$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7582669e-2fd1-324c-ad24-9a18f5d395ea.roa File: 7582669e-2fd1-324c-ad24-9a18f5d395ea.roa (raw, json) Hash identifier: bwStrF/t503tNUZKAxJEqufDXgd5TGbVTqqg8hHQCT4= Subject key identifier: B1:1B:AE:92:10:A7:DD:96:C5:26:4F:65:D4:8A:A5:5A:DC:9C:D9:11 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848CB16496FDC98A91818E9AFC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7582669e-2fd1-324c-ad24-9a18f5d395ea.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 172.111.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:49:6f:dc:98:a9:18:18:e9:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=19c83dfb-ccfc-45ea-9386-da93b844689f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0e:5a:2b:7c:bb:4e:00:a2:7f:3a:cd:8b:97: c6:5f:9f:3f:93:b7:ad:e6:7e:88:1f:fe:67:f6:5f: d9:12:24:2b:31:0f:63:9f:b8:4a:b7:1f:20:a9:4d: 83:fb:7d:93:88:72:a8:d9:c2:4e:ef:f0:2d:62:44: 15:ba:1f:45:79:29:27:bb:d1:13:5e:9f:5f:04:42: 4e:4e:1c:29:e5:61:14:f5:5a:31:39:3b:9e:55:99: 95:0b:60:0c:b1:5d:08:27:1c:82:9b:23:01:64:ec: 56:e5:15:d2:dd:01:72:fb:41:99:eb:2b:1c:70:6a: 3c:e1:62:5c:15:46:0f:5c:5a:da:b4:14:96:27:ed: 9b:fb:16:a6:a3:ab:93:d7:12:01:a9:f7:72:85:9d: 14:47:57:7a:2e:cc:3b:84:8d:75:55:ef:39:f1:4c: 1f:4b:ed:a9:fc:be:a4:57:11:f1:7b:85:74:72:c3: 31:5e:43:95:6e:d2:8e:f0:72:e4:bf:86:3d:ad:dc: 4a:60:48:40:09:0e:dd:85:b8:41:f9:c0:16:d3:88: ce:92:c9:5f:a1:32:79:96:b7:f2:cf:22:85:2c:3f: 4d:d7:c3:39:90:c0:5b:05:32:a5:61:71:b3:18:cd: db:45:f9:a2:16:e4:8d:c7:7c:76:92:89:ff:8a:71: 3e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1B:AE:92:10:A7:DD:96:C5:26:4F:65:D4:8A:A5:5A:DC:9C:D9:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7582669e-2fd1-324c-ad24-9a18f5d395ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b2:dd:78:56:de:18:35:32:24:64:af:77:c0:ee:5b:6f:d7: 37:ee:93:89:56:b0:33:a8:cc:f4:db:7c:51:c6:2e:2c:bb:07: 05:93:0e:51:f0:27:01:2b:24:88:3b:e0:2c:20:0c:fe:b9:f5: e6:9a:01:9a:42:2b:af:82:39:a1:99:fd:b6:98:43:1b:48:c3: a6:b6:37:66:dd:dd:e8:88:a9:f6:de:02:6e:36:cc:14:b2:25: 12:6c:3f:04:7a:4e:06:a0:62:05:43:9f:8b:e0:1f:f5:98:67: 5e:fa:48:e5:96:99:ec:3e:d2:f6:48:c8:b4:9c:51:38:aa:95: 8f:8e:cf:9f:dc:5a:84:62:57:ea:03:d5:84:78:d8:6f:36:a0: 39:f1:f0:95:93:2c:aa:4e:2d:a8:5c:fb:a7:df:91:08:cc:eb: a5:5a:87:b4:5f:eb:ab:2e:25:f4:3b:1a:cf:c9:1c:97:6b:08: 6b:c7:e1:a0:84:2d:ee:12:b4:e3:83:a4:1c:f1:7d:0b:80:80: f5:a8:ae:e5:03:0d:d7:26:02:70:f5:ea:f7:17:96:92:04:a0: bf:b0:1b:88:9d:8b:60:9c:f9:a8:6c:f2:77:f8:98:ae:c5:16: ff:29:5c:c5:61:fe:ef:5a:8e:39:15:ef:2d:f7:85:bd:92:b4: e2:19:4e:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFklv3JipGBjpr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk MTljODNkZmItY2NmYy00NWVhLTkzODYtZGE5M2I4NDQ2ODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA5aK3y7TgCifzrNi5fGX58/k7et5n6IH/5n 9l/ZEiQrMQ9jn7hKtx8gqU2D+32TiHKo2cJO7/AtYkQVuh9FeSknu9ETXp9fBEJO Thwp5WEU9VoxOTueVZmVC2AMsV0IJxyCmyMBZOxW5RXS3QFy+0GZ6ysccGo84WJc FUYPXFratBSWJ+2b+xamo6uT1xIBqfdyhZ0UR1d6Lsw7hI11Ve858UwfS+2p/L6k VxHxe4V0csMxXkOVbtKO8HLkv4Y9rdxKYEhACQ7dhbhB+cAW04jOkslfoTJ5lrfy zyKFLD9N18M5kMBbBTKlYXGzGM3bRfmiFuSNx3x2kon/inE+DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEbrpIQp92WxSZPZdSKpVrcnNkRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzU4MjY2OWUtMmZkMS0z MjRjLWFkMjQtOWExOGY1ZDM5NWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6y3XhW3hg1MiRkr3fA7ltv1zfuk4lWsDOozPTbfFHGLiy7BwWTDlHw JwErJIg74CwgDP659eaaAZpCK6+COaGZ/baYQxtIw6a2N2bd3eiIqfbeAm42zBSy JRJsPwR6TgagYgVDn4vgH/WYZ176SOWWmew+0vZIyLScUTiqlY+Oz5/cWoRiV+oD 1YR42G82oDnx8JWTLKpOLahc+6ffkQjM66Vah7Rf66suJfQ7Gs/JHJdrCGvH4aCE Le4StOODpBzxfQuAgPWoruUDDdcmAnD16vcXlpIEoL+wG4idi2Cc+ahs8nf4mK7F Fv8pXMVh/u9ajjkV7y33hb2StOIZTjk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:01 2025 by rpki-client