:8d:ca:6d:f4:39:be:bd: 87:1f:d5:d8:73:0b:da:98:db:32:07:5b:fb:2d:1a: 7b:dd:4d:5b:e7:5a:d8:69:05:0a:59:83:07:42:2d: f4:bb:41:f6:dc:91:61:a1:1c:45:bc:a2:dd:13:6b: 9b:4d:aa:29:3d:3a:2e:23:be:9e:c1:79:ce:27:1c: af:a1:14:e9:0b:3a:3f:82:ea:79:8b:2e:a3:00:7f: 4f:56:5d:34:43:7f:a9:c2:2c:e3:1c:18:32:80:a7: 60:94:49:ea:8b:cb:7a:5a:0e:9c:42:03:9c:3f:3b: b5:9d:53:fe:ec:01:d2:32:4e:2c:3a:82:de:a6:71: 43:2b:39:48:ee:a2:82:86:84:05:fe:2c:5b:f4:2c: c4:da:7c:53:75:c3:29:d2:ec:f4:22:ce:56:88:38: 5c:b6:b5:a9:4f:99:c5:ce:bb:28:67:65:6e:63:5f: bb:3b:97:11:0d:40:67:d9:6f:3b:a6:37:5f:81:56: fa:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C5:09:20:FC:8B:AA:25:8D:A2:8F:22:A1:8D:8A:28:89:21:4A:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/7538ae53-9e17-3ffb-83a6-e567100506e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.121.128/26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:32:0b:e4:4d:29:44:a9:b9:77:be:25:5a:ae:2c:f1:db:a5: b7:10:2b:59:ad:00:de:16:34:e3:fd:77:11:b4:d7:50:e3:23: f7:7f:2a:9f:39:6c:e2:b8:04:19:90:6a:85:c3:fb:78:5b:75: 27:c7:17:d5:59:13:79:96:6c:b8:22:e5:c7:89:0e:67:56:b7: 5d:2a:a3:e8:61:80:92:0f:72:7b:79:47:53:f1:03:8d:5e:35: 5e:39:f0:47:29:c0:61:7d:47:92:47:1b:62:a6:71:23:c4:de: 44:c8:c0:ef:51:1a:58:df:22:6d:30:4b:47:90:ab:c4:47:33: 11:b7:b3:5a:e5:6c:2c:23:c0:c0:a1:bb:3f:a8:cd:35:27:5f: 49:da:d4:38:a8:29:58:71:d2:f7:9f:9b:78:42:95:44:9b:59: a3:18:ad:ce:c3:1f:ec:18:76:fd:e2:0e:b0:78:a0:32:59:69: 3b:91:69:11:31:fb:46:46:a0:8d:1d:04:49:c7:8d:88:39:98: d5:af:bb:1f:2a:71:20:26:26:02:52:0e:2c:8d:e8:36:02:a6: 86:6d:f3:77:84:97:65:d0:3c:53:a9:01:39:5f:a6:e6:bf:0e: 23:15:47:e6:cd:17:44:90:94:4a:cd:78:72:93:70:73:cd:cd: 01:08:ea:d6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxC7TYztvGJc8wIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NWFmMmIzYjgtNTE1Ni00YzI5LWJlMWItYzA5ZDg3NmM3MmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA883VKu8Lg0iS5NlytwuUDxwJzfRJ3qrQ5TB7 jlS5NoIkXuF+zme4te5OusAHVyOgHSk3Ywae+jKB41urbB2eP9G8K43KbfQ5vr2H H9XYcwvamNsyB1v7LRp73U1b51rYaQUKWYMHQi30u0H23JFhoRxFvKLdE2ubTaop PTouI76ewXnOJxyvoRTpCzo/gup5iy6jAH9PVl00Q3+pwizjHBgygKdglEnqi8t6 Wg6cQgOcPzu1nVP+7AHSMk4sOoLepnFDKzlI7qKChoQF/ixb9CzE2nxTdcMp0uz0 Is5WiDhctrWpT5nFzrsoZ2VuY1+7O5cRDUBn2W87pjdfgVb6/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNDFCSD8i6oljaKPIqGNiiiJIUpBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNzUzOGFlNTMtOWUxNy0z ZmZiLTgzYTYtZTU2NzEwMDUwNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGrG95gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCqMgvkTSlEqbl3viVarizx26W3ECtZrQDeFjTj/XcRtNdQ4yP3fyqf OWziuAQZkGqFw/t4W3UnxxfVWRN5lmy4IuXHiQ5nVrddKqPoYYCSD3J7eUdT8QON XjVeOfBHKcBhfUeSRxtipnEjxN5EyMDvURpY3yJtMEtHkKvERzMRt7Na5WwsI8DA obs/qM01J19J2tQ4qClYcdL3n5t4QpVEm1mjGK3Owx/sGHb94g6weKAyWWk7kWkR MftGRqCNHQRJx42IOZjVr7sfKnEgJiYCUg4sjeg2AqaGbfN3hJdl0DxTqQE5X6bm vw4jFUfmzRdEkJRKzXhyk3Bzzc0BCOrW -----END CERTIFICATE-----Generated at Sat Apr 26 16:44:36 2025 by rpki-client