$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7beaf452-982b-31a2-97e4-bd3009d616c9.roa File: 7beaf452-982b-31a2-97e4-bd3009d616c9.roa (raw, json) Hash identifier: mlhO5Gvy+zrlOkaaPovKmv/TlV59PpHxWghjIVr0LSM= Subject key identifier: 19:DE:80:34:B9:B6:D5:1E:9E:1F:4D:F3:57:82:FA:D5:F2:2B:FC:06 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584902EC19B4A19AB4CA01341400 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7beaf452-982b-31a2-97e4-bd3009d616c9.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 206264 IP address blocks: 172.111.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:19:b4:a1:9a:b4:ca:01:34:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=53cba135-e980-4825-b67b-dd306cf0e25b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:29:77:99:6c:19:65:a7:18:f3:40:a1:85: 02:44:af:7f:27:34:37:9b:e6:41:ea:53:a5:c1:21: 14:4a:16:34:1b:89:1d:23:ec:79:d2:10:4a:2c:43: 21:0e:57:80:7b:f7:28:de:e6:3c:43:c1:f8:51:90: df:d9:a9:ec:cb:06:13:f6:5c:2a:72:76:c6:a0:3f: 5f:1b:11:e6:1f:5c:e3:12:27:60:fb:a2:de:f6:69: bd:c7:e1:6d:7d:d0:ad:ba:98:1e:bb:c2:78:b2:c8: e2:5a:e1:77:d7:b5:09:50:0a:69:71:63:85:23:d5: d7:32:40:bf:8f:6c:24:0f:3a:8b:05:63:d0:ac:c9: 93:22:da:bb:b0:3c:c1:c3:12:ca:5b:75:6c:e5:d0: 1a:c8:54:40:de:52:03:01:f9:80:2d:f5:84:7e:a0: 52:7c:58:a0:6a:c4:3f:ba:15:36:b3:3c:89:4e:08: 5f:b8:91:cc:b2:68:da:64:d1:c5:fe:1c:99:04:a0: 67:d1:29:56:d1:e6:27:03:9a:84:e8:6f:d3:17:09: 24:52:51:e5:9b:17:47:35:37:89:dc:61:a2:58:64: 2c:57:bf:fb:9f:41:c1:c5:86:c0:09:e9:fd:ec:36: 7b:03:c8:0b:f6:20:1d:a8:06:9e:5e:d6:27:5e:31: ad:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DE:80:34:B9:B6:D5:1E:9E:1F:4D:F3:57:82:FA:D5:F2:2B:FC:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7beaf452-982b-31a2-97e4-bd3009d616c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:5b:86:40:85:f2:43:6c:ad:35:b8:f7:2a:b4:58:9b:f1:95: 0a:4f:cd:9f:2a:2f:d3:78:32:9f:a6:d5:61:b0:5a:e0:dd:b6: fd:27:f2:8e:cb:68:1e:f3:eb:21:ab:9d:46:74:4f:30:f1:58: 76:e7:b1:8d:17:8c:cf:25:f6:12:3a:dc:e1:5d:f8:ab:f3:9c: 15:d5:b6:08:51:12:96:1f:34:4f:42:45:93:d3:7a:95:05:75: 98:13:4d:dd:1a:e6:c3:f4:c4:34:6c:dc:8e:a6:8b:c7:f9:e0: fb:96:01:b8:28:4e:e5:38:a3:8d:64:04:6a:f0:5e:8b:43:61: 97:b7:21:0c:8c:14:eb:e7:f9:c1:63:1f:0c:0a:8d:e6:5e:ca: 88:07:4b:0c:2c:d0:96:29:9b:71:f0:f5:44:fd:2a:de:b3:42: b5:c9:87:b9:6c:55:19:46:66:36:92:dc:3f:bc:03:28:41:52: 31:9b:fe:c4:58:0a:01:ed:2d:57:9d:71:03:5c:c4:86:37:07: 24:46:ff:9e:f6:30:28:d2:b0:5f:98:99:27:34:69:aa:a3:cf: 66:30:8e:31:8f:3b:9b:3b:2e:2a:07:6e:ad:dc:57:85:50:23: 34:17:ec:18:cc:35:71:3a:97:9c:02:5d:33:6f:96:02:70:3e: 2c:3f:56:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7Bm0oZq0ygE0FAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk NTNjYmExMzUtZTk4MC00ODI1LWI2N2ItZGQzMDZjZjBlMjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI4pd5lsGWWnGPNAoYUCRK9/JzQ3m+ZB6lOl wSEUShY0G4kdI+x50hBKLEMhDleAe/co3uY8Q8H4UZDf2ansywYT9lwqcnbGoD9f GxHmH1zjEidg+6Le9mm9x+FtfdCtupgeu8J4ssjiWuF317UJUAppcWOFI9XXMkC/ j2wkDzqLBWPQrMmTItq7sDzBwxLKW3Vs5dAayFRA3lIDAfmALfWEfqBSfFigasQ/ uhU2szyJTghfuJHMsmjaZNHF/hyZBKBn0SlW0eYnA5qE6G/TFwkkUlHlmxdHNTeJ 3GGiWGQsV7/7n0HBxYbACen97DZ7A8gL9iAdqAaeXtYnXjGtNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnegDS5ttUenh9N81eC+tXyK/wGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvN2JlYWY0NTItOTgyYi0z MWEyLTk3ZTQtYmQzMDA5ZDYxNmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5bhkCF8kNsrTW49yq0WJvxlQpPzZ8qL9N4Mp+m1WGwWuDdtv0n8o7L aB7z6yGrnUZ0TzDxWHbnsY0XjM8l9hI63OFd+KvznBXVtghREpYfNE9CRZPTepUF dZgTTd0a5sP0xDRs3I6mi8f54PuWAbgoTuU4o41kBGrwXotDYZe3IQyMFOvn+cFj HwwKjeZeyogHSwws0JYpm3Hw9UT9Kt6zQrXJh7lsVRlGZjaS3D+8AyhBUjGb/sRY CgHtLVedcQNcxIY3ByRG/572MCjSsF+YmSc0aaqjz2YwjjGPO5s7LioHbq3cV4VQ IzQX7BjMNXE6l5wCXTNvlgJwPiw/Vk0= -----END CERTIFICATE-----Generated at Sat Apr 5 21:41:52 2025 by rpki-client