$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa File: a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa (raw, json) Hash identifier: jM+dJ93OT4LnmXkIG0txkNZm0BjacBQCAFjWbXkFbYU= Subject key identifier: 32:25:71:75:F8:11:70:DC:88:8A:F1:9E:D3:13:10:CC:10:07:69:43 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848F926A5668904944576FC6A00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 3223 IP address blocks: 172.111.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a5:66:89:04:94:45:76:fc:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=b8f426b7-86e7-4ddf-abc3-f90f48c6b699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b3:91:c5:bd:42:fc:bf:a6:a2:c8:b1:3d:55: 43:ce:e7:c4:63:e5:d6:8e:55:68:84:cb:2d:a1:ff: 49:aa:a4:fc:4c:36:32:ec:2b:2e:72:07:b9:d4:ec: bf:9c:2e:3f:27:10:89:eb:a5:b4:04:9e:c9:7b:8a: 9d:c8:e0:ae:57:ce:83:a2:f0:a3:07:2c:a8:68:91: c4:37:e0:5b:bc:28:23:78:02:38:94:ad:b8:5f:5b: e3:72:28:e7:06:df:d8:ae:0a:78:13:00:75:0d:2a: fa:7d:1e:18:2e:49:fa:2c:4b:37:16:0e:d0:55:59: b8:bc:5f:5f:90:30:b1:6d:d0:8b:93:a0:5a:d8:dd: 31:35:52:f4:bc:79:7c:d5:7b:5e:ac:52:2e:37:26: 15:8e:99:0f:46:38:06:4f:94:20:56:85:b6:35:da: 80:87:d0:57:d1:90:20:01:b2:5d:27:09:46:d1:89: dc:08:b6:95:51:3f:c7:02:8e:27:c0:2c:95:f2:39: dd:72:cd:bb:01:9e:8f:b0:77:f8:b1:9f:42:74:d7: a7:d5:ef:91:45:56:22:82:ed:f2:0d:2d:28:14:2a: b7:8b:f0:c4:20:c3:87:ce:b9:45:d5:e4:37:7e:f8: e8:d7:8f:9a:cf:ac:4f:26:fe:35:69:8e:e1:cd:01: 33:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:25:71:75:F8:11:70:DC:88:8A:F1:9E:D3:13:10:CC:10:07:69:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:df:fa:04:1f:67:03:d6:80:10:e6:95:df:0d:cf:cc:e5:b7: 55:ab:6c:31:32:49:f6:cc:3f:f1:b3:6f:d6:a4:67:8c:43:4f: 8d:41:a7:93:04:5c:b9:58:8e:58:78:65:85:c4:d7:b2:e0:6a: eb:f4:2e:70:11:b1:97:33:c2:bb:c9:47:4a:63:74:45:e9:7b: 70:26:96:72:3f:f0:77:00:45:c3:ea:97:36:c9:00:10:c9:f4: 94:70:75:74:5e:5b:73:83:c9:3e:9b:8c:a5:3e:33:e7:34:2b: d6:20:10:83:48:31:3a:e6:f6:b1:6f:93:7c:22:23:08:c5:3b: 4b:e8:e1:46:da:25:a2:7a:1f:4b:a0:20:11:6e:0e:a5:b8:c7: 54:50:0d:f9:40:18:d2:48:0c:0c:23:27:db:28:a3:71:af:e8: 54:13:26:6a:4a:41:b2:e5:9f:3c:0a:f2:0c:12:61:87:39:c5: cf:4a:53:70:99:d7:63:f9:03:7e:01:7c:30:48:4a:e1:be:8e: 46:c9:a1:59:bc:03:37:fc:a1:aa:66:2d:1a:e0:66:9e:b5:aa: e5:69:3c:0e:ac:78:86:27:be:4c:ee:d8:4c:d3:11:45:9c:2b: 27:a2:69:65:a4:e7:2a:75:1c:a9:d5:56:55:2d:15:cf:36:e2: 56:b3:bc:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqVmiQSURXb8agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YjhmNDI2YjctODZlNy00ZGRmLWFiYzMtZjkwZjQ4YzZiNjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrORxb1C/L+mosixPVVDzufEY+XWjlVohMst of9JqqT8TDYy7Csucge51Oy/nC4/JxCJ66W0BJ7Je4qdyOCuV86DovCjByyoaJHE N+BbvCgjeAI4lK24X1vjcijnBt/Yrgp4EwB1DSr6fR4YLkn6LEs3Fg7QVVm4vF9f kDCxbdCLk6Ba2N0xNVL0vHl81XterFIuNyYVjpkPRjgGT5QgVoW2NdqAh9BX0ZAg AbJdJwlG0YncCLaVUT/HAo4nwCyV8jndcs27AZ6PsHf4sZ9CdNen1e+RRVYigu3y DS0oFCq3i/DEIMOHzrlF1eQ3fvjo14+az6xPJv41aY7hzQEzFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIlcXX4EXDciIrxntMTEMwQB2lDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTFjODVlYzEtMzZkNy0z YzZiLWJhOWYtNjJjZWExYjFlNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7f+gQfZwPWgBDmld8Nz8zlt1WrbDEySfbMP/Gzb9akZ4xDT41Bp5ME XLlYjlh4ZYXE17Lgauv0LnARsZczwrvJR0pjdEXpe3AmlnI/8HcARcPqlzbJABDJ 9JRwdXReW3ODyT6bjKU+M+c0K9YgEINIMTrm9rFvk3wiIwjFO0vo4UbaJaJ6H0ug IBFuDqW4x1RQDflAGNJIDAwjJ9soo3Gv6FQTJmpKQbLlnzwK8gwSYYc5xc9KU3CZ 12P5A34BfDBISuG+jkbJoVm8Azf8oapmLRrgZp61quVpPA6seIYnvkzu2EzTEUWc KyeiaWWk5yp1HKnVVlUtFc824lazvHY= -----END CERTIFICATE-----Generated at Sat Apr 5 23:20:00 2025 by rpki-client