$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/531069aa-fc87-328c-84eb-4940ce8d82da.roa File: 531069aa-fc87-328c-84eb-4940ce8d82da.roa (raw, json) Hash identifier: YPWpxWQAoN6JhN9qplsYVJb6iXny9Qd0YUEDLD41C4Q= Subject key identifier: 23:B9:68:8A:6E:84:0A:2E:E6:48:FA:63:11:C5:63:CE:7A:BB:D4:7D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848CB1649C3EA2B42B2BC65D080 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/531069aa-fc87-328c-84eb-4940ce8d82da.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 172.111.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:49:c3:ea:2b:42:b2:bc:65:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=0dedd5b1-5135-435b-9aa0-9d4d58c6ee29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e5:78:6a:a6:d8:58:16:39:5a:7b:dc:2e:06: e5:d6:50:d1:f7:0e:23:45:1e:3c:d1:bb:b7:5e:9e: 79:de:c8:f8:b5:53:a8:13:e1:b6:21:7b:f9:e4:8d: 3f:af:f3:9c:09:ea:46:1f:c1:36:b5:e8:75:98:0f: e2:45:29:d3:12:07:ea:13:a4:8f:fe:1e:55:7f:47: ea:aa:0b:c8:83:05:9a:51:9a:68:37:f7:41:6e:c5: 0d:66:0a:e9:f8:15:31:e1:86:39:31:63:ca:30:8b: 84:07:59:5f:cc:ee:b0:1a:2c:f0:6e:e9:e1:32:4c: 3b:d9:9a:49:2b:82:19:08:fa:a8:e9:c7:10:27:b5: f9:1a:61:f6:e8:33:8e:7a:52:79:b8:f0:d0:2e:19: bc:3b:92:3a:86:d0:74:7c:07:8f:23:ab:05:86:7d: 05:6f:b2:b1:d1:84:6f:cb:e8:7a:34:5e:ba:99:15: 7d:34:05:27:23:e1:7e:c5:2a:fb:7e:a5:62:a0:55: 98:a7:c6:a6:de:b8:55:74:d5:94:66:17:81:d0:9b: e9:00:0f:3c:64:af:bf:b3:af:7c:92:a8:5e:a3:94: 47:73:c9:8d:7d:46:5f:d9:bd:28:83:e6:2c:76:b7: af:bf:97:7a:24:26:cf:65:66:a6:a0:26:75:a6:e9: 43:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B9:68:8A:6E:84:0A:2E:E6:48:FA:63:11:C5:63:CE:7A:BB:D4:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/531069aa-fc87-328c-84eb-4940ce8d82da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d6:13:63:e4:63:ca:50:0b:57:18:14:18:b0:11:f3:b1:31: 23:6b:2c:8d:bd:06:f4:85:5e:0d:10:d6:15:82:62:1c:fe:98: 3f:b3:1b:9e:2c:15:a1:59:b7:75:19:60:5a:41:aa:81:d2:78: d4:11:e0:9f:75:71:a0:d3:7f:bd:97:aa:cf:20:2a:ad:fb:02: eb:e6:c8:21:6f:75:00:5e:c5:aa:1b:6e:86:97:a8:0d:92:4a: c4:0f:4d:13:0c:20:02:a2:e9:41:2b:d0:34:85:f2:54:8a:6c: c3:86:50:5d:9a:66:14:51:90:7c:a9:86:3e:a9:99:a4:d8:fc: 2b:40:3e:1d:b5:de:9b:31:b7:90:c9:99:01:4a:11:c2:43:b8: a5:bf:e9:c0:c9:1d:d1:de:41:3d:18:71:f0:83:77:e4:88:c1: b6:2f:c9:83:b9:9e:9d:43:67:f2:0c:3d:70:53:d1:09:b9:a0: f3:5c:0c:12:13:8d:1a:27:00:62:32:7b:df:99:57:28:18:3e: fa:91:6b:7f:6b:77:0e:0a:2b:bf:5c:3b:e5:7b:2d:82:99:dd: ad:ee:f0:da:54:23:6a:bf:1a:72:dc:0a:c5:5f:6d:b7:a8:71: a1:8e:98:90:eb:e6:4d:7c:4a:1e:34:58:c3:da:2e:b5:ed:a7: 55:25:07:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFknD6itCsrxl0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk MGRlZGQ1YjEtNTEzNS00MzViLTlhYTAtOWQ0ZDU4YzZlZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOV4aqbYWBY5WnvcLgbl1lDR9w4jRR480bu3 Xp553sj4tVOoE+G2IXv55I0/r/OcCepGH8E2teh1mA/iRSnTEgfqE6SP/h5Vf0fq qgvIgwWaUZpoN/dBbsUNZgrp+BUx4YY5MWPKMIuEB1lfzO6wGizwbunhMkw72ZpJ K4IZCPqo6ccQJ7X5GmH26DOOelJ5uPDQLhm8O5I6htB0fAePI6sFhn0Fb7Kx0YRv y+h6NF66mRV9NAUnI+F+xSr7fqVioFWYp8am3rhVdNWUZheB0JvpAA88ZK+/s698 kqheo5RHc8mNfUZf2b0og+Ysdrevv5d6JCbPZWamoCZ1pulDCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCO5aIpuhAou5kj6YxHFY856u9R9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTMxMDY5YWEtZmM4Ny0z MjhjLTg0ZWItNDk0MGNlOGQ4MmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzWE2PkY8pQC1cYFBiwEfOxMSNrLI29BvSFXg0Q1hWCYhz+mD+zG54s FaFZt3UZYFpBqoHSeNQR4J91caDTf72Xqs8gKq37AuvmyCFvdQBexaobboaXqA2S SsQPTRMMIAKi6UEr0DSF8lSKbMOGUF2aZhRRkHyphj6pmaTY/CtAPh213psxt5DJ mQFKEcJDuKW/6cDJHdHeQT0YcfCDd+SIwbYvyYO5np1DZ/IMPXBT0Qm5oPNcDBIT jRonAGIye9+ZVygYPvqRa39rdw4KK79cO+V7LYKZ3a3u8NpUI2q/GnLcCsVfbbeo caGOmJDr5k18Sh40WMPaLrXtp1UlB+0= -----END CERTIFICATE-----Generated at Fri Apr 4 23:52:45 2025 by rpki-client