$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2587db3-34fc-3216-826e-71e115f5d1ae.roa File: a2587db3-34fc-3216-826e-71e115f5d1ae.roa (raw, json) Hash identifier: QjTRvYQ5lAunwqo26jJDvOIcupXiNNWCctpwgfwwD3Q= Subject key identifier: B8:98:7B:FF:98:94:D8:71:92:20:51:19:8A:F2:5F:29:AB:9D:B0:C0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848A0686438A1093076CD848640 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2587db3-34fc-3216-826e-71e115f5d1ae.roa Signing time: Wed 22 Jan 2025 07:06:34 +0000 ROA not before: Wed 22 Jan 2025 07:06:34 +0000 ROA not after: Tue 22 Apr 2025 06:06:34 +0000 asID: 9009 IP address blocks: 172.111.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a0:68:64:38:a1:09:30:76:cd:84:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 22 07:06:34 2025 GMT Not After : Apr 22 06:06:34 2025 GMT Subject: CN=2dce3872-fa17-4360-967f-d2f754e7a3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:08:79:7d:d3:f5:64:5d:48:55:7c:09:6a:48: 6a:75:7e:ba:c8:8e:eb:c9:29:38:3d:c4:bf:e9:f8: 3f:81:3c:d0:31:e6:22:21:61:e8:c4:f0:44:c9:e5: 57:70:e6:b8:3c:32:be:38:5d:70:61:d5:ac:db:57: be:eb:4e:ec:d9:e4:79:77:7c:1f:d0:9d:9f:71:65: 15:b3:f5:8a:32:ab:3f:de:32:81:90:dd:d9:cf:68: c3:5f:57:1e:3d:68:09:8f:49:8a:a4:67:a9:e3:7c: a3:fe:dc:69:6c:ad:9d:41:40:aa:db:17:27:5a:77: 12:12:14:ef:ab:f6:4b:38:e0:b9:1a:d5:62:06:98: cc:3b:03:dd:0e:52:41:49:33:c4:e0:95:f0:59:22: 78:a7:11:5f:9c:4d:9e:45:06:1b:b2:c4:23:c4:13: c7:f0:8a:5a:06:87:5a:b6:81:c1:c4:f6:8e:89:ab: 18:7e:72:69:ad:db:8a:c9:1c:b2:41:bb:34:27:de: 2a:59:81:8d:ad:76:98:b3:d4:48:49:84:3b:3a:cb: 64:b2:81:50:90:d4:5f:4e:30:d8:9c:69:34:19:8a: 75:cc:ca:7a:86:f6:c7:f7:35:99:4c:7f:ad:ea:16: 63:6b:c8:b3:f5:11:83:54:97:44:65:81:05:5f:69: 37:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:98:7B:FF:98:94:D8:71:92:20:51:19:8A:F2:5F:29:AB:9D:B0:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2587db3-34fc-3216-826e-71e115f5d1ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:22:e0:f0:31:1b:1f:ba:ab:34:56:7c:2b:11:dd:2e:66:c6: 61:e7:6e:8e:76:c6:a9:a1:4f:41:fa:3c:bf:53:04:8f:f7:a4: e9:b6:f3:7f:5c:1e:3a:69:f4:85:cc:c5:e7:99:fb:5b:88:32: bf:5c:40:ed:d5:3b:14:67:c1:2f:13:75:f5:2a:3c:34:4b:51: 51:09:e6:c7:e8:79:fc:18:36:2a:59:6e:8e:74:11:10:7f:ba: 17:f7:e0:39:b5:d9:4e:df:5e:4e:b9:a4:b3:7a:ab:14:74:33: 73:aa:31:33:7a:b2:31:2e:9f:3c:ab:fe:6a:94:11:85:d1:53: 9a:ce:d5:c1:8d:16:7e:12:94:a4:a4:c4:7f:aa:46:3e:0d:05: 4e:30:af:86:77:93:fe:3d:86:ad:86:a3:4c:14:40:55:eb:be: 9d:93:33:f0:75:3c:08:58:cd:a4:84:f5:4f:65:74:b8:be:eb: b1:a1:0f:f7:18:38:16:31:6e:bf:e0:df:2a:91:9f:33:e6:9c: a4:e4:b3:66:16:64:ec:c0:e2:90:e7:2b:19:42:89:c1:28:e7: c9:e6:95:54:33:47:f8:44:1f:da:16:b2:5b:d6:49:9f:00:ee: e0:5f:b1:12:b9:e7:4c:d6:68:06:37:9c:67:77:1b:a1:0f:c6: f0:67:20:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEigaGQ4oQkwds2EhkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDEyMjA3MDYzNFoXDTI1MDQyMjA2MDYzNFowLzEtMCsGA1UEAxMk MmRjZTM4NzItZmExNy00MzYwLTk2N2YtZDJmNzU0ZTdhM2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAh5fdP1ZF1IVXwJakhqdX66yI7rySk4PcS/ 6fg/gTzQMeYiIWHoxPBEyeVXcOa4PDK+OF1wYdWs21e+607s2eR5d3wf0J2fcWUV s/WKMqs/3jKBkN3Zz2jDX1cePWgJj0mKpGep43yj/txpbK2dQUCq2xcnWncSEhTv q/ZLOOC5GtViBpjMOwPdDlJBSTPE4JXwWSJ4pxFfnE2eRQYbssQjxBPH8IpaBoda toHBxPaOiasYfnJprduKyRyyQbs0J94qWYGNrXaYs9RISYQ7OstksoFQkNRfTjDY nGk0GYp1zMp6hvbH9zWZTH+t6hZja8iz9RGDVJdEZYEFX2k3hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiYe/+YlNhxkiBRGYryXymrnbDAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTI1ODdkYjMtMzRmYy0z MjE2LTgyNmUtNzFlMTE1ZjVkMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgi4PAxGx+6qzRWfCsR3S5mxmHnbo52xqmhT0H6PL9TBI/3pOm2839c Hjpp9IXMxeeZ+1uIMr9cQO3VOxRnwS8TdfUqPDRLUVEJ5sfoefwYNipZbo50ERB/ uhf34Dm12U7fXk65pLN6qxR0M3OqMTN6sjEunzyr/mqUEYXRU5rO1cGNFn4SlKSk xH+qRj4NBU4wr4Z3k/49hq2Go0wUQFXrvp2TM/B1PAhYzaSE9U9ldLi+67GhD/cY OBYxbr/g3yqRnzPmnKTks2YWZOzA4pDnKxlCicEo58nmlVQzR/hEH9oWslvWSZ8A 7uBfsRK550zWaAY3nGd3G6EPxvBnIMQ= -----END CERTIFICATE-----Generated at Fri Apr 11 22:45:02 2025 by rpki-client