$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0eaff69e-51ef-3ab2-a0de-bf6635cb0b36.roa File: 0eaff69e-51ef-3ab2-a0de-bf6635cb0b36.roa (raw, json) Hash identifier: Id7kUdBGhy/+mF/rc85scrAZH03D1jlzyBWLpucAseo= Subject key identifier: 2A:B5:9E:AB:72:BE:06:64:5D:F6:0D:D2:A5:B5:7F:BE:12:9E:A0:76 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848CB164A11703374A26FC37B00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0eaff69e-51ef-3ab2-a0de-bf6635cb0b36.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 172.111.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:4a:11:70:33:74:a2:6f:c3:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=59de9f17-a40e-4d7a-ba52-44a14588dd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:34:44:a0:8e:81:28:cc:05:92:76:5e:ec:27: fc:4f:58:8b:18:a7:5a:46:db:95:61:1f:94:65:a1: 7b:4b:35:a5:71:df:a1:13:bb:d9:47:f1:87:e2:a1: ae:c9:c2:fa:01:17:04:a1:65:9c:7a:b4:b6:f6:9c: 02:fa:5f:e1:0e:a7:16:de:2a:d5:74:3a:37:31:66: bc:bf:0c:2d:6c:c3:b8:40:ad:29:d3:ca:88:d1:7b: 88:a0:7e:05:fe:3c:ec:7e:b8:86:6d:13:f2:a9:7f: ea:36:0a:86:49:0c:b2:ca:8c:38:c3:51:86:1a:90: 1d:0e:a3:10:3e:14:09:0e:84:60:04:82:96:c5:6a: ac:55:eb:74:2c:e7:a3:44:fa:6c:22:e8:cf:75:ed: a7:65:f1:7d:a2:b1:20:fa:6c:b0:79:ea:dc:22:d3: 1f:2f:88:d3:78:e7:97:35:4f:e7:41:60:a7:4b:cc: df:cc:03:28:45:d1:89:04:99:8a:8c:47:37:c5:38: 39:5a:3b:e6:ab:2c:8b:dc:a8:6b:d2:b3:63:40:c9: 67:53:f2:37:88:47:91:69:b9:90:a4:32:b6:b9:62: a9:97:07:be:ba:5b:e4:84:96:58:54:af:bd:9c:b3: 58:47:80:41:d9:28:fc:5d:d4:0c:f8:1d:9e:f7:ca: 7c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B5:9E:AB:72:BE:06:64:5D:F6:0D:D2:A5:B5:7F:BE:12:9E:A0:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0eaff69e-51ef-3ab2-a0de-bf6635cb0b36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:6d:af:e8:f6:b3:8b:91:6f:f4:54:bb:d2:de:5f:33:25:49: 4c:85:38:74:e3:0d:3b:93:53:99:5e:6e:32:f5:4f:23:b1:6e: 01:83:a4:5f:1c:7b:7a:d1:05:df:41:b0:d6:b0:e5:59:29:8b: 62:65:f7:30:1c:26:cd:3b:b6:8b:dd:1e:d5:d4:22:5c:a2:ef: b9:5c:1f:3e:1e:6d:cd:cb:35:d5:ac:c7:8a:a1:c5:c0:3e:f2: a0:20:9e:e8:7d:1b:0d:bf:42:42:22:98:04:87:fd:cd:42:2f: ab:70:40:7d:d7:f2:88:f7:23:6a:fa:bf:0b:7d:17:15:63:4f: f4:4b:9f:6e:9a:08:e9:99:94:b9:0c:3b:4b:7e:8d:0a:50:8c: 35:e5:7b:87:a0:cf:00:f6:ff:cd:4d:73:08:1d:28:df:66:d9: 87:18:84:55:62:d5:94:32:35:7f:dd:3c:c2:20:bd:10:78:97: 91:ab:67:bc:cb:44:fd:82:e5:82:a1:21:c8:09:43:14:bf:75: ba:7b:8b:ef:55:87:fc:b1:f7:75:85:08:9a:7b:1b:3c:6f:2c: 35:5c:e8:d6:15:f6:11:9e:22:9e:31:fe:ed:cf:7f:9d:98:e6: e4:86:b4:2e:37:dc:5a:c7:4b:50:22:ce:d7:ac:54:c4:09:be: 6e:42:3d:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFkoRcDN0om/DewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk NTlkZTlmMTctYTQwZS00ZDdhLWJhNTItNDRhMTQ1ODhkZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzREoI6BKMwFknZe7Cf8T1iLGKdaRtuVYR+U ZaF7SzWlcd+hE7vZR/GH4qGuycL6ARcEoWWcerS29pwC+l/hDqcW3irVdDo3MWa8 vwwtbMO4QK0p08qI0XuIoH4F/jzsfriGbRPyqX/qNgqGSQyyyow4w1GGGpAdDqMQ PhQJDoRgBIKWxWqsVet0LOejRPpsIujPde2nZfF9orEg+myweercItMfL4jTeOeX NU/nQWCnS8zfzAMoRdGJBJmKjEc3xTg5WjvmqyyL3Khr0rNjQMlnU/I3iEeRabmQ pDK2uWKplwe+ulvkhJZYVK+9nLNYR4BB2Sj8XdQM+B2e98p8fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCq1nqtyvgZkXfYN0qW1f74SnqB2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGVhZmY2OWUtNTFlZi0z YWIyLWEwZGUtYmY2NjM1Y2IwYjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdtr+j2s4uRb/RUu9LeXzMlSUyFOHTjDTuTU5lebjL1TyOxbgGDpF8c e3rRBd9BsNaw5Vkpi2Jl9zAcJs07tovdHtXUIlyi77lcHz4ebc3LNdWsx4qhxcA+ 8qAgnuh9Gw2/QkIimASH/c1CL6twQH3X8oj3I2r6vwt9FxVjT/RLn26aCOmZlLkM O0t+jQpQjDXle4egzwD2/81NcwgdKN9m2YcYhFVi1ZQyNX/dPMIgvRB4l5GrZ7zL RP2C5YKhIcgJQxS/dbp7i+9Vh/yx93WFCJp7GzxvLDVc6NYV9hGeIp4x/u3Pf52Y 5uSGtC433FrHS1AiztesVMQJvm5CPdU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:12 2025 by rpki-client