$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1360824-bb44-3b4e-a14f-a33080c897bd.roa File: a1360824-bb44-3b4e-a14f-a33080c897bd.roa (raw, json) Hash identifier: 6nb/gcgvw2chrHL+0mqEC7/kGTEQ4+4VravaG8Z6dG4= Subject key identifier: 29:F5:0D:44:27:4B:47:F4:75:0B:C7:FF:2B:F6:6D:0D:2E:2A:2B:BA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848A065C0DF1036D0CDDB223E00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1360824-bb44-3b4e-a14f-a33080c897bd.roa Signing time: Wed 22 Jan 2025 07:01:15 +0000 ROA not before: Wed 22 Jan 2025 07:01:15 +0000 ROA not after: Tue 22 Apr 2025 06:01:15 +0000 asID: 9009 IP address blocks: 172.111.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a0:65:c0:df:10:36:d0:cd:db:22:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 22 07:01:15 2025 GMT Not After : Apr 22 06:01:15 2025 GMT Subject: CN=2514fc4e-6270-4797-b553-0ec52124c6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:04:a5:c3:82:e4:71:15:9c:12:9a:7c:29:9d: 4d:f0:f7:2e:68:96:40:16:7e:bd:0a:a4:92:03:94: 3e:17:5c:89:fc:b0:3a:8b:03:6c:a3:03:68:3d:de: e6:bb:23:b0:0d:d7:ce:04:ab:b5:46:b9:de:c1:ce: 3d:e3:7b:7e:c8:e0:b5:b4:0e:4f:a4:bf:c1:82:c9: ba:cc:cd:1f:26:ed:e0:c8:fa:92:0e:c1:86:9a:59: ff:92:e1:e4:32:d2:60:5d:95:62:5b:4f:02:d4:8b: f9:38:d5:38:ef:79:0f:d4:23:15:4c:0b:37:fb:73: 74:18:26:7c:ca:ca:ac:74:4a:31:78:c4:7d:a9:f3: 38:53:43:a4:f5:57:ad:5c:77:73:7b:73:67:3d:06: 61:fe:89:66:40:22:b3:c2:b7:e1:33:c9:08:27:b6: 23:80:df:d4:ed:a9:90:4f:b9:f4:e4:e5:94:b4:fd: 4b:72:c1:6a:e7:f6:2c:7a:31:e0:ef:0e:79:e4:56: ff:da:1d:c8:de:3d:d0:70:da:e8:4b:29:e5:d0:8a: 47:85:66:c6:3d:c1:e6:d6:f0:ab:ea:1a:c1:42:17: 49:a0:3b:ae:f1:1b:0f:2b:7f:eb:30:26:ca:99:be: 12:83:91:29:fb:52:cb:d8:ba:47:e8:ab:d0:fc:b3: 2a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F5:0D:44:27:4B:47:F4:75:0B:C7:FF:2B:F6:6D:0D:2E:2A:2B:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1360824-bb44-3b4e-a14f-a33080c897bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:6c:28:b6:a7:f6:3a:76:08:88:8c:f4:fa:4b:4e:31:d2:7c: 0d:5b:44:34:a6:50:0c:26:75:aa:82:08:59:f4:3d:87:18:f0: 5b:7f:12:c6:06:77:06:c6:ae:a5:dc:82:7f:03:db:e9:53:1f: af:a1:86:d0:7c:1f:a0:ec:93:7e:a5:fa:a9:d6:3a:26:49:0b: 23:cc:82:ce:20:34:bc:24:21:16:d7:c4:e1:db:67:5c:4e:81: bd:6b:9d:41:16:92:16:30:0c:30:a8:b4:26:af:3b:da:c2:07: 9b:ee:22:b2:25:c1:f1:ef:a0:dd:fe:c6:98:03:f1:4b:ff:bc: 7a:b8:cd:f3:84:9e:da:fe:49:fd:d1:75:0a:b4:ca:45:21:82: 68:58:b4:ae:c1:cc:f7:78:c1:54:96:e4:45:c2:e5:b9:f7:9b: 68:98:ef:fa:f6:59:d3:86:61:39:ee:9f:08:7e:c2:6a:0f:78: ce:33:94:ca:d0:5f:cc:00:e6:9d:96:e1:ff:3b:27:91:f0:ed: ba:4c:ee:2b:3f:b4:81:2e:9e:f2:ef:14:52:87:40:28:63:89: b3:5b:fb:50:0e:a4:d0:db:78:57:5c:84:32:c6:60:d4:e6:ba: 55:02:ed:b1:88:9a:7e:50:88:dc:14:f3:cc:cb:c5:4d:d9:48: a9:d5:03:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEigZcDfEDbQzdsiPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDEyMjA3MDExNVoXDTI1MDQyMjA2MDExNVowLzEtMCsGA1UEAxMk MjUxNGZjNGUtNjI3MC00Nzk3LWI1NTMtMGVjNTIxMjRjNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwSlw4LkcRWcEpp8KZ1N8PcuaJZAFn69CqSS A5Q+F1yJ/LA6iwNsowNoPd7muyOwDdfOBKu1Rrnewc4943t+yOC1tA5PpL/Bgsm6 zM0fJu3gyPqSDsGGmln/kuHkMtJgXZViW08C1Iv5ONU473kP1CMVTAs3+3N0GCZ8 ysqsdEoxeMR9qfM4U0Ok9VetXHdze3NnPQZh/olmQCKzwrfhM8kIJ7YjgN/U7amQ T7n05OWUtP1LcsFq5/YsejHg7w555Fb/2h3I3j3QcNroSynl0IpHhWbGPcHm1vCr 6hrBQhdJoDuu8RsPK3/rMCbKmb4Sg5Ep+1LL2LpH6KvQ/LMqywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCn1DUQnS0f0dQvH/yv2bQ0uKiu6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTEzNjA4MjQtYmI0NC0z YjRlLWExNGYtYTMzMDgwYzg5N2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtsKLan9jp2CIiM9PpLTjHSfA1bRDSmUAwmdaqCCFn0PYcY8Ft/EsYG dwbGrqXcgn8D2+lTH6+hhtB8H6Dsk36l+qnWOiZJCyPMgs4gNLwkIRbXxOHbZ1xO gb1rnUEWkhYwDDCotCavO9rCB5vuIrIlwfHvoN3+xpgD8Uv/vHq4zfOEntr+Sf3R dQq0ykUhgmhYtK7BzPd4wVSW5EXC5bn3m2iY7/r2WdOGYTnunwh+wmoPeM4zlMrQ X8wA5p2W4f87J5Hw7bpM7is/tIEunvLvFFKHQChjibNb+1AOpNDbeFdchDLGYNTm ulUC7bGImn5QiNwU88zLxU3ZSKnVA7k= -----END CERTIFICATE-----Generated at Fri Apr 11 23:54:44 2025 by rpki-client