$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/623bb9fc-c963-3f91-a5c8-8cb92677297b.roa File: 623bb9fc-c963-3f91-a5c8-8cb92677297b.roa (raw, json) Hash identifier: gbCtxXqBj2IeYMQAwWY5An2rhTfmKPkfVFgYrZB+5fo= Subject key identifier: EF:A7:DE:FF:81:FD:A1:BF:F8:87:35:E2:01:B2:B4:EF:F9:7A:7C:A3 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848BD20E0367C975A74C0A0C5F0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/623bb9fc-c963-3f91-a5c8-8cb92677297b.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 53356 IP address blocks: 172.111.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:e0:36:7c:97:5a:74:c0:a0:c5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=3e760a8b-e948-4f6c-81c9-a18b8a9dd93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:53:13:a5:6c:5b:9c:f5:ae:5d:78:43:6d:ca: 40:02:a6:fa:53:9c:78:29:ce:38:f1:4d:f0:d7:bf: 40:30:b3:dc:59:e7:8b:e4:ae:bd:f6:e8:d0:9a:d2: 1b:3b:02:bf:51:42:b2:50:ca:6e:ec:8f:22:23:2a: a0:46:ad:8e:25:3a:59:cb:c3:c8:38:db:27:20:c2: d9:df:15:63:4b:d8:60:ca:12:a9:21:b0:90:59:5f: 0c:05:d9:72:23:b4:10:47:e5:26:11:09:03:c2:ed: e6:2c:a7:f4:02:5f:1c:31:42:bb:1f:6f:3a:08:61: e2:fa:cb:64:a9:ec:d5:71:fe:fc:4e:43:2f:12:ef: 6a:da:ff:fd:c6:bd:ee:74:bf:d6:53:4d:4f:60:02: d5:f8:d0:1c:22:3d:12:03:c5:f6:22:a6:ff:39:ef: 73:09:d4:e4:dc:1e:91:ec:bf:4e:5c:4b:9d:88:46: 7c:fd:b9:e3:36:23:5e:67:c1:29:90:a2:ab:02:53: 7d:a9:66:57:87:00:5e:8d:b5:45:26:d0:10:f9:07: cf:f0:cc:c2:be:30:b6:4c:b5:ef:6f:de:ab:e8:92: 3d:81:05:05:82:a5:1c:eb:68:3e:57:4d:b9:82:43: 07:73:7f:ce:4f:26:27:c7:67:42:9c:81:63:0d:3f: af:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A7:DE:FF:81:FD:A1:BF:F8:87:35:E2:01:B2:B4:EF:F9:7A:7C:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/623bb9fc-c963-3f91-a5c8-8cb92677297b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:4a:0d:f9:93:ea:9b:ea:a0:2d:59:7c:c7:c4:11:6d:58:d2: cc:07:6b:26:05:4f:8e:ec:00:a3:a7:ae:7a:07:86:42:4c:48: 90:9f:31:01:0d:60:10:55:6b:0b:2e:72:bf:47:89:2a:5c:13: b7:a9:76:8a:c3:81:4e:9e:bb:bf:2a:2c:a6:c9:c2:79:59:5c: 99:64:3e:ed:6e:0e:f9:f1:a3:58:1d:a6:06:f5:1e:0e:bf:69: 9b:ff:58:40:f9:55:43:ae:f2:0f:69:e4:b9:d9:16:9b:ab:2b: 34:4a:78:b5:50:f7:0f:cb:d8:f7:b0:98:1f:b0:40:92:22:eb: 63:30:b7:a5:15:35:1a:72:7d:65:66:d2:5e:3a:30:9d:b4:c0: 3f:dc:b2:bd:92:ff:80:c3:07:4b:dc:f6:70:a1:0d:95:c7:c9: 67:0c:c6:3b:92:9a:6a:d6:8f:cb:02:88:b9:e8:eb:42:03:bb: 6d:50:8c:23:93:c9:67:40:36:3b:2d:b5:53:aa:07:42:4c:7e: c8:08:dd:3e:db:ef:61:70:36:bb:55:8d:59:44:e0:4f:c0:41: d4:4c:a5:2d:44:12:64:d0:2e:cd:28:5d:5a:c3:c7:57:f3:e6: ff:67:8a:0e:17:c7:66:fe:49:e2:91:90:83:6b:53:ad:e5:03: ca:5e:c8:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IOA2fJdadMCgxfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk M2U3NjBhOGItZTk0OC00ZjZjLTgxYzktYTE4YjhhOWRkOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplMTpWxbnPWuXXhDbcpAAqb6U5x4Kc448U3w 179AMLPcWeeL5K699ujQmtIbOwK/UUKyUMpu7I8iIyqgRq2OJTpZy8PIONsnIMLZ 3xVjS9hgyhKpIbCQWV8MBdlyI7QQR+UmEQkDwu3mLKf0Al8cMUK7H286CGHi+stk qezVcf78TkMvEu9q2v/9xr3udL/WU01PYALV+NAcIj0SA8X2Iqb/Oe9zCdTk3B6R 7L9OXEudiEZ8/bnjNiNeZ8EpkKKrAlN9qWZXhwBejbVFJtAQ+QfP8MzCvjC2TLXv b96r6JI9gQUFgqUc62g+V025gkMHc3/OTyYnx2dCnIFjDT+vxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+n3v+B/aG/+Ic14gGytO/5enyjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjIzYmI5ZmMtYzk2My0z ZjkxLWE1YzgtOGNiOTI2NzcyOTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdKDfmT6pvqoC1ZfMfEEW1Y0swHayYFT47sAKOnrnoHhkJMSJCfMQEN YBBVawsucr9HiSpcE7epdorDgU6eu78qLKbJwnlZXJlkPu1uDvnxo1gdpgb1Hg6/ aZv/WED5VUOu8g9p5LnZFpurKzRKeLVQ9w/L2PewmB+wQJIi62Mwt6UVNRpyfWVm 0l46MJ20wD/csr2S/4DDB0vc9nChDZXHyWcMxjuSmmrWj8sCiLno60IDu21QjCOT yWdANjsttVOqB0JMfsgI3T7b72FwNrtVjVlE4E/AQdRMpS1EEmTQLs0oXVrDx1fz 5v9nig4Xx2b+SeKRkINrU63lA8peyJo= -----END CERTIFICATE-----Generated at Fri Apr 11 22:33:07 2025 by rpki-client