$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a7c850a7-6057-3aba-a856-158b07a73e10.roa File: a7c850a7-6057-3aba-a856-158b07a73e10.roa (raw, json) Hash identifier: KQzkkvnjmT/EbjgHMidPD+5+8jDgdLljAvWXKfM6RYs= Subject key identifier: E8:C3:C6:90:BD:34:C2:66:25:90:E8:12:17:41:75:D2:79:DE:DC:2A Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848CB16495892A79FB58240BD80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a7c850a7-6057-3aba-a856-158b07a73e10.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 172.111.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:49:58:92:a7:9f:b5:82:40:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=8d30e5c9-d5dc-42d7-b275-0b6bb905fda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0a:4a:96:4f:7b:33:87:49:c7:8a:cf:f3:b4: ec:e4:b9:0c:70:e8:7f:ce:2e:2d:3e:87:43:35:07: 36:ce:e4:c6:f0:31:1b:f2:53:e4:c7:1e:37:61:c0: 23:42:30:45:21:89:9f:9f:84:80:42:a6:8b:e2:13: 47:59:cc:57:a6:e4:1f:86:f6:20:17:73:a2:df:a6: be:5e:00:da:84:b6:01:05:cc:35:82:92:ba:67:01: 1d:1a:09:7c:a5:1a:d7:fb:c4:8c:3d:a4:a7:28:c4: 68:a4:e2:c1:75:e8:ae:96:ea:31:73:a2:c6:d3:72: a1:1f:72:46:39:ae:00:44:64:59:02:6f:0f:9c:f5: 58:e1:e4:b6:dd:8c:89:59:a0:a2:9c:74:fe:09:06: aa:14:0d:46:6e:73:85:ae:df:80:54:6e:55:e7:ac: 06:01:c6:be:b4:2f:5f:61:76:89:b5:c1:5d:61:80: 13:44:a5:4c:1b:35:fc:a6:8f:0d:f0:30:4b:e7:b1: e8:64:0f:44:e3:80:d7:50:43:1a:68:cd:c7:24:4e: 1a:53:3d:25:49:1e:fd:33:8f:e1:3d:ea:b4:e3:93: 3d:32:b7:9d:a1:b8:5f:5f:54:10:13:8d:ea:ff:95: 90:9c:d7:b3:f0:54:5d:37:63:7d:26:f2:fe:9d:f7: 32:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C3:C6:90:BD:34:C2:66:25:90:E8:12:17:41:75:D2:79:DE:DC:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a7c850a7-6057-3aba-a856-158b07a73e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:08:31:83:8e:3b:e8:2d:c0:ed:67:3d:7f:df:f8:d4:17:14: 75:10:7c:61:29:81:6c:3e:b0:c7:bf:b2:e2:f7:ee:12:c1:37: ad:9d:5a:93:be:57:18:23:d4:42:d2:c3:07:12:ec:a6:0c:9f: ee:22:ad:b3:ed:8e:5b:68:d3:c4:61:73:e3:13:bb:de:95:f2: 71:73:c2:5a:d6:dd:64:8c:e9:04:1b:21:d1:6b:fe:e3:d4:57: bb:1e:b3:72:7d:90:5b:7f:1f:6f:8b:85:24:a2:50:72:af:cb: ee:b1:14:12:4c:8c:1d:ef:13:ef:28:d0:a3:88:17:7c:d2:3a: 23:03:4e:43:99:cc:ad:55:3d:e9:e0:57:18:ef:b3:42:35:de: 74:fc:ac:91:d4:51:c2:3f:43:be:37:b6:29:19:cb:50:28:2d: cc:c6:63:47:00:e5:ae:91:26:14:b8:2a:41:46:7f:1c:9b:a2: 86:61:3e:0f:4b:cc:63:fd:99:14:6d:44:db:b8:8e:3e:03:71: 0d:5e:b7:a4:1d:d8:40:83:2b:4b:b2:43:59:b0:25:70:55:82: 42:8f:28:0e:41:37:f1:53:3a:f0:55:78:d4:67:c8:92:06:80: ae:fc:6d:2e:f2:49:3b:5c:7a:5c:eb:34:f0:82:f2:f7:23:4b: ed:a7:28:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFklYkqeftYJAvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk OGQzMGU1YzktZDVkYy00MmQ3LWIyNzUtMGI2YmI5MDVmZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQpKlk97M4dJx4rP87Ts5LkMcOh/zi4tPodD NQc2zuTG8DEb8lPkxx43YcAjQjBFIYmfn4SAQqaL4hNHWcxXpuQfhvYgF3Oi36a+ XgDahLYBBcw1gpK6ZwEdGgl8pRrX+8SMPaSnKMRopOLBdeiuluoxc6LG03KhH3JG Oa4ARGRZAm8PnPVY4eS23YyJWaCinHT+CQaqFA1GbnOFrt+AVG5V56wGAca+tC9f YXaJtcFdYYATRKVMGzX8po8N8DBL57HoZA9E44DXUEMaaM3HJE4aUz0lSR79M4/h Peq045M9MredobhfX1QQE43q/5WQnNez8FRdN2N9JvL+nfcygQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjDxpC9NMJmJZDoEhdBddJ53twqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTdjODUwYTctNjA1Ny0z YWJhLWE4NTYtMTU4YjA3YTczZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcIMYOOO+gtwO1nPX/f+NQXFHUQfGEpgWw+sMe/suL37hLBN62dWpO+ Vxgj1ELSwwcS7KYMn+4irbPtjlto08Rhc+MTu96V8nFzwlrW3WSM6QQbIdFr/uPU V7ses3J9kFt/H2+LhSSiUHKvy+6xFBJMjB3vE+8o0KOIF3zSOiMDTkOZzK1VPeng Vxjvs0I13nT8rJHUUcI/Q743tikZy1AoLczGY0cA5a6RJhS4KkFGfxybooZhPg9L zGP9mRRtRNu4jj4DcQ1et6Qd2ECDK0uyQ1mwJXBVgkKPKA5BN/FTOvBVeNRnyJIG gK78bS7ySTtcelzrNPCC8vcjS+2nKOI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:04 2025 by rpki-client