$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ecd3a568-dc51-3864-ba90-dff014ae6b83.roa File: ecd3a568-dc51-3864-ba90-dff014ae6b83.roa (raw, json) Hash identifier: 5WS3lomk/rwHYhn2tlYdv92JMhuH8/g85ATJwKfOe38= Subject key identifier: B5:93:38:2F:60:08:2A:7C:85:D4:65:E4:CA:9B:2A:5E:F3:DC:F6:19 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858494830E4757EADA7524648FED0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ecd3a568-dc51-3864-ba90-dff014ae6b83.roa Signing time: Sun 23 Mar 2025 09:30:32 +0000 ROA not before: Sun 23 Mar 2025 09:30:32 +0000 ROA not after: Sat 21 Jun 2025 09:30:32 +0000 asID: 151106 IP address blocks: 172.111.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:48:30:e4:75:7e:ad:a7:52:46:48:fe:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 23 09:30:32 2025 GMT Not After : Jun 21 09:30:32 2025 GMT Subject: CN=40100bdb-815c-40f6-91dc-5fc4bbed37fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e8:ab:54:92:87:6f:72:1e:c2:43:10:cd:d6: d6:31:0f:41:76:18:eb:d7:02:90:45:1b:d2:73:1e: 87:42:6f:2d:4e:85:4e:52:ae:77:01:1e:52:64:ab: 0b:bf:cc:c7:62:8c:3e:8a:3a:b8:31:ed:b0:44:63: aa:40:11:f4:95:dd:76:43:ea:6e:eb:b1:c4:d0:ce: 0b:06:9c:5e:06:74:f3:6f:eb:a3:a9:58:7c:48:2e: 48:ce:85:85:d4:2c:39:20:0c:d1:c6:d9:70:27:a4: e9:54:bd:22:4d:15:36:3e:c8:17:55:9f:91:ee:90: ea:75:da:7a:86:67:13:c2:97:f7:63:58:c3:93:36: 81:f5:51:66:1a:68:f8:00:86:2f:08:40:93:62:0f: bf:d7:ef:ee:e1:e0:bd:43:6f:37:f4:eb:b0:29:c5: a1:15:03:be:a6:f3:63:d5:af:2a:06:07:49:d1:02: c4:7e:21:3e:45:88:d9:a6:d8:98:96:89:66:b3:0e: 18:fc:38:a7:63:7d:68:4e:26:87:08:3d:06:a0:d9: 5b:c2:3d:81:df:a0:21:dc:4d:40:95:33:b1:4c:b9: 02:4e:d0:6d:37:02:03:56:50:f8:c3:c8:be:31:6b: 95:f9:f6:ab:06:b7:bc:37:4e:dc:98:66:89:9a:93: 02:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:93:38:2F:60:08:2A:7C:85:D4:65:E4:CA:9B:2A:5E:F3:DC:F6:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ecd3a568-dc51-3864-ba90-dff014ae6b83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ec:c6:ff:13:e5:03:f0:48:b6:ea:81:59:6a:f4:0a:80:d7: 5a:af:fd:9d:e7:50:b1:19:07:71:30:bd:8f:a2:f0:65:87:7e: 41:1d:92:28:54:95:6e:cb:ec:ed:6c:10:b7:78:a8:01:bf:59: e0:df:57:d5:10:48:91:eb:ed:a0:c9:6a:c6:30:f8:89:d6:80: aa:37:8f:c7:dc:a8:e4:9b:a5:d2:ef:cf:d1:1a:89:be:96:d7: 8d:d4:5b:94:1d:5e:ed:7c:00:20:6c:6f:f9:ba:ac:61:16:4d: 4f:54:66:28:ae:6c:2e:37:b7:8f:a2:ed:3f:df:d4:7c:5c:a1: 06:cc:62:59:1d:6b:08:95:61:79:ad:6c:46:2a:9e:88:e1:9a: 7a:46:2c:64:3e:54:26:1b:6f:aa:39:82:15:c0:d4:16:b0:80: b9:ec:32:09:c8:c5:3a:06:1a:08:c7:f7:4f:fb:06:22:5b:32: 70:57:af:46:38:eb:d0:8c:fa:ec:30:0d:87:65:ec:2b:77:6f: 0f:52:81:0c:e2:76:ab:ec:7e:23:af:bb:95:56:95:79:96:6f: f6:65:e6:1c:dc:03:a5:46:44:aa:50:77:e7:c7:89:2b:40:87: 68:7f:29:78:69:7c:3b:51:f8:78:de:c5:e6:a5:56:93:1d:fc: d2:a3:7d:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElIMOR1fq2nUkZI/tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMyMzA5MzAzMloXDTI1MDYyMTA5MzAzMlowLzEtMCsGA1UEAxMk NDAxMDBiZGItODE1Yy00MGY2LTkxZGMtNWZjNGJiZWQzN2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOirVJKHb3IewkMQzdbWMQ9Bdhjr1wKQRRvS cx6HQm8tToVOUq53AR5SZKsLv8zHYow+ijq4Me2wRGOqQBH0ld12Q+pu67HE0M4L BpxeBnTzb+ujqVh8SC5IzoWF1Cw5IAzRxtlwJ6TpVL0iTRU2PsgXVZ+R7pDqddp6 hmcTwpf3Y1jDkzaB9VFmGmj4AIYvCECTYg+/1+/u4eC9Q2839OuwKcWhFQO+pvNj 1a8qBgdJ0QLEfiE+RYjZptiYlolmsw4Y/DinY31oTiaHCD0GoNlbwj2B36Ah3E1A lTOxTLkCTtBtNwIDVlD4w8i+MWuV+farBre8N07cmGaJmpMC6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWTOC9gCCp8hdRl5MqbKl7z3PYZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZWNkM2E1NjgtZGM1MS0z ODY0LWJhOTAtZGZmMDE0YWU2YjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzsxv8T5QPwSLbqgVlq9AqA11qv/Z3nULEZB3EwvY+i8GWHfkEdkihU lW7L7O1sELd4qAG/WeDfV9UQSJHr7aDJasYw+InWgKo3j8fcqOSbpdLvz9Eaib6W 143UW5QdXu18ACBsb/m6rGEWTU9UZiiubC43t4+i7T/f1HxcoQbMYlkdawiVYXmt bEYqnojhmnpGLGQ+VCYbb6o5ghXA1BawgLnsMgnIxToGGgjH90/7BiJbMnBXr0Y4 69CM+uwwDYdl7Ct3bw9SgQzidqvsfiOvu5VWlXmWb/Zl5hzcA6VGRKpQd+fHiStA h2h/KXhpfDtR+HjexealVpMd/NKjfSA= -----END CERTIFICATE-----Generated at Sat Apr 5 18:46:03 2025 by rpki-client