$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/48afdee3-6323-3856-b569-6a0bad0efb94.roa File: 48afdee3-6323-3856-b569-6a0bad0efb94.roa (raw, json) Hash identifier: RKVRGogrP28EZ7obwjQz5zxy3wkzheG0F3/iELqobZA= Subject key identifier: C3:8E:A0:AF:20:B3:DD:B0:C5:36:0E:98:1F:39:83:83:00:5D:4E:EA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848CB1649413EC681EA2EED2180 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/48afdee3-6323-3856-b569-6a0bad0efb94.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 172.111.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:49:41:3e:c6:81:ea:2e:ed:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=3d9f4396-c5b4-4caa-8f58-4040f047cfcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:be:55:ca:d9:7c:30:5a:e5:53:a4:24:88:f9: a2:9f:a2:27:40:ae:44:e4:b8:ee:46:dc:58:b3:df: bb:73:bf:00:a7:cc:0e:44:14:4e:9e:af:a5:5c:3d: 52:d8:0e:c0:bb:c5:7e:be:9b:1c:f7:ed:17:3b:1c: d6:4c:21:43:91:6f:94:b1:3e:ee:a1:84:03:aa:d7: 8e:a5:af:a5:ac:72:d6:1f:a6:93:34:fa:ed:79:82: 34:7b:f6:3d:2a:a8:8f:62:df:31:76:15:22:ab:3d: 53:8c:af:e5:ff:7e:7e:2b:df:97:57:08:bd:6e:95: 96:b0:f5:a3:b2:cd:87:0e:de:07:f8:20:c5:7d:c1: 67:62:03:06:ea:42:55:87:23:0c:e6:ef:e2:8a:7b: 9c:22:9f:4f:b4:0a:d3:5b:86:ef:14:d2:01:6e:7d: a5:6c:73:cc:57:4d:02:19:72:ae:f0:4b:12:22:7e: 47:4e:17:0b:d5:6c:f9:79:f0:30:21:be:39:12:1c: 8a:42:f2:d4:77:f2:ff:d3:95:26:22:99:34:0f:bf: ac:eb:d2:e0:15:b4:92:00:a0:4f:29:41:84:a1:95: 86:92:91:ad:e0:41:9b:c1:d9:a6:cc:f6:83:8b:3d: 47:7e:b8:52:9f:cd:73:1f:8a:87:c3:6c:c0:a5:af: 62:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8E:A0:AF:20:B3:DD:B0:C5:36:0E:98:1F:39:83:83:00:5D:4E:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/48afdee3-6323-3856-b569-6a0bad0efb94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:93:3d:dc:7f:d7:10:1b:e0:1f:31:5d:67:36:aa:5f:e3:2a: e3:af:eb:93:aa:bf:7f:6d:2d:54:7e:cc:a0:d0:0f:ac:33:1a: 53:0d:67:84:c5:d0:48:9f:33:97:f8:d3:93:2c:b7:ca:eb:c6: c4:a8:56:0a:07:57:16:a4:e2:14:df:4b:9c:f2:22:8c:58:23: 9d:b3:ce:e2:fd:f2:90:bb:66:31:5c:7c:10:23:c1:57:dc:82: db:2c:53:4c:6a:bd:f1:a2:11:9f:64:26:75:59:7d:4d:31:76: f2:89:7f:73:5f:ef:26:fb:f4:1c:9e:c3:8f:67:54:a4:81:2b: 13:e7:b1:4c:8f:db:50:c0:97:07:c7:6a:a6:00:7a:fc:06:4a: a6:e2:60:4b:c1:dc:8c:c7:ea:20:38:e0:c8:28:79:d9:b0:96: 0d:d1:de:6b:7b:e4:81:85:94:40:cc:f8:4c:2e:17:c0:f9:bd: 60:9e:dd:42:0b:0f:3e:ca:d1:38:19:28:be:8b:c8:bf:be:0a: 24:ed:f5:dd:3f:51:b5:40:db:f9:ca:c0:f6:61:0b:c2:e0:ce: 1e:42:47:c8:30:13:dd:47:08:73:72:e5:9f:f0:96:b2:47:56: 64:ce:37:d2:a9:9a:3b:aa:44:c6:73:f9:cf:af:87:3d:58:e5: 6a:28:1a:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFklBPsaB6i7tIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk M2Q5ZjQzOTYtYzViNC00Y2FhLThmNTgtNDA0MGYwNDdjZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr5Vytl8MFrlU6QkiPmin6InQK5E5LjuRtxY s9+7c78Ap8wORBROnq+lXD1S2A7Au8V+vpsc9+0XOxzWTCFDkW+UsT7uoYQDqteO pa+lrHLWH6aTNPrteYI0e/Y9KqiPYt8xdhUiqz1TjK/l/35+K9+XVwi9bpWWsPWj ss2HDt4H+CDFfcFnYgMG6kJVhyMM5u/iinucIp9PtArTW4bvFNIBbn2lbHPMV00C GXKu8EsSIn5HThcL1Wz5efAwIb45EhyKQvLUd/L/05UmIpk0D7+s69LgFbSSAKBP KUGEoZWGkpGt4EGbwdmmzPaDiz1HfrhSn81zH4qHw2zApa9idwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOOoK8gs92wxTYOmB85g4MAXU7qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDhhZmRlZTMtNjMyMy0z ODU2LWI1NjktNmEwYmFkMGVmYjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6TPdx/1xAb4B8xXWc2ql/jKuOv65Oqv39tLVR+zKDQD6wzGlMNZ4TF 0EifM5f405Mst8rrxsSoVgoHVxak4hTfS5zyIoxYI52zzuL98pC7ZjFcfBAjwVfc gtssU0xqvfGiEZ9kJnVZfU0xdvKJf3Nf7yb79Byew49nVKSBKxPnsUyP21DAlwfH aqYAevwGSqbiYEvB3IzH6iA44Mgoedmwlg3R3mt75IGFlEDM+EwuF8D5vWCe3UIL Dz7K0TgZKL6LyL++CiTt9d0/UbVA2/nKwPZhC8Lgzh5CR8gwE91HCHNy5Z/wlrJH VmTON9KpmjuqRMZz+c+vhz1Y5WooGsM= -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:56 2025 by rpki-client