$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a48a86d8-7f03-3c20-8ef0-8d07792590a7.roa File: a48a86d8-7f03-3c20-8ef0-8d07792590a7.roa (raw, json) Hash identifier: 10tpExqSSMZj8iPbx7ASDcvsKJVLmkKZkjWKJOags9w= Subject key identifier: ED:83:77:D1:B1:60:B0:00:9C:3B:CF:9E:B5:9D:86:43:03:8D:8F:7A Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858493A566C8F8EF05604266ED300 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a48a86d8-7f03-3c20-8ef0-8d07792590a7.roa Signing time: Tue 18 Mar 2025 10:24:51 +0000 ROA not before: Tue 18 Mar 2025 10:24:51 +0000 ROA not after: Mon 16 Jun 2025 10:24:51 +0000 asID: 36352 IP address blocks: 172.111.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3a:56:6c:8f:8e:f0:56:04:26:6e:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 18 10:24:51 2025 GMT Not After : Jun 16 10:24:51 2025 GMT Subject: CN=6ead8b95-7b8b-43b6-8b37-9c81862176b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a4:9d:86:a2:6d:75:be:86:aa:ed:0f:8f:ad: ac:fe:08:64:c4:89:14:e0:fe:0f:f7:e9:d5:53:66: ba:d9:d5:9c:af:de:91:af:c3:eb:16:fc:c1:92:cb: 5b:fc:cc:81:13:77:03:d2:ed:cc:35:35:07:a0:eb: 80:be:e7:6c:ad:ca:64:5b:7e:5b:15:75:96:e8:30: fe:8d:96:4a:68:3b:2c:78:d5:34:5b:80:fb:55:3f: 04:9a:23:e8:d6:c8:b5:87:14:88:fa:2b:8e:be:f8: c2:f7:79:91:89:2a:46:02:78:e5:c4:81:ac:75:26: cf:19:14:e1:3e:3f:c7:5b:db:bb:d0:94:90:16:fd: 32:8a:86:7e:d4:c5:56:08:3b:ee:f2:2b:f6:56:7b: 66:26:0f:24:9d:22:21:74:06:45:12:7c:a0:46:35: 1f:73:17:30:74:16:fe:f6:d7:fb:69:e9:c0:4e:6d: 88:35:91:dc:e9:56:bd:64:10:cc:eb:96:c8:f4:dd: 3c:af:78:66:48:19:b3:ee:79:55:80:00:f0:e8:79: 33:8d:36:c7:4c:c2:4a:f7:88:77:d0:8b:4c:b7:27: 5e:bd:f8:98:b2:63:9c:54:48:d6:02:36:19:e3:52: f8:da:42:d0:d5:26:14:be:71:c4:26:2b:95:8a:38: cb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:83:77:D1:B1:60:B0:00:9C:3B:CF:9E:B5:9D:86:43:03:8D:8F:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a48a86d8-7f03-3c20-8ef0-8d07792590a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:63:07:bf:64:58:c8:ae:72:29:70:79:6d:76:27:04:5e:04: 98:1e:00:51:67:6b:40:5f:bb:3f:c9:8f:93:15:2f:7e:62:49: 30:2d:9d:5b:28:29:9b:9e:c1:07:bd:f7:06:61:e3:d4:22:3c: ca:f1:17:70:37:a2:bf:4f:93:f2:43:c3:77:4f:f7:d0:b8:74: 71:20:20:97:27:2f:24:2c:ee:f7:d7:66:fc:7a:8a:ea:b6:05: 8c:9f:62:f7:ef:86:4f:92:5b:b7:62:3b:24:de:40:95:80:12: ae:f7:77:4f:3d:e9:95:82:89:ca:12:40:45:c3:de:8a:67:76: 34:53:6a:1e:a5:34:1d:17:81:4b:50:1f:bd:f1:77:f6:7e:d5: 48:fa:36:05:91:0e:cf:fb:db:f1:35:40:28:2c:fd:67:89:35: 51:b0:ce:37:cd:bc:af:fc:f8:24:c1:2a:9a:15:0f:2b:0a:a5: 40:b5:20:df:1f:2a:8d:11:81:1c:bf:b1:ae:d6:e9:1a:1a:4d: 53:93:a6:95:33:18:00:8a:13:24:80:23:64:75:66:e5:f7:96: 5f:8f:ac:0e:af:db:49:08:c0:3e:fc:5a:d2:72:87:75:bb:df: 81:63:11:97:41:61:ba:29:c8:5c:ff:84:a0:f9:f7:2d:e1:e7: 59:94:10:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk6VmyPjvBWBCZu0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMxODEwMjQ1MVoXDTI1MDYxNjEwMjQ1MVowLzEtMCsGA1UEAxMk NmVhZDhiOTUtN2I4Yi00M2I2LThiMzctOWM4MTg2MjE3NmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKSdhqJtdb6Gqu0Pj62s/ghkxIkU4P4P9+nV U2a62dWcr96Rr8PrFvzBkstb/MyBE3cD0u3MNTUHoOuAvudsrcpkW35bFXWW6DD+ jZZKaDsseNU0W4D7VT8EmiPo1si1hxSI+iuOvvjC93mRiSpGAnjlxIGsdSbPGRTh Pj/HW9u70JSQFv0yioZ+1MVWCDvu8iv2VntmJg8knSIhdAZFEnygRjUfcxcwdBb+ 9tf7aenATm2INZHc6Va9ZBDM65bI9N08r3hmSBmz7nlVgADw6HkzjTbHTMJK94h3 0ItMtydevfiYsmOcVEjWAjYZ41L42kLQ1SYUvnHEJiuVijjLsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2Dd9GxYLAAnDvPnrWdhkMDjY96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTQ4YTg2ZDgtN2YwMy0z YzIwLThlZjAtOGQwNzc5MjU5MGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJjB79kWMiucilweW12JwReBJgeAFFna0Bfuz/Jj5MVL35iSTAtnVso KZuewQe99wZh49QiPMrxF3A3or9Pk/JDw3dP99C4dHEgIJcnLyQs7vfXZvx6iuq2 BYyfYvfvhk+SW7diOyTeQJWAEq73d0896ZWCicoSQEXD3opndjRTah6lNB0XgUtQ H73xd/Z+1Uj6NgWRDs/72/E1QCgs/WeJNVGwzjfNvK/8+CTBKpoVDysKpUC1IN8f Ko0RgRy/sa7W6RoaTVOTppUzGACKEySAI2R1ZuX3ll+PrA6v20kIwD78WtJyh3W7 34FjEZdBYbopyFz/hKD59y3h51mUEJg= -----END CERTIFICATE-----Generated at Sat Apr 5 09:40:10 2025 by rpki-client