$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5938b922-fbd7-3252-8de4-f85dd5b529d0.roa File: 5938b922-fbd7-3252-8de4-f85dd5b529d0.roa (raw, json) Hash identifier: K6B+s5eZm7vnvCgmeGQcpmwzUnfqTqQAAwt7lY1K1Qw= Subject key identifier: 6B:A6:49:84:0B:A9:AE:C0:42:8A:5D:73:35:DF:89:22:C1:9D:09:9D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584929E3D079D73C5026B4CCCAA0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5938b922-fbd7-3252-8de4-f85dd5b529d0.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 9009 IP address blocks: 172.111.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:d0:79:d7:3c:50:26:b4:cc:ca:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=959a570b-e66b-417a-9975-04c866d4da64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4b:26:12:7d:2b:c5:c7:61:74:ce:fa:f8:c1: 4c:ef:cb:3f:e5:e8:64:88:47:a8:a0:12:2b:a8:73: 74:26:12:8b:84:df:98:c6:14:b0:a3:49:fb:21:3d: eb:92:e4:aa:20:fa:54:0f:6f:f8:c1:89:ab:5b:28: d9:67:0e:c3:0c:e5:65:1f:d9:33:72:53:3c:51:43: 95:aa:d3:f6:96:84:1a:f0:e2:a8:4f:c9:be:0c:00: 24:f7:f2:57:7a:c0:3f:4f:b5:50:69:4f:76:25:dd: e0:07:32:96:4b:4a:6d:30:0c:10:19:ad:b6:1c:15: dc:9e:4b:65:c7:2a:e3:c6:30:2c:2d:4e:dd:47:b4: 4c:db:3b:46:8c:1b:d4:c1:9a:3d:1a:25:0e:ce:3e: 27:cb:58:64:67:8b:d3:99:8d:86:c0:10:aa:7f:06: 85:bc:44:cb:4a:6e:0e:b0:8f:21:f2:16:78:4c:7d: b0:f7:f7:e4:89:f5:8e:45:f6:d6:2d:61:c0:48:94: 80:ed:ff:27:32:74:ef:25:93:26:57:bd:d1:82:e4: 6e:87:e0:25:4b:da:a6:f7:c5:f6:9c:4d:eb:97:ce: 67:76:9b:49:c8:29:3f:40:08:4b:2f:ea:b6:0d:4c: 6e:28:b6:8e:85:36:42:1f:fe:d5:92:7b:3b:d3:1a: eb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A6:49:84:0B:A9:AE:C0:42:8A:5D:73:35:DF:89:22:C1:9D:09:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5938b922-fbd7-3252-8de4-f85dd5b529d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:df:bc:a0:39:6a:dd:3e:85:48:6e:a2:af:c6:aa:9a:4e:55: 50:7b:c0:80:97:57:93:51:0f:16:17:73:b0:dd:09:8c:09:7c: ce:a7:2c:69:84:c3:c9:b2:81:4d:a0:4f:61:c2:9c:7e:23:0a: 6e:81:a6:80:c5:ed:6a:7a:68:3e:79:56:e7:53:ab:90:8d:fc: 97:00:9f:e8:eb:c9:7c:a7:65:14:cd:c7:e1:28:bb:df:40:5d: 56:97:f1:9d:6f:9d:a5:70:e0:6c:2d:49:0c:b1:4c:ba:58:4d: fd:16:d6:0f:d8:5c:c8:a8:86:e2:95:bd:45:68:71:43:38:eb: e1:48:94:7e:0c:05:c2:9d:94:03:b8:4e:62:8f:3a:87:16:ab: 18:8d:ae:e7:f2:f6:6a:64:f3:66:f8:cf:23:63:bc:3b:ce:22: fc:5f:09:66:04:29:94:22:aa:15:91:34:9f:2b:f9:25:f3:34: da:01:a3:21:95:d1:b5:10:11:42:bc:0c:7a:d1:ee:ca:d5:d3: 06:f9:cd:b3:3d:3f:db:b0:0f:93:7c:fb:94:9c:a4:85:c2:3c: b1:4e:fa:d4:8f:d1:52:b7:87:a4:d5:eb:6a:8b:5d:8e:94:a7: 00:38:d2:0b:b0:55:38:d0:d6:19:7f:68:01:82:c9:9a:70:38: e7:cb:fe:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkp49B51zxQJrTMyqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk OTU5YTU3MGItZTY2Yi00MTdhLTk5NzUtMDRjODY2ZDRkYTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0smEn0rxcdhdM76+MFM78s/5ehkiEeooBIr qHN0JhKLhN+YxhSwo0n7IT3rkuSqIPpUD2/4wYmrWyjZZw7DDOVlH9kzclM8UUOV qtP2loQa8OKoT8m+DAAk9/JXesA/T7VQaU92Jd3gBzKWS0ptMAwQGa22HBXcnktl xyrjxjAsLU7dR7RM2ztGjBvUwZo9GiUOzj4ny1hkZ4vTmY2GwBCqfwaFvETLSm4O sI8h8hZ4TH2w9/fkifWORfbWLWHASJSA7f8nMnTvJZMmV73RguRuh+AlS9qm98X2 nE3rl85ndptJyCk/QAhLL+q2DUxuKLaOhTZCH/7Vkns70xrrKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGumSYQLqa7AQopdczXfiSLBnQmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTkzOGI5MjItZmJkNy0z MjUyLThkZTQtZjg1ZGQ1YjUyOWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTfvKA5at0+hUhuoq/GqppOVVB7wICXV5NRDxYXc7DdCYwJfM6nLGmE w8mygU2gT2HCnH4jCm6BpoDF7Wp6aD55VudTq5CN/JcAn+jryXynZRTNx+Eou99A XVaX8Z1vnaVw4GwtSQyxTLpYTf0W1g/YXMiohuKVvUVocUM46+FIlH4MBcKdlAO4 TmKPOocWqxiNrufy9mpk82b4zyNjvDvOIvxfCWYEKZQiqhWRNJ8r+SXzNNoBoyGV 0bUQEUK8DHrR7srV0wb5zbM9P9uwD5N8+5ScpIXCPLFO+tSP0VK3h6TV62qLXY6U pwA40guwVTjQ1hl/aAGCyZpwOOfL/sk= -----END CERTIFICATE-----Generated at Fri Apr 11 23:54:28 2025 by rpki-client