$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/644fda1a-6395-32ac-9545-075b8e91d2a9.roa File: 644fda1a-6395-32ac-9545-075b8e91d2a9.roa (raw, json) Hash identifier: 9o5dxagqerttmeS1fVozJcEnWfaUaHV2qS0DBF20fjY= Subject key identifier: 4B:FD:93:B7:42:DE:30:70:7B:A4:79:AD:6D:44:6F:1C:87:38:B9:E2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849483091F31C371CBA2E82F500 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/644fda1a-6395-32ac-9545-075b8e91d2a9.roa Signing time: Sun 23 Mar 2025 09:29:53 +0000 ROA not before: Sun 23 Mar 2025 09:29:53 +0000 ROA not after: Sat 21 Jun 2025 09:29:53 +0000 asID: 151106 IP address blocks: 172.111.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:48:30:91:f3:1c:37:1c:ba:2e:82:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 23 09:29:53 2025 GMT Not After : Jun 21 09:29:53 2025 GMT Subject: CN=ebc6f554-e9ca-428f-a636-70d4fa11e425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f3:21:86:80:ad:da:b8:a7:ec:52:11:6e:af: df:53:47:be:12:aa:0d:da:9d:53:3b:55:3b:f6:f5: d2:9f:89:61:ed:27:41:d0:f7:ea:5d:dc:c7:b9:86: 93:4b:7e:49:63:18:8c:f6:56:09:1f:61:36:33:ac: cf:b0:07:b1:3c:d1:4f:e0:a0:ce:ff:9f:ef:e8:aa: 8b:2a:42:9b:15:e3:2c:09:d8:83:3c:a7:a2:7c:f1: c5:2a:b7:7e:c0:cc:2c:bf:0b:0e:0b:56:eb:8f:88: cf:c0:57:f4:9f:42:18:1b:da:f0:58:42:13:14:5a: 46:40:7f:34:7f:f2:2c:3c:63:92:e8:3d:8d:c4:42: 81:45:1b:de:af:dc:49:c9:3d:09:41:c9:4c:87:41: 00:50:03:62:8e:d3:0b:70:c7:5d:62:7f:aa:15:61: 41:af:be:18:37:97:f9:42:a3:b3:4d:b7:2b:4e:dc: d2:2a:47:ee:8a:6c:4b:6b:1f:43:a4:10:59:b0:22: 0f:bd:83:af:49:b4:b5:42:86:c4:79:ec:8f:3b:44: e0:d0:d3:99:26:13:dd:f5:3f:81:19:55:95:58:b2: 51:4f:4f:c6:25:cf:c5:73:a6:d0:f0:2b:5e:8d:85: d2:1b:4e:23:4d:1c:61:13:0f:71:27:98:39:26:ae: eb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FD:93:B7:42:DE:30:70:7B:A4:79:AD:6D:44:6F:1C:87:38:B9:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/644fda1a-6395-32ac-9545-075b8e91d2a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:df:d3:b9:07:a7:51:12:4d:c9:96:ef:f5:90:7c:57:af:85: d7:fd:68:61:85:73:c8:e7:ec:45:7f:87:dc:2c:4d:0d:59:72: 58:23:f8:d0:ee:66:86:59:77:36:ff:61:bd:31:e3:32:6c:65: cc:ff:d9:71:99:a3:25:1f:00:79:92:d7:a2:5c:ea:33:81:53: 71:fa:04:e9:38:40:f5:b1:7d:c7:10:cd:27:e5:de:90:e5:c1: 6d:94:1b:1a:10:ad:80:54:5a:15:b4:40:9f:26:08:5e:36:17: b5:6b:60:8a:cb:f2:22:30:f3:e3:91:b9:00:c7:34:28:0b:d4: fb:7d:96:b1:c9:2b:dc:22:a5:18:1c:e6:77:69:2f:ba:83:6c: 20:9e:38:fe:a3:64:3f:f5:d1:cc:0e:7d:d6:c1:82:a2:80:4c: 07:c8:b6:eb:8a:d2:4c:2a:84:d4:d8:43:25:f3:1f:78:10:17: c9:ab:c3:f5:a5:23:7d:1d:7b:5e:e2:75:cc:e9:f2:48:e8:47: 84:49:dc:2a:14:d9:a3:26:48:9a:0c:e6:ba:5c:2d:64:1f:10: 22:96:be:05:9e:df:df:af:2f:a9:02:14:df:d5:fd:4e:ff:9a: 44:ed:b7:f3:ec:68:83:fc:2f:9d:80:ac:81:50:0f:fd:91:5c: ae:c2:9f:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElIMJHzHDccui6C9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMyMzA5Mjk1M1oXDTI1MDYyMTA5Mjk1M1owLzEtMCsGA1UEAxMk ZWJjNmY1NTQtZTljYS00MjhmLWE2MzYtNzBkNGZhMTFlNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfMhhoCt2rin7FIRbq/fU0e+EqoN2p1TO1U7 9vXSn4lh7SdB0PfqXdzHuYaTS35JYxiM9lYJH2E2M6zPsAexPNFP4KDO/5/v6KqL KkKbFeMsCdiDPKeifPHFKrd+wMwsvwsOC1brj4jPwFf0n0IYG9rwWEITFFpGQH80 f/IsPGOS6D2NxEKBRRver9xJyT0JQclMh0EAUANijtMLcMddYn+qFWFBr74YN5f5 QqOzTbcrTtzSKkfuimxLax9DpBBZsCIPvYOvSbS1QobEeeyPO0Tg0NOZJhPd9T+B GVWVWLJRT0/GJc/Fc6bQ8CtejYXSG04jTRxhEw9xJ5g5Jq7rrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEv9k7dC3jBwe6R5rW1EbxyHOLniMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjQ0ZmRhMWEtNjM5NS0z MmFjLTk1NDUtMDc1YjhlOTFkMmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvf07kHp1ESTcmW7/WQfFevhdf9aGGFc8jn7EV/h9wsTQ1Zclgj+NDu ZoZZdzb/Yb0x4zJsZcz/2XGZoyUfAHmS16Jc6jOBU3H6BOk4QPWxfccQzSfl3pDl wW2UGxoQrYBUWhW0QJ8mCF42F7VrYIrL8iIw8+ORuQDHNCgL1Pt9lrHJK9wipRgc 5ndpL7qDbCCeOP6jZD/10cwOfdbBgqKATAfItuuK0kwqhNTYQyXzH3gQF8mrw/Wl I30de17idczp8kjoR4RJ3CoU2aMmSJoM5rpcLWQfECKWvgWe39+vL6kCFN/V/U7/ mkTtt/PsaIP8L52ArIFQD/2RXK7CnzA= -----END CERTIFICATE-----Generated at Sat Apr 5 18:49:57 2025 by rpki-client