$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28baacda-6a68-3c8f-b393-d75be1456004.roa File: 28baacda-6a68-3c8f-b393-d75be1456004.roa (raw, json) Hash identifier: 7+3QRf0r+ygkEdGDTq8+9YUbJXcJ2zx0sODV78r3v7U= Subject key identifier: 45:05:27:E5:F9:53:91:38:61:CA:50:46:60:85:E6:AF:F7:FF:56:2E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584930DE736D663178D14B4BA2C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28baacda-6a68-3c8f-b393-d75be1456004.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 212238 IP address blocks: 172.111.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:73:6d:66:31:78:d1:4b:4b:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=29fc08e4-2b06-4dde-944a-34da45f51598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5f:70:7d:6b:09:30:c4:fa:76:f5:cc:88:2a: fd:51:6f:8b:9e:5e:69:8f:d5:8b:47:6e:1d:7e:3e: 60:9d:ba:0e:93:16:e8:81:6a:32:fe:ee:d4:8d:f0: a7:25:f0:45:1a:36:1f:9e:b3:75:4f:06:3e:70:92: d7:8b:21:bd:e1:32:bc:5a:e3:53:86:e9:f7:13:84: fd:6f:0f:4a:b5:63:11:d5:57:84:56:8c:55:29:ec: 2f:62:40:91:6b:af:95:af:90:56:d1:e3:0d:42:34: dc:de:66:1b:04:c9:ae:02:4c:4f:37:c8:b1:3d:cd: 59:4a:09:d6:b2:28:ab:08:ca:92:0d:ef:7b:ab:f8: 2a:5a:55:fa:27:84:9f:1f:67:0e:c9:0e:f0:16:2b: 72:ae:f8:64:73:31:4d:95:29:5a:07:f1:4a:7c:14: 06:f6:3d:73:54:05:3e:82:23:f0:3d:50:b1:4a:64: 8d:d8:14:cc:84:b6:10:1b:3b:da:5b:77:8d:77:9d: 2d:32:3a:b4:06:fa:5a:cb:12:6c:06:d1:2e:57:15: ff:e5:46:97:1e:8c:ed:d1:f6:a5:04:05:65:ae:6c: 94:7c:3a:57:93:7c:3a:46:48:a7:cf:5a:27:a0:7b: f6:3b:7a:5d:7f:44:6e:8e:61:a3:39:56:68:db:2d: d5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:05:27:E5:F9:53:91:38:61:CA:50:46:60:85:E6:AF:F7:FF:56:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28baacda-6a68-3c8f-b393-d75be1456004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:1c:68:43:19:54:1e:d6:63:cc:8a:5b:6e:6c:5b:a0:34:4a: 80:21:7f:c8:3e:1e:4d:93:c5:66:f2:4e:3d:73:f0:83:0b:cf: a2:d9:2b:b7:ae:5b:d8:29:4b:42:1e:79:04:49:fc:95:62:c6: 13:04:6c:55:c0:d9:63:44:d8:0b:60:ff:f0:6d:56:19:e7:2e: 59:7f:f6:d5:52:2f:c0:ce:dd:87:02:6f:8f:0e:95:7f:20:9d: 29:c2:ee:6f:b8:f6:7c:5c:c7:a1:e6:0b:24:4b:af:e4:75:42: 5a:39:4e:c4:73:fd:08:1d:27:10:9b:69:e4:2b:8b:45:0a:ae: 96:aa:a6:9c:08:d6:0c:2a:e3:ef:44:7c:0e:5f:41:57:31:62: 09:6b:f4:4c:f6:87:8a:15:f5:c9:5c:72:d2:29:35:6a:6e:81: 8f:6c:93:9f:bf:66:4b:3d:92:c8:90:d6:4b:97:fa:a8:a8:b2: 29:7b:a2:80:ee:bf:50:94:15:44:92:e2:4a:8b:54:83:c6:ee: 1e:d0:ac:69:b6:63:8f:bd:a8:43:aa:e4:aa:fd:94:c5:2f:09: ce:86:02:ad:15:3a:31:05:5e:50:07:33:47:44:c8:0a:84:49: f8:63:69:a7:77:e1:32:9f:b3:c7:20:2f:b3:10:78:4c:cf:b0: 90:37:2e:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nNtZjF40UtLosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk MjlmYzA4ZTQtMmIwNi00ZGRlLTk0NGEtMzRkYTQ1ZjUxNTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl19wfWsJMMT6dvXMiCr9UW+Lnl5pj9WLR24d fj5gnboOkxbogWoy/u7UjfCnJfBFGjYfnrN1TwY+cJLXiyG94TK8WuNThun3E4T9 bw9KtWMR1VeEVoxVKewvYkCRa6+Vr5BW0eMNQjTc3mYbBMmuAkxPN8ixPc1ZSgnW siirCMqSDe97q/gqWlX6J4SfH2cOyQ7wFityrvhkczFNlSlaB/FKfBQG9j1zVAU+ giPwPVCxSmSN2BTMhLYQGzvaW3eNd50tMjq0BvpayxJsBtEuVxX/5UaXHozt0fal BAVlrmyUfDpXk3w6Rkinz1onoHv2O3pdf0RujmGjOVZo2y3VoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUFJ+X5U5E4YcpQRmCF5q/3/1YuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjhiYWFjZGEtNmE2OC0z YzhmLWIzOTMtZDc1YmUxNDU2MDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8caEMZVB7WY8yKW25sW6A0SoAhf8g+Hk2TxWbyTj1z8IMLz6LZK7eu W9gpS0IeeQRJ/JVixhMEbFXA2WNE2Atg//BtVhnnLll/9tVSL8DO3YcCb48OlX8g nSnC7m+49nxcx6HmCyRLr+R1Qlo5TsRz/QgdJxCbaeQri0UKrpaqppwI1gwq4+9E fA5fQVcxYglr9Ez2h4oV9clcctIpNWpugY9sk5+/Zks9ksiQ1kuX+qiosil7ooDu v1CUFUSS4kqLVIPG7h7QrGm2Y4+9qEOq5Kr9lMUvCc6GAq0VOjEFXlAHM0dEyAqE Sfhjaad34TKfs8cgL7MQeEzPsJA3Low= -----END CERTIFICATE-----Generated at Fri Apr 11 23:00:46 2025 by rpki-client