$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61f99816-0f71-3a20-b0c2-c71efbc69bf7.roa File: 61f99816-0f71-3a20-b0c2-c71efbc69bf7.roa (raw, json) Hash identifier: y4aIerD9uQ8R62Nu1FnGQ7nn+mrIaOsKoBvEXzrqbNA= Subject key identifier: 58:5D:14:BF:F2:B3:F4:6A:15:A7:C4:12:82:E0:30:37:7A:9D:7C:AD Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584929E3D05AF81F04D6AC44ED00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61f99816-0f71-3a20-b0c2-c71efbc69bf7.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 9009 IP address blocks: 172.111.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:d0:5a:f8:1f:04:d6:ac:44:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=2b01a02a-f2c7-435a-ad4a-3fa6ec208338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:91:7c:1b:dd:f9:9e:4f:18:c5:62:fb:a3:85: 07:a5:27:84:e0:66:8b:6f:73:30:cd:96:20:d0:e8: 65:09:2b:a4:66:94:c6:39:7f:40:71:51:b8:92:25: 21:13:22:4e:57:ed:04:f1:4e:6f:34:0f:d7:e5:53: aa:6d:a0:8b:85:60:b8:12:15:ee:82:c6:9c:73:d9: f8:3b:e8:6a:fa:e9:eb:9b:9d:1c:d8:d2:fd:d2:17: a3:c0:fe:ac:e0:36:fa:e7:62:1d:02:0c:86:e9:a6: c5:e8:d0:77:99:cf:f2:98:47:a0:41:d1:a7:eb:b6: ec:73:65:00:e5:59:b8:01:2d:6e:82:97:4d:d0:3d: c7:9f:70:3d:82:af:a0:73:b8:dc:24:ac:94:34:c3: 81:6c:bd:a6:fd:48:59:13:50:7c:b3:c1:c8:bb:89: 7c:d3:ea:59:c6:46:57:f2:94:e5:32:69:16:1f:6c: b8:63:4e:dc:2c:a3:12:19:06:e8:a0:3a:0f:60:76: eb:56:60:60:9b:60:f5:20:a3:15:6e:0d:a4:fc:25: e6:9f:b3:bb:a5:44:cd:95:89:02:34:f7:d6:86:65: ec:43:8e:11:67:7d:d5:25:60:4b:88:98:42:9e:91: 00:63:6c:d9:a8:40:6e:76:f9:c7:c8:4b:44:58:6d: 45:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5D:14:BF:F2:B3:F4:6A:15:A7:C4:12:82:E0:30:37:7A:9D:7C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61f99816-0f71-3a20-b0c2-c71efbc69bf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:4d:7d:d9:0e:3c:e0:0f:32:a0:90:69:47:41:c3:79:67:45: 83:bc:6c:0c:7b:b7:73:df:50:8d:db:60:c1:90:47:75:3f:70: 3f:7e:d5:d5:1c:96:4c:bf:9b:32:70:26:36:2e:f9:1a:bb:3f: bf:b2:66:bd:c8:cc:e7:35:f2:8d:df:71:08:cb:49:f4:0f:da: 56:fc:ec:31:d2:f5:c4:f7:46:3a:49:30:54:da:b0:0a:88:2a: cd:af:e1:40:14:2f:44:e4:42:bb:a0:aa:3e:00:9f:2e:be:9d: 99:20:7c:83:aa:60:97:92:e7:92:81:00:b7:dd:fc:86:0b:20: 4e:b2:73:4f:64:d9:fd:aa:97:ed:9f:47:52:f3:6a:26:5b:19: 25:45:d5:da:44:2e:21:f8:93:89:77:c3:89:51:ef:a3:90:ea: 3b:1c:62:31:54:b6:84:8d:2c:c1:6a:12:14:05:06:49:8f:a7: f6:c6:1b:c3:8a:d7:a9:66:d5:5a:4d:1c:5a:07:04:cd:d1:dc: 22:00:b1:7c:68:b6:03:eb:b7:52:7b:8c:8f:27:ac:63:1d:30: f7:cf:cb:bc:9b:a8:ba:91:d6:82:2b:a6:0c:e0:3c:27:e3:6d: 77:db:89:6b:d2:c8:35:62:48:d0:a3:e0:7a:14:a2:f4:02:c5: df:b0:05:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkp49Ba+B8E1qxE7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk MmIwMWEwMmEtZjJjNy00MzVhLWFkNGEtM2ZhNmVjMjA4MzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZF8G935nk8YxWL7o4UHpSeE4GaLb3MwzZYg 0OhlCSukZpTGOX9AcVG4kiUhEyJOV+0E8U5vNA/X5VOqbaCLhWC4EhXugsacc9n4 O+hq+unrm50c2NL90hejwP6s4Db652IdAgyG6abF6NB3mc/ymEegQdGn67bsc2UA 5Vm4AS1ugpdN0D3Hn3A9gq+gc7jcJKyUNMOBbL2m/UhZE1B8s8HIu4l80+pZxkZX 8pTlMmkWH2y4Y07cLKMSGQbooDoPYHbrVmBgm2D1IKMVbg2k/CXmn7O7pUTNlYkC NPfWhmXsQ44RZ33VJWBLiJhCnpEAY2zZqEBudvnHyEtEWG1FOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhdFL/ys/RqFafEEoLgMDd6nXytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjFmOTk4MTYtMGY3MS0z YTIwLWIwYzItYzcxZWZiYzY5YmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9NfdkOPOAPMqCQaUdBw3lnRYO8bAx7t3PfUI3bYMGQR3U/cD9+1dUc lky/mzJwJjYu+Rq7P7+yZr3IzOc18o3fcQjLSfQP2lb87DHS9cT3RjpJMFTasAqI Ks2v4UAUL0TkQrugqj4Any6+nZkgfIOqYJeS55KBALfd/IYLIE6yc09k2f2ql+2f R1LzaiZbGSVF1dpELiH4k4l3w4lR76OQ6jscYjFUtoSNLMFqEhQFBkmPp/bGG8OK 16lm1VpNHFoHBM3R3CIAsXxotgPrt1J7jI8nrGMdMPfPy7ybqLqR1oIrpgzgPCfj bXfbiWvSyDViSNCj4HoUovQCxd+wBbE= -----END CERTIFICATE-----Generated at Fri Apr 11 22:32:40 2025 by rpki-client