$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5f0338b1-cf07-3c46-b656-9c7140c1396c.roa File: 5f0338b1-cf07-3c46-b656-9c7140c1396c.roa (raw, json) Hash identifier: BYaMw3y3MC+WzRcQFlPErTC9ZEoneoSArffgFDzo+OQ= Subject key identifier: 8C:A9:7B:17:3C:E3:7E:84:1A:B9:93:51:36:8C:5D:D3:89:3C:CC:FF Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848A06B4E702A178612E7060240 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5f0338b1-cf07-3c46-b656-9c7140c1396c.roa Signing time: Wed 22 Jan 2025 07:12:26 +0000 ROA not before: Wed 22 Jan 2025 07:12:26 +0000 ROA not after: Tue 22 Apr 2025 06:12:26 +0000 asID: 206264 IP address blocks: 172.111.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a0:6b:4e:70:2a:17:86:12:e7:06:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 22 07:12:26 2025 GMT Not After : Apr 22 06:12:26 2025 GMT Subject: CN=ea1500b4-6732-4d40-9b8a-3895d7650316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2d:f0:61:88:c8:d6:d0:e6:ff:89:8c:6f:95: 35:e5:07:26:cc:85:94:49:5e:3f:60:2e:ae:9f:87: 51:bb:f0:23:dc:1b:3e:9e:19:24:8c:a5:eb:16:d3: 53:e6:df:ed:7f:33:de:94:74:77:d3:31:47:63:1b: 78:c7:58:e5:66:42:2f:9c:ed:e4:a6:61:3b:de:36: 5b:71:b8:dd:1c:62:f8:80:2e:71:52:0b:9b:af:fe: 21:47:e3:22:d2:8e:9c:b6:f0:27:41:73:fb:8a:69: b6:6b:9c:0c:b1:2f:80:2b:27:cc:3f:93:9a:ce:0c: 90:ad:ca:4b:a2:1f:19:98:2f:95:94:7d:e2:83:f0: f3:7f:5d:15:8d:ca:89:82:0e:77:0c:88:ce:08:79: 50:00:9f:17:f9:58:56:52:e3:3c:89:98:71:c6:94: d7:37:f6:7d:6c:d2:b7:c0:b3:56:96:e1:52:af:27: 94:0c:4c:bb:af:b4:2f:dd:19:35:ae:76:58:db:6c: fa:a4:10:cc:15:6c:c5:c7:8b:67:ee:21:ad:4c:60: af:0a:b1:9a:07:c5:97:3c:bd:9c:90:fd:ea:1b:4c: 2b:c4:4a:40:38:e9:bb:af:40:52:46:b5:26:43:7e: 4a:16:50:e5:57:dc:93:fa:46:a0:80:55:8e:c1:99: 24:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A9:7B:17:3C:E3:7E:84:1A:B9:93:51:36:8C:5D:D3:89:3C:CC:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5f0338b1-cf07-3c46-b656-9c7140c1396c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:c4:2d:87:54:77:0d:95:30:96:7b:b6:74:f6:4f:b6:77:e1: a8:1e:75:e9:f9:1d:f5:74:72:3f:f3:ad:55:f4:4e:5d:fb:12: c9:98:ef:94:d8:a3:41:71:39:cc:4e:4e:4d:88:7d:ce:78:db: f0:fd:9a:f6:0c:85:f3:60:73:ab:f2:10:06:52:7c:fb:6c:0e: 15:56:d7:7c:ce:b7:3d:9b:2f:a2:93:d9:c5:98:8c:fc:b1:10: 3a:83:62:6c:8c:26:0d:84:95:45:31:1e:3d:e9:2e:b3:35:2c: f9:22:8a:15:09:dd:1e:21:5b:4d:34:7c:2a:9c:8b:d7:82:a3: 38:df:81:72:8f:7e:3e:e0:9c:55:42:31:9a:e7:2a:f4:be:60: 7f:55:55:ed:fb:47:66:c6:3b:25:d7:96:3e:9e:cd:c3:4d:48: c0:a7:65:bb:bf:f1:a9:d7:43:d4:44:b4:ca:ef:d6:eb:22:60: ab:e6:3e:bb:17:9e:b4:0d:00:ea:81:08:2f:d1:5e:81:2c:20: 06:6f:be:01:3a:6a:ab:71:af:bd:a5:c1:8a:ff:03:dc:10:70: fd:ff:01:f2:e6:d3:f3:7f:e5:68:3f:0e:88:ec:08:67:c3:53: c8:82:05:d6:61:2c:11:97:e5:72:83:e7:03:3f:41:7b:8f:e4: 62:b4:fa:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiga05wKheGEucGAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDEyMjA3MTIyNloXDTI1MDQyMjA2MTIyNlowLzEtMCsGA1UEAxMk ZWExNTAwYjQtNjczMi00ZDQwLTliOGEtMzg5NWQ3NjUwMzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC3wYYjI1tDm/4mMb5U15QcmzIWUSV4/YC6u n4dRu/Aj3Bs+nhkkjKXrFtNT5t/tfzPelHR30zFHYxt4x1jlZkIvnO3kpmE73jZb cbjdHGL4gC5xUgubr/4hR+Mi0o6ctvAnQXP7imm2a5wMsS+AKyfMP5OazgyQrcpL oh8ZmC+VlH3ig/Dzf10VjcqJgg53DIjOCHlQAJ8X+VhWUuM8iZhxxpTXN/Z9bNK3 wLNWluFSryeUDEy7r7Qv3Rk1rnZY22z6pBDMFWzFx4tn7iGtTGCvCrGaB8WXPL2c kP3qG0wrxEpAOOm7r0BSRrUmQ35KFlDlV9yT+kaggFWOwZkk6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIypexc8436EGrmTUTaMXdOJPMz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNWYwMzM4YjEtY2YwNy0z YzQ2LWI2NTYtOWM3MTQwYzEzOTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjELYdUdw2VMJZ7tnT2T7Z34ageden5HfV0cj/zrVX0Tl37EsmY75TY o0FxOcxOTk2Ifc542/D9mvYMhfNgc6vyEAZSfPtsDhVW13zOtz2bL6KT2cWYjPyx EDqDYmyMJg2ElUUxHj3pLrM1LPkiihUJ3R4hW000fCqci9eCozjfgXKPfj7gnFVC MZrnKvS+YH9VVe37R2bGOyXXlj6ezcNNSMCnZbu/8anXQ9REtMrv1usiYKvmPrsX nrQNAOqBCC/RXoEsIAZvvgE6aqtxr72lwYr/A9wQcP3/AfLm0/N/5Wg/DojsCGfD U8iCBdZhLBGX5XKD5wM/QXuP5GK0+uw= -----END CERTIFICATE-----Generated at Sun Apr 6 00:47:19 2025 by rpki-client