$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/05ecd9f5-0c60-389e-a961-68db6277a2e8.roa File: 05ecd9f5-0c60-389e-a961-68db6277a2e8.roa (raw, json) Hash identifier: BiwidZyfU1+3GaPh5Id0tghcdVGmuZRcd9Km6+6cJZk= Subject key identifier: 59:3F:F2:31:80:3D:8B:B3:BB:15:E8:C8:55:76:ED:BC:A8:98:37:A2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848BD20E078AA6C4DAED79FFF00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/05ecd9f5-0c60-389e-a961-68db6277a2e8.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 53356 IP address blocks: 172.111.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:e0:78:aa:6c:4d:ae:d7:9f:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=3ca6b722-15a0-4151-9247-8889b7081920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7f:61:18:76:9e:f6:39:94:37:b1:c5:0c:b1: 15:8b:1d:d6:a3:e7:2d:ab:55:19:e3:5a:8c:4a:34: ad:1d:f9:01:ae:ce:48:e2:fa:a1:ab:69:cb:e2:49: bd:f8:6d:53:05:d7:38:c2:e6:d1:2a:eb:1e:19:20: a6:df:81:dc:a6:4b:0c:a1:8e:9a:04:f9:05:24:9c: 61:03:1b:a3:dc:69:df:25:aa:8e:28:0b:e6:38:73: 37:24:6b:13:c7:8f:dc:d2:9d:9f:13:9c:5b:0e:f7: 04:06:1b:ee:d7:f1:36:3c:ac:29:23:b3:e6:72:26: 80:73:96:c9:03:02:b5:13:61:68:9a:24:52:62:61: 44:7e:18:86:49:81:59:be:27:99:7c:3f:fc:d0:60: a0:e3:4c:5d:1b:85:85:00:ac:86:c2:de:e8:3a:90: 3d:d6:de:b2:5b:ea:c1:72:7b:56:ee:b2:7f:3e:2c: 0e:58:af:bb:13:d0:4e:00:d8:82:42:98:99:54:5f: 56:7b:ad:5f:7b:d5:bb:df:e2:7f:08:76:6f:a7:4a: 09:d6:ab:8e:99:90:df:87:ae:a7:e8:d6:7d:7c:c6: 9f:b8:14:c4:82:8b:ae:5d:df:c0:09:40:5f:db:74: b2:d0:42:e1:37:74:d2:d9:7e:a3:c8:37:72:2b:fb: f9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3F:F2:31:80:3D:8B:B3:BB:15:E8:C8:55:76:ED:BC:A8:98:37:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/05ecd9f5-0c60-389e-a961-68db6277a2e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:2e:7a:a6:62:58:3d:93:09:83:d2:9d:d9:27:d0:71:89:49: d2:9e:a4:4e:11:db:54:26:da:68:00:69:ce:60:78:3f:6e:75: e5:37:92:d8:c0:da:e2:26:78:7e:0b:24:3b:a5:11:6c:01:18: 8b:53:c2:fb:48:9d:e0:93:50:34:a2:72:b3:f4:50:6b:a8:5e: fc:30:6d:ce:2f:b8:64:47:cc:b8:93:99:70:91:a1:39:82:84: ff:3f:d1:07:42:fc:3c:46:17:38:ad:56:f2:23:e7:c6:c9:a0: 15:7a:b0:37:03:ec:54:88:a2:40:bc:70:2c:aa:69:ae:5c:db: 0f:d2:ca:b7:0c:de:3c:7b:66:aa:e4:18:34:76:5f:31:81:d5: 3c:d3:9d:a0:64:df:4f:67:4f:8d:0c:c1:58:f6:f2:18:93:fc: 54:35:09:2e:b1:39:d3:54:c7:35:51:e3:4b:22:41:3c:fb:7c: 16:55:ab:f2:21:80:2b:2c:30:84:81:98:ce:a1:8d:84:f4:57: 14:53:51:fa:ba:a8:9e:03:0f:8b:ef:79:70:1d:ca:89:95:9a: 75:6b:27:af:50:bd:14:5e:d8:2f:32:da:e1:33:ad:66:8e:40: ba:d7:0b:6e:40:be:ac:c2:0b:2f:55:f1:c9:00:48:1f:e7:44: 81:c4:f9:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IOB4qmxNrtef/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk M2NhNmI3MjItMTVhMC00MTUxLTkyNDctODg4OWI3MDgxOTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn9hGHae9jmUN7HFDLEVix3Wo+ctq1UZ41qM SjStHfkBrs5I4vqhq2nL4km9+G1TBdc4wubRKuseGSCm34HcpksMoY6aBPkFJJxh Axuj3GnfJaqOKAvmOHM3JGsTx4/c0p2fE5xbDvcEBhvu1/E2PKwpI7PmciaAc5bJ AwK1E2FomiRSYmFEfhiGSYFZvieZfD/80GCg40xdG4WFAKyGwt7oOpA91t6yW+rB cntW7rJ/PiwOWK+7E9BOANiCQpiZVF9We61fe9W73+J/CHZvp0oJ1quOmZDfh66n 6NZ9fMafuBTEgouuXd/ACUBf23Sy0ELhN3TS2X6jyDdyK/v5+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFk/8jGAPYuzuxXoyFV27byomDeiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDVlY2Q5ZjUtMGM2MC0z ODllLWE5NjEtNjhkYjYyNzdhMmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8ueqZiWD2TCYPSndkn0HGJSdKepE4R21Qm2mgAac5geD9udeU3ktjA 2uImeH4LJDulEWwBGItTwvtIneCTUDSicrP0UGuoXvwwbc4vuGRHzLiTmXCRoTmC hP8/0QdC/DxGFzitVvIj58bJoBV6sDcD7FSIokC8cCyqaa5c2w/SyrcM3jx7Zqrk GDR2XzGB1TzTnaBk309nT40MwVj28hiT/FQ1CS6xOdNUxzVR40siQTz7fBZVq/Ih gCssMISBmM6hjYT0VxRTUfq6qJ4DD4vveXAdyomVmnVrJ69QvRRe2C8y2uEzrWaO QLrXC25AvqzCCy9V8ckASB/nRIHE+Y8= -----END CERTIFICATE-----Generated at Sun Apr 13 00:45:47 2025 by rpki-client