$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0fdcaa24-e3b0-3eca-983a-c86646b16ede.roa File: 0fdcaa24-e3b0-3eca-983a-c86646b16ede.roa (raw, json) Hash identifier: z+9xOZRmzyKzUd/zNnF1yiCHK5sDe7DYXzC0h+XIqIQ= Subject key identifier: CB:7A:76:F1:38:76:C8:59:18:02:B7:2D:70:44:1C:35:9D:B1:C2:04 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849DF5A721495892802492F0A80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0fdcaa24-e3b0-3eca-983a-c86646b16ede.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 9009 IP address blocks: 172.111.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:72:14:95:89:28:02:49:2f:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=4e4cb96e-e95a-4000-ba7c-21e880120e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8b:7e:58:a2:72:d8:4f:56:35:82:0e:18:3e: 63:ee:d0:57:2c:ad:f6:26:09:63:31:af:30:50:ff: 12:ba:72:1d:99:c3:08:95:c2:95:c8:ea:a7:4b:34: 7c:9c:9c:2b:73:5f:7d:a4:c8:33:4a:67:bd:b2:8e: 25:51:6e:5d:3b:20:86:4b:55:6b:91:39:ae:06:79: 05:21:22:86:cd:87:c9:04:e2:9f:2c:24:7e:ab:46: 9a:cc:6e:e2:f6:41:d8:52:de:8f:bb:ee:0b:6d:2c: ce:12:66:fd:e3:94:fe:bb:30:78:a3:de:37:03:01: 28:17:1d:8a:01:aa:10:d4:5c:11:de:80:4d:87:4d: b9:6e:11:3a:fc:6c:07:39:34:d2:65:a9:9e:ed:5b: fe:24:73:90:d3:ef:38:5b:87:9f:45:20:71:c7:ee: ec:79:ee:36:c7:10:fb:f9:22:88:f9:66:6e:bb:a9: 1d:c7:c2:80:65:90:db:72:48:83:90:b8:da:70:df: 59:35:4d:54:dc:6e:dd:f8:2c:8c:6d:5a:0e:a9:8d: 4d:72:30:36:4f:44:72:08:ec:ff:75:1a:48:25:92: f7:8c:dc:36:48:5c:c7:cb:f9:8d:e7:a0:ff:04:4a: 7e:fe:f9:39:7a:c0:d1:22:81:17:a4:a2:6f:fa:85: 41:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7A:76:F1:38:76:C8:59:18:02:B7:2D:70:44:1C:35:9D:B1:C2:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0fdcaa24-e3b0-3eca-983a-c86646b16ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:33:37:b4:a7:6a:86:49:4f:1d:94:f5:6e:33:bd:4e:fc:60: c4:52:97:69:58:b9:d3:c3:ca:d2:92:a2:7f:cc:35:76:14:52: 77:67:46:db:82:01:79:33:96:8d:24:17:56:5c:64:95:ae:89: 72:50:16:70:e9:77:43:e7:c0:cb:4c:5a:33:c9:d7:f8:fd:aa: c3:32:51:69:12:b1:c4:87:2d:f7:58:ff:cf:82:9b:a4:89:ab: 0d:08:1a:64:58:ca:5b:a2:53:f2:d3:23:f5:50:55:85:d7:f0: 11:0e:01:4e:7c:2b:2a:53:12:0a:47:9d:1e:af:16:2e:8b:be: 32:a7:9b:f7:9f:e2:23:be:5a:67:c1:6c:18:a5:4f:f8:d5:50: 7d:cf:f4:d7:0f:a6:6a:cb:4a:a1:e5:26:73:a8:73:6b:42:9c: 19:98:61:d6:c6:95:c4:de:97:4a:1c:d5:d7:6b:53:23:4a:3e: b8:94:ea:52:a0:72:94:9a:04:17:17:da:9c:b1:e2:c1:02:d1: 17:0e:d2:c0:30:91:82:1b:64:c9:6a:57:ce:85:ee:af:40:d2: 70:ff:fc:80:3a:63:60:3c:f4:37:f6:d9:ab:68:5a:3c:74:05: 1c:66:25:c8:18:07:9e:31:1d:1f:00:ed:ad:c3:3c:9d:9b:96: 83:1f:6d:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnIUlYkoAkkvCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk NGU0Y2I5NmUtZTk1YS00MDAwLWJhN2MtMjFlODgwMTIwZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4t+WKJy2E9WNYIOGD5j7tBXLK32JgljMa8w UP8SunIdmcMIlcKVyOqnSzR8nJwrc199pMgzSme9so4lUW5dOyCGS1VrkTmuBnkF ISKGzYfJBOKfLCR+q0aazG7i9kHYUt6Pu+4LbSzOEmb945T+uzB4o943AwEoFx2K AaoQ1FwR3oBNh025bhE6/GwHOTTSZame7Vv+JHOQ0+84W4efRSBxx+7see42xxD7 +SKI+WZuu6kdx8KAZZDbckiDkLjacN9ZNU1U3G7d+CyMbVoOqY1NcjA2T0RyCOz/ dRpIJZL3jNw2SFzHy/mN56D/BEp+/vk5esDRIoEXpKJv+oVBWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMt6dvE4dshZGAK3LXBEHDWdscIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGZkY2FhMjQtZTNiMC0z ZWNhLTk4M2EtYzg2NjQ2YjE2ZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMzN7SnaoZJTx2U9W4zvU78YMRSl2lYudPDytKSon/MNXYUUndnRtuC AXkzlo0kF1ZcZJWuiXJQFnDpd0PnwMtMWjPJ1/j9qsMyUWkSscSHLfdY/8+Cm6SJ qw0IGmRYyluiU/LTI/VQVYXX8BEOAU58KypTEgpHnR6vFi6LvjKnm/ef4iO+WmfB bBilT/jVUH3P9NcPpmrLSqHlJnOoc2tCnBmYYdbGlcTel0oc1ddrUyNKPriU6lKg cpSaBBcX2pyx4sEC0RcO0sAwkYIbZMlqV86F7q9A0nD//IA6Y2A89Df22atoWjx0 BRxmJcgYB54xHR8A7a3DPJ2bloMfbbM= -----END CERTIFICATE-----Generated at Tue Jun 3 10:16:26 2025 by rpki-client