$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa File: a2b1e817-581b-3613-bff0-519b62d2c6f2.roa (raw, json) Hash identifier: OUn0W4qp+R7lJTid/GZlQX7zsgTdjOz+RHqDVDXHgpY= Subject key identifier: AF:38:00:35:91:7D:F3:D7:0F:89:E6:08:F0:FF:52:00:91:5E:BC:D2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584930DE73BB7D257EE96E20AD80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 9009 IP address blocks: 172.111.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:73:bb:7d:25:7e:e9:6e:20:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=e1577b45-be55-4cc5-97b1-f9810f40ec32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:11:99:37:c2:b4:04:3f:ee:b3:80:02:96:d5: 94:44:71:7e:fa:99:72:d2:a1:ea:03:12:f0:01:5c: 2f:12:1a:ab:ba:ef:4a:1f:25:ac:8a:d7:eb:6f:b6: 4a:72:7d:60:f9:f1:16:7f:79:4f:94:10:05:74:bc: aa:22:be:32:09:3e:3b:4a:47:d5:b9:7f:2d:5a:c2: 4a:40:ae:a5:3a:dc:8a:6c:f4:91:b2:a9:72:9f:50: d9:76:b9:80:a6:cf:f0:84:2a:34:4b:9b:52:04:51: b9:86:07:78:5f:45:44:81:fe:27:4a:52:2b:d9:0d: fd:fc:21:27:b3:04:b1:30:b2:10:d4:85:7c:a0:9b: f9:c9:4e:e8:fc:62:db:25:2c:96:df:ff:79:21:75: 48:33:63:e2:22:2e:21:33:1d:0f:48:a9:d3:a2:e4: 14:b1:0d:68:ef:35:18:82:ac:f4:ec:20:94:21:42: e6:02:bc:44:bf:bb:15:e4:fe:5e:eb:86:2d:d1:b9: 2c:53:64:2c:7f:a4:2d:2f:d4:ab:b5:05:84:52:f5: ca:81:35:48:18:ac:7e:77:fa:40:ad:e9:22:4a:7c: 2a:71:2e:da:c8:00:e8:3a:39:b0:8f:4d:ed:04:86: 83:c9:51:5b:00:47:eb:95:8c:0c:13:2e:43:73:e7: 65:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:38:00:35:91:7D:F3:D7:0F:89:E6:08:F0:FF:52:00:91:5E:BC:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:49:63:01:11:b3:09:ef:f6:4c:2d:77:05:43:df:70:5c:b2: 04:42:bc:b7:a4:e3:cb:8e:d5:f4:c0:2d:75:2f:79:38:d7:9e: ac:a9:51:3d:1d:4e:ed:b7:3f:e2:c9:fc:22:3d:d8:c1:62:4d: f3:6d:2f:97:fc:d1:eb:95:b3:42:b4:ed:29:b8:2d:63:93:7d: 84:bd:8f:b4:74:3e:64:9a:22:f7:57:52:c8:7e:fc:60:a4:2c: 01:fa:9f:c5:94:aa:ab:a1:b2:29:b4:ac:a7:b8:44:c6:b2:54: 8f:ba:4a:f7:dd:a6:34:3e:70:26:0b:cf:50:a9:37:f6:c1:b5: 8e:74:48:66:cf:7d:1d:25:bb:31:e4:9b:89:8d:d3:8d:88:d2: 92:9b:3b:e5:16:3f:ee:da:7b:97:a1:89:f8:22:af:f9:03:f6: 97:4e:d1:0a:7f:a2:7b:a4:d2:12:96:e2:a4:35:51:46:dd:82: d3:66:df:6f:ac:c8:1d:74:3b:4c:72:53:ee:37:98:b4:91:c8: 43:cc:01:7e:88:26:d5:ff:44:d1:87:3a:ce:2f:a9:63:ce:a5: f9:11:b7:f0:44:b9:94:7f:f6:5d:a7:ee:e6:53:ac:38:0d:47: be:81:e2:d5:43:79:a2:21:54:47:bb:c6:5f:49:7e:c2:9c:b9: aa:07:6a:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nO7fSV+6W4grYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk ZTE1NzdiNDUtYmU1NS00Y2M1LTk3YjEtZjk4MTBmNDBlYzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBGZN8K0BD/us4ACltWURHF++ply0qHqAxLw AVwvEhqruu9KHyWsitfrb7ZKcn1g+fEWf3lPlBAFdLyqIr4yCT47SkfVuX8tWsJK QK6lOtyKbPSRsqlyn1DZdrmAps/whCo0S5tSBFG5hgd4X0VEgf4nSlIr2Q39/CEn swSxMLIQ1IV8oJv5yU7o/GLbJSyW3/95IXVIM2PiIi4hMx0PSKnTouQUsQ1o7zUY gqz07CCUIULmArxEv7sV5P5e64Yt0bksU2Qsf6QtL9SrtQWEUvXKgTVIGKx+d/pA rekiSnwqcS7ayADoOjmwj03tBIaDyVFbAEfrlYwMEy5Dc+dlxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK84ADWRffPXD4nmCPD/UgCRXrzSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTJiMWU4MTctNTgxYi0z NjEzLWJmZjAtNTE5YjYyZDJjNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9JYwERswnv9kwtdwVD33BcsgRCvLek48uO1fTALXUveTjXnqypUT0d Tu23P+LJ/CI92MFiTfNtL5f80euVs0K07Sm4LWOTfYS9j7R0PmSaIvdXUsh+/GCk LAH6n8WUqquhsim0rKe4RMayVI+6SvfdpjQ+cCYLz1CpN/bBtY50SGbPfR0luzHk m4mN042I0pKbO+UWP+7ae5ehifgir/kD9pdO0Qp/onuk0hKW4qQ1UUbdgtNm32+s yB10O0xyU+43mLSRyEPMAX6IJtX/RNGHOs4vqWPOpfkRt/BEuZR/9l2n7uZTrDgN R76B4tVDeaIhVEe7xl9JfsKcuaoHaqc= -----END CERTIFICATE-----Generated at Sun Apr 13 00:27:53 2025 by rpki-client