$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1693deb8-1531-33fd-925a-247e8cd7c80d.roa File: 1693deb8-1531-33fd-925a-247e8cd7c80d.roa (raw, json) Hash identifier: xR/C9/N1L5sA7oiDf3RX18zvF+IKpOh4c6uGjZ7Imb8= Subject key identifier: 02:58:C5:F2:8F:57:0B:D6:AB:6B:F7:1C:CC:28:54:23:05:70:61:25 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584930DE7387F98D67AB452F6E00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1693deb8-1531-33fd-925a-247e8cd7c80d.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 212238 IP address blocks: 172.111.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:73:87:f9:8d:67:ab:45:2f:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=7722be1a-9cb6-47cf-94d0-6c036ebb686e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3d:f1:59:3b:43:19:16:ba:8f:3c:3d:7b:9f: af:1a:d6:9a:6c:37:44:93:7a:d5:9a:d1:72:ad:5e: b0:9c:ef:3f:13:c0:3a:e7:f1:49:ef:f5:f9:43:1c: 8f:3b:25:a5:b0:29:87:6d:77:8e:d4:9c:0b:d7:06: 30:f7:e7:f1:1c:38:81:c9:36:78:58:01:30:40:67: a3:51:d9:62:1f:54:94:20:7e:68:f2:ce:e2:e5:46: 64:af:39:1d:e3:d6:21:b3:9f:d5:a1:1c:9b:f2:3e: 37:d6:c4:ca:bc:49:df:55:fd:f5:92:87:1c:89:b5: 68:b5:fd:84:39:f9:c5:59:24:c2:d7:7c:7e:39:bb: bf:ea:25:be:34:61:3c:74:da:30:46:6b:64:85:34: 61:ca:96:94:2c:da:42:02:c5:92:c3:e4:b4:44:6b: e4:92:eb:43:4d:17:24:f1:bb:f2:0b:4b:63:a9:e1: 9c:77:21:ea:be:8e:05:aa:f7:58:f7:76:5b:c3:02: fb:56:7d:fc:74:ea:ab:fc:6f:96:c0:43:9c:c0:f7: 7d:27:08:5a:5b:1a:11:6e:7a:6d:32:12:a7:c4:dc: a8:f3:59:85:64:5e:7e:c9:70:2a:39:2f:f9:32:0d: 07:6b:18:50:5c:45:95:72:a4:31:11:29:65:0c:62: 6f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:58:C5:F2:8F:57:0B:D6:AB:6B:F7:1C:CC:28:54:23:05:70:61:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1693deb8-1531-33fd-925a-247e8cd7c80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:3b:12:84:3c:96:8e:74:15:dd:32:75:56:6a:d6:4b:ee:7a: 52:f2:c6:c8:98:09:c5:51:b5:8c:95:de:7c:af:cc:98:7b:0f: 5f:0a:40:41:9b:5c:41:00:88:4a:b8:e8:a3:d0:31:35:f5:64: 6d:04:9c:c1:41:61:bc:df:1f:9e:63:ea:f7:e1:b8:59:52:11: 12:23:ff:e1:42:95:e1:ba:a8:be:e8:69:c4:76:50:54:f9:f0: 6e:da:17:e0:db:61:5e:db:54:a1:ff:b9:7a:64:36:fe:32:4a: 44:5b:fd:4c:51:e3:47:79:c6:4a:7f:81:8d:11:5f:fd:d7:40: d3:00:95:75:c7:79:ce:14:7d:bd:cc:49:df:58:9a:54:db:cb: 08:f8:50:ff:53:2c:62:fb:05:ae:db:8c:8a:ff:c2:b2:91:fa: d8:d2:bd:8d:fa:73:a6:06:d7:b0:ee:ce:b0:1f:b2:03:c2:bf: 0d:9e:c1:94:9b:1e:d6:8d:78:da:dc:51:0a:98:f5:f8:b5:92: e7:41:d5:20:b0:61:b9:ac:76:07:2f:bb:1d:1c:bd:14:89:a8: 5d:0c:3a:72:4b:71:ea:54:2a:0c:0e:85:d7:3d:d4:6d:6d:b9: d2:7d:1f:18:53:e0:33:21:e8:81:7f:54:75:82:9e:98:e2:34: 7c:c2:27:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nOH+Y1nq0UvbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk NzcyMmJlMWEtOWNiNi00N2NmLTk0ZDAtNmMwMzZlYmI2ODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj3xWTtDGRa6jzw9e5+vGtaabDdEk3rVmtFy rV6wnO8/E8A65/FJ7/X5QxyPOyWlsCmHbXeO1JwL1wYw9+fxHDiByTZ4WAEwQGej UdliH1SUIH5o8s7i5UZkrzkd49Yhs5/VoRyb8j431sTKvEnfVf31koccibVotf2E OfnFWSTC13x+Obu/6iW+NGE8dNowRmtkhTRhypaULNpCAsWSw+S0RGvkkutDTRck 8bvyC0tjqeGcdyHqvo4FqvdY93ZbwwL7Vn38dOqr/G+WwEOcwPd9JwhaWxoRbnpt MhKnxNyo81mFZF5+yXAqOS/5Mg0HaxhQXEWVcqQxESllDGJvRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJYxfKPVwvWq2v3HMwoVCMFcGElMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTY5M2RlYjgtMTUzMS0z M2ZkLTkyNWEtMjQ3ZThjZDdjODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHw7EoQ8lo50Fd0ydVZq1kvuelLyxsiYCcVRtYyV3nyvzJh7D18KQEGb XEEAiEq46KPQMTX1ZG0EnMFBYbzfH55j6vfhuFlSERIj/+FCleG6qL7oacR2UFT5 8G7aF+DbYV7bVKH/uXpkNv4ySkRb/UxR40d5xkp/gY0RX/3XQNMAlXXHec4Ufb3M Sd9YmlTbywj4UP9TLGL7Ba7bjIr/wrKR+tjSvY36c6YG17DuzrAfsgPCvw2ewZSb HtaNeNrcUQqY9fi1kudB1SCwYbmsdgcvux0cvRSJqF0MOnJLcepUKgwOhdc91G1t udJ9HxhT4DMh6IF/VHWCnpjiNHzCJ6E= -----END CERTIFICATE-----Generated at Fri Apr 11 23:13:26 2025 by rpki-client