$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7af1a353-fbf1-38cc-bb5d-9e83ce23ac7f.roa File: 7af1a353-fbf1-38cc-bb5d-9e83ce23ac7f.roa (raw, json) Hash identifier: l9kZxsYZ2TRu1wOG8reDlWQNCoquRZJXoemrjtA/RXo= Subject key identifier: 4C:C9:D4:EC:EA:24:47:40:1A:1D:18:D0:42:EF:AC:54:7C:4B:46:F7 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848F926A57268DF8338C75DFEF0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7af1a353-fbf1-38cc-bb5d-9e83ce23ac7f.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 3223 IP address blocks: 172.111.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a5:72:68:df:83:38:c7:5d:fe:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=5b42cb4a-3529-4dff-84f4-e3c4a07b4ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9c:7b:50:a7:01:ae:62:71:49:87:42:76:ea: 49:43:3b:44:d8:89:f6:c6:9a:40:d2:7e:dd:4b:32: 4d:24:fa:7f:06:f9:8a:bd:f6:21:06:a5:f2:69:72: 5d:76:d7:92:f9:5d:b5:e4:35:b6:69:e5:a9:56:a5: 56:0a:65:88:bc:de:fd:7a:d4:37:65:ad:02:b8:a4: 68:67:ba:31:71:8c:be:20:92:87:e1:67:24:92:33: f6:f3:f5:3a:db:89:ef:29:de:1b:85:41:7d:39:37: b0:9a:02:b7:d5:09:1e:a7:77:be:a5:51:97:2e:b6: ad:e0:08:6d:73:d2:3c:4b:bd:1d:a0:9b:5a:e4:45: 6b:56:66:d0:90:fe:65:df:5b:f6:52:91:cc:ed:36: e0:e9:36:f5:b7:87:61:9a:bb:eb:91:94:3d:35:95: cc:f3:98:78:42:68:33:c5:64:4c:76:47:b1:42:46: 95:c1:2f:5d:a2:27:a5:2b:65:34:d1:68:55:79:cc: 72:6c:0e:35:59:06:7a:8b:07:2a:fd:c6:34:63:a8: 56:b5:27:c2:28:6f:80:9f:77:e5:3e:c7:f6:eb:cd: e9:5b:00:b5:2d:5b:13:d4:8d:9f:02:ed:82:20:27: 4c:4e:dc:87:c3:2e:09:9e:2c:08:66:1b:43:6b:25: 96:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C9:D4:EC:EA:24:47:40:1A:1D:18:D0:42:EF:AC:54:7C:4B:46:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7af1a353-fbf1-38cc-bb5d-9e83ce23ac7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:c0:15:02:cc:ec:09:b8:d8:7e:4b:9a:63:e4:52:84:4c:e6: dc:17:15:fa:c3:64:29:c9:10:8f:63:b0:d1:b0:5a:51:d4:50: 69:28:49:1c:be:b9:d8:db:10:c0:25:17:4c:9c:1d:6a:a9:a9: 4d:e2:a6:cf:58:6a:21:e4:1e:2a:cc:ba:ec:d8:40:f2:f6:2d: 58:7f:2e:0b:0f:41:dd:da:e0:f0:af:ff:75:b8:3a:a3:1a:22: a1:44:54:77:75:21:69:dd:c4:9c:f6:59:f3:b7:3e:6c:a2:71: bb:af:19:44:1a:c4:32:0b:04:d7:04:b1:2a:3e:e3:3f:1c:37: 32:1c:87:f5:ac:42:5c:53:9f:47:74:a8:5a:3a:a1:05:42:b1: bc:bf:3c:1c:85:cd:13:e4:7c:c2:c4:cc:08:32:e8:a2:71:79: c8:d4:35:9f:fb:ac:c4:e4:34:fc:e6:92:af:57:0f:30:eb:89: 20:05:3a:47:1c:91:a4:c9:ed:92:08:fd:c4:5b:84:ec:9f:54: b2:2d:b8:72:e6:86:72:a6:70:29:93:eb:ab:f9:e2:6e:3a:d4: b9:2b:20:25:64:09:0d:d7:7b:87:ad:0b:04:8a:93:3f:06:64: 6f:27:47:69:65:d8:55:78:26:03:48:60:61:cd:61:3f:df:be: 6a:47:01:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqVyaN+DOMdd/vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NWI0MmNiNGEtMzUyOS00ZGZmLTg0ZjQtZTNjNGEwN2I0YWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZx7UKcBrmJxSYdCdupJQztE2In2xppA0n7d SzJNJPp/BvmKvfYhBqXyaXJddteS+V215DW2aeWpVqVWCmWIvN79etQ3Za0CuKRo Z7oxcYy+IJKH4WckkjP28/U624nvKd4bhUF9OTewmgK31Qkep3e+pVGXLrat4Aht c9I8S70doJta5EVrVmbQkP5l31v2UpHM7Tbg6Tb1t4dhmrvrkZQ9NZXM85h4Qmgz xWRMdkexQkaVwS9doielK2U00WhVecxybA41WQZ6iwcq/cY0Y6hWtSfCKG+An3fl Psf2683pWwC1LVsT1I2fAu2CICdMTtyHwy4JniwIZhtDayWWDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzJ1OzqJEdAGh0Y0ELvrFR8S0b3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvN2FmMWEzNTMtZmJmMS0z OGNjLWJiNWQtOWU4M2NlMjNhYzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArAFQLM7Am42H5LmmPkUoRM5twXFfrDZCnJEI9jsNGwWlHUUGkoSRy+ udjbEMAlF0ycHWqpqU3ips9YaiHkHirMuuzYQPL2LVh/LgsPQd3a4PCv/3W4OqMa IqFEVHd1IWndxJz2WfO3PmyicbuvGUQaxDILBNcEsSo+4z8cNzIch/WsQlxTn0d0 qFo6oQVCsby/PByFzRPkfMLEzAgy6KJxecjUNZ/7rMTkNPzmkq9XDzDriSAFOkcc kaTJ7ZII/cRbhOyfVLItuHLmhnKmcCmT66v54m461LkrICVkCQ3Xe4etCwSKkz8G ZG8nR2ll2FV4JgNIYGHNYT/fvmpHAVk= -----END CERTIFICATE-----Generated at Sat Apr 5 13:15:18 2025 by rpki-client