$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4185bb57-8020-3c94-859c-9192cd404661.roa File: 4185bb57-8020-3c94-859c-9192cd404661.roa (raw, json) Hash identifier: cPD3GU0B7N7Dfp1bjoZC+QoAuJ30kQEd40o2ZNDGEWY= Subject key identifier: D6:16:E7:16:69:E0:1E:B7:E6:5D:FF:A6:52:8C:E3:7F:D5:E7:A5:D5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848BD20E05C7716FE926D98A400 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4185bb57-8020-3c94-859c-9192cd404661.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 53356 IP address blocks: 172.111.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:e0:5c:77:16:fe:92:6d:98:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=590ae461-ae19-44cd-bcf7-def95f9c716d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:f2:e7:cf:24:38:34:6d:16:6b:9b:fb:6d: 69:9b:3e:ca:98:e6:57:b6:20:03:8e:88:75:79:20: 07:79:03:2a:88:b0:66:e1:75:9e:08:8a:85:f0:8f: 3d:40:72:92:2b:b2:97:dc:b1:18:89:88:ba:fc:32: 72:65:89:34:cd:f3:b5:c7:d4:ae:bb:fa:94:98:b9: 05:50:64:d3:51:29:73:26:38:d0:cb:45:fe:c2:74: b6:87:b3:97:66:21:64:ed:16:53:db:81:f4:9f:8c: 70:8b:58:4e:f2:34:2d:77:e6:11:32:cd:9e:d3:af: 3d:27:e6:a8:18:ca:fe:5d:79:6f:34:64:5f:c7:e3: fe:5f:84:5a:62:df:51:b6:2c:b2:b6:b3:8c:45:f3: 2e:8f:9e:74:35:b4:78:4b:61:82:a9:24:53:46:90: 31:28:fa:23:17:c4:dc:28:81:29:a0:1b:a4:38:1c: c8:2c:d1:dc:dd:d1:12:f6:84:6d:93:c3:a3:f7:62: 0c:2e:76:04:7e:48:d1:96:e0:b6:d7:b4:4e:8c:06: 1c:17:b6:d2:ef:c5:03:f8:45:24:2e:df:67:d2:16: 8a:64:c9:56:ed:77:b5:0f:bc:ea:f6:88:c6:68:41: 7d:39:1f:6d:f0:c9:5e:cd:16:42:8d:a3:e6:3f:8f: 5e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:16:E7:16:69:E0:1E:B7:E6:5D:FF:A6:52:8C:E3:7F:D5:E7:A5:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4185bb57-8020-3c94-859c-9192cd404661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:bc:f0:12:4c:51:df:6b:a5:30:96:b8:39:4a:25:3f:ab:30: e7:79:29:61:66:69:85:2e:b7:86:b6:95:49:5f:49:22:a0:21: 7c:db:e0:2d:49:ee:98:44:25:1e:38:f6:eb:2a:89:b7:90:07: ea:14:65:e2:67:5b:82:9c:e7:f6:68:9e:c6:5e:52:f0:ec:0d: 61:ab:60:9f:37:4e:fb:1a:d9:fa:20:06:19:c7:7a:c9:f4:40: 6c:d1:8b:74:2e:5f:b9:db:64:9c:a6:e8:1c:b1:cf:6d:69:e9: 09:b5:d2:4f:cd:dc:64:83:d3:f8:68:4f:cb:71:99:6d:d4:c7: a4:24:9e:46:f3:eb:31:b7:fb:95:fc:11:57:5d:0e:eb:80:17: 6d:84:65:c0:60:03:a2:a3:da:92:7c:c8:14:4d:2c:20:df:e2: 32:9a:c3:16:19:61:07:81:c7:24:33:30:6e:25:27:39:14:b0: 59:8a:2d:c1:1a:24:48:3d:32:57:63:79:9d:87:47:1f:4d:0a: c4:a8:11:15:0c:45:f2:8c:4b:84:b3:a6:c0:02:a9:e3:ba:7e: b8:3c:9f:91:44:c4:07:d6:c3:0d:a9:51:b3:13:ad:3a:f5:b3: a0:94:90:82:b2:40:6b:57:37:6a:76:70:e1:f9:7c:15:f8:62: 0a:54:6e:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IOBcdxb+km2YpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk NTkwYWU0NjEtYWUxOS00NGNkLWJjZjctZGVmOTVmOWM3MTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQvy588kODRtFmub+21pmz7KmOZXtiADjoh1 eSAHeQMqiLBm4XWeCIqF8I89QHKSK7KX3LEYiYi6/DJyZYk0zfO1x9Suu/qUmLkF UGTTUSlzJjjQy0X+wnS2h7OXZiFk7RZT24H0n4xwi1hO8jQtd+YRMs2e0689J+ao GMr+XXlvNGRfx+P+X4RaYt9RtiyytrOMRfMuj550NbR4S2GCqSRTRpAxKPojF8Tc KIEpoBukOBzILNHc3dES9oRtk8Oj92IMLnYEfkjRluC217ROjAYcF7bS78UD+EUk Lt9n0haKZMlW7Xe1D7zq9ojGaEF9OR9t8MlezRZCjaPmP49eJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYW5xZp4B635l3/plKM43/V56XVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDE4NWJiNTctODAyMC0z Yzk0LTg1OWMtOTE5MmNkNDA0NjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm88BJMUd9rpTCWuDlKJT+rMOd5KWFmaYUut4a2lUlfSSKgIXzb4C1J 7phEJR449usqibeQB+oUZeJnW4Kc5/ZonsZeUvDsDWGrYJ83Tvsa2fogBhnHesn0 QGzRi3QuX7nbZJym6Byxz21p6Qm10k/N3GSD0/hoT8txmW3Ux6Qknkbz6zG3+5X8 EVddDuuAF22EZcBgA6Kj2pJ8yBRNLCDf4jKawxYZYQeBxyQzMG4lJzkUsFmKLcEa JEg9MldjeZ2HRx9NCsSoERUMRfKMS4SzpsACqeO6frg8n5FExAfWww2pUbMTrTr1 s6CUkIKyQGtXN2p2cOH5fBX4YgpUbmU= -----END CERTIFICATE-----Generated at Fri Apr 11 22:55:25 2025 by rpki-client