$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3b14b9ba-c7bf-365b-88bc-2052dc9bf9f7.roa File: 3b14b9ba-c7bf-365b-88bc-2052dc9bf9f7.roa (raw, json) Hash identifier: RM2K2ww5kZaHf5FSpUoMikZiLElwQQ/v7Nw8h8wjNuU= Subject key identifier: 2C:1F:95:0C:D2:F1:E2:40:DC:72:8D:30:F8:BB:0D:9D:04:71:08:06 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848E8F0408826B7C7E1586E0500 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3b14b9ba-c7bf-365b-88bc-2052dc9bf9f7.roa Signing time: Mon 17 Feb 2025 06:38:30 +0000 ROA not before: Mon 17 Feb 2025 06:38:30 +0000 ROA not after: Sun 18 May 2025 05:38:30 +0000 asID: 213676 IP address blocks: 172.111.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e8:f0:40:88:26:b7:c7:e1:58:6e:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 17 06:38:30 2025 GMT Not After : May 18 05:38:30 2025 GMT Subject: CN=d8cd9fc3-7d2d-453f-a3bc-593dcbb8f659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:90:b0:a2:55:3c:1c:97:13:ff:91:54:92:ed: ef:7f:09:4c:76:9d:a2:87:67:9f:c2:b5:3c:76:31: 9e:93:90:2b:b8:07:c5:7c:53:8d:70:3e:49:b3:86: 10:26:34:d0:09:f0:e7:06:1f:72:71:c4:f6:85:ac: 58:3d:9e:98:84:81:1b:8a:94:07:24:9d:02:29:93: 52:80:40:59:4e:ea:d3:34:e2:86:2c:13:4e:77:a2: d8:81:90:f8:36:ce:90:a9:cb:dc:87:cf:a0:8b:cb: 42:75:08:8d:1b:ab:a5:9c:b4:61:dc:26:e5:9b:80: 9b:9f:c7:ac:08:47:dc:79:94:ba:fb:9c:27:e1:b0: b3:19:db:72:12:07:f1:af:9b:aa:a6:a4:ac:54:d0: f0:c9:25:a8:9d:cf:bc:f9:ac:88:79:05:7c:0f:90: 72:3c:04:73:73:46:16:9d:af:e0:e2:1c:ac:a6:9b: e7:d2:fa:fd:55:b7:f5:fe:97:9c:4f:42:ea:a7:fa: 49:a9:db:ac:1d:12:53:d3:c4:4c:f4:46:49:54:d9: 46:19:6b:26:98:0d:1a:ea:2a:11:f5:e5:ed:af:db: 94:bd:db:b2:7e:57:55:af:c6:8f:54:58:19:c3:a7: 01:7e:73:6d:e7:c3:46:03:36:2a:c8:36:d4:cc:82: 3d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1F:95:0C:D2:F1:E2:40:DC:72:8D:30:F8:BB:0D:9D:04:71:08:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3b14b9ba-c7bf-365b-88bc-2052dc9bf9f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ba:c2:2d:b5:3c:ad:98:2f:d1:f0:34:4a:c7:6d:5d:03:e1: 24:07:53:70:42:db:b3:35:1a:1c:19:7c:6b:7b:fa:24:c5:f3: 79:ab:ad:dd:0f:56:cd:ae:43:80:9c:e2:a5:c3:90:08:f0:0b: d4:d8:17:ad:20:00:c6:2b:3d:5b:ea:22:8b:8d:54:80:24:a4: e5:2b:78:0b:5a:ec:4a:38:0e:73:f3:6a:ad:9c:da:a3:22:72: 90:44:9a:d4:0a:37:19:8e:7f:0e:2c:0d:fe:1a:3b:22:e2:3a: 60:8c:03:8e:32:b3:9b:52:db:72:ca:dd:bb:9f:92:84:30:8e: cb:48:43:dc:6e:fc:6c:10:fb:cd:bc:98:86:2c:3b:c2:1f:a6: b2:53:50:d9:a1:8f:12:ed:ec:52:18:7a:b7:0a:70:ee:60:9b: cc:3a:52:53:42:ee:f6:70:28:8e:59:65:23:09:d4:2e:c1:35: 71:f4:9f:d4:d9:c0:e1:e5:a4:aa:b2:11:f0:40:f4:09:26:af: 23:51:de:03:a7:ab:03:cb:84:42:81:a7:11:a6:2d:2b:6f:14: 85:74:a9:81:fb:67:c5:e0:60:72:94:39:60:ab:ef:d5:a3:ba: c7:02:a9:0d:51:2c:16:5f:88:59:af:ce:89:c0:87:5f:8a:87: 2b:d1:ae:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjo8ECIJrfH4VhuBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIxNzA2MzgzMFoXDTI1MDUxODA1MzgzMFowLzEtMCsGA1UEAxMk ZDhjZDlmYzMtN2QyZC00NTNmLWEzYmMtNTkzZGNiYjhmNjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppCwolU8HJcT/5FUku3vfwlMdp2ih2efwrU8 djGek5AruAfFfFONcD5Js4YQJjTQCfDnBh9yccT2haxYPZ6YhIEbipQHJJ0CKZNS gEBZTurTNOKGLBNOd6LYgZD4Ns6Qqcvch8+gi8tCdQiNG6ulnLRh3Cblm4Cbn8es CEfceZS6+5wn4bCzGdtyEgfxr5uqpqSsVNDwySWonc+8+ayIeQV8D5ByPARzc0YW na/g4hysppvn0vr9Vbf1/pecT0Lqp/pJqdusHRJT08RM9EZJVNlGGWsmmA0a6ioR 9eXtr9uUvduyfldVr8aPVFgZw6cBfnNt58NGAzYqyDbUzII9IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwflQzS8eJA3HKNMPi7DZ0EcQgGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2IxNGI5YmEtYzdiZi0z NjViLTg4YmMtMjA1MmRjOWJmOWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa6wi21PK2YL9HwNErHbV0D4SQHU3BC27M1GhwZfGt7+iTF83mrrd0P Vs2uQ4Cc4qXDkAjwC9TYF60gAMYrPVvqIouNVIAkpOUreAta7Eo4DnPzaq2c2qMi cpBEmtQKNxmOfw4sDf4aOyLiOmCMA44ys5tS23LK3bufkoQwjstIQ9xu/GwQ+828 mIYsO8IfprJTUNmhjxLt7FIYercKcO5gm8w6UlNC7vZwKI5ZZSMJ1C7BNXH0n9TZ wOHlpKqyEfBA9AkmryNR3gOnqwPLhEKBpxGmLStvFIV0qYH7Z8XgYHKUOWCr79Wj uscCqQ1RLBZfiFmvzonAh1+KhyvRrrc= -----END CERTIFICATE-----Generated at Sat Feb 22 04:51:36 2025 by rpki-client