$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa File: aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa (raw, json) Hash identifier: Nm5BepQDMvMOQiGZf5jtwRZBF2otxH7/3uWCEV3G6lc= Subject key identifier: 90:3D:9B:B7:7F:06:63:14:14:C3:96:4A:82:1A:E3:20:83:12:BC:D6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848FD56B73CB7E952576EF37280 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 3223 IP address blocks: 172.111.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:b7:3c:b7:e9:52:57:6e:f3:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=b8c28b56-f4d2-4cfb-a5eb-dadd07d8a316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ff:0f:ae:4e:a3:df:9f:27:e2:8b:aa:87:5e: f0:97:35:ca:24:26:c4:f6:4c:9e:49:f4:7a:83:66: 44:4d:5d:b4:ca:d1:36:7c:dd:34:40:cc:f8:c2:31: 86:3c:e3:cd:c7:02:67:07:9e:1b:85:ce:8c:18:32: 66:d6:79:17:cf:b8:33:06:7c:bf:ba:d8:b8:a3:d7: 25:e1:4d:d9:9e:7b:44:ae:2d:c1:36:4f:dc:35:a8: 97:3d:2d:d8:de:db:6f:cd:8b:4c:f9:ac:dc:27:99: 81:1f:5f:80:51:f4:35:1d:29:af:33:18:43:d0:9a: 1e:ba:c6:a5:93:36:7e:51:b0:d4:99:70:de:85:2e: 71:da:a1:50:a3:44:4f:e4:78:8d:94:96:6c:43:13: 18:5e:c7:54:a6:d3:45:2f:0b:8e:b5:91:33:d7:58: 5b:58:cd:88:43:7a:57:57:37:49:16:a9:b7:8b:86: 28:a1:c3:6a:48:dc:01:e9:20:48:f4:64:91:ca:f6: 13:a0:b1:89:db:fd:ed:30:22:c1:14:67:20:7d:88: c1:72:04:28:b8:31:78:2e:d5:c5:58:3a:ab:0b:2f: 33:9d:81:5e:bb:16:d1:36:16:39:37:69:ad:a4:63: a4:f4:19:87:d0:a3:36:63:03:a5:b3:15:6f:75:69: 3d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3D:9B:B7:7F:06:63:14:14:C3:96:4A:82:1A:E3:20:83:12:BC:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:cd:8d:39:cd:61:c1:1a:43:eb:c8:89:93:bf:08:db:e4:5a: 2d:ce:f0:76:5c:78:7e:dd:18:ce:45:7c:83:25:03:58:8c:4f: 5b:3f:7a:4d:59:34:3d:f8:6b:1c:29:b5:8a:88:9b:36:d4:18: d5:26:e9:de:d3:8c:6a:0c:19:13:65:04:97:c9:9a:79:50:68: 32:8d:e1:eb:4d:27:1e:48:af:16:0a:b0:98:6d:22:58:b7:97: 76:66:36:0d:a8:ab:f8:5b:1d:c3:2b:30:c4:79:95:7d:d9:09: 49:82:fa:0d:3a:5e:9a:ad:fe:e9:19:e0:fc:53:d2:f1:54:76: 64:1f:b9:d9:25:56:93:4e:0a:65:05:e5:3e:64:da:12:bf:37: bd:6f:a5:a3:29:97:1f:ce:09:c8:0d:81:04:ec:52:26:a5:0b: a7:83:de:b7:c3:d6:ca:3d:aa:69:e1:a2:d3:db:25:52:59:39: d8:3d:e4:7a:1e:a5:f2:76:68:b3:87:d3:0f:69:07:af:6b:87: af:ff:62:fd:94:73:7c:9e:1d:9c:66:b6:e1:12:3b:89:0a:62: 6e:37:d6:d3:c9:44:75:b2:d7:84:94:e7:21:1c:96:ad:c2:c1: 69:90:bc:f2:5d:67:ac:80:9d:1b:74:d1:71:a3:21:c5:3e:6f: 83:73:ca:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vrc8t+lSV27zcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk YjhjMjhiNTYtZjRkMi00Y2ZiLWE1ZWItZGFkZDA3ZDhhMzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/8Prk6j358n4ouqh17wlzXKJCbE9kyeSfR6 g2ZETV20ytE2fN00QMz4wjGGPOPNxwJnB54bhc6MGDJm1nkXz7gzBny/uti4o9cl 4U3ZnntEri3BNk/cNaiXPS3Y3ttvzYtM+azcJ5mBH1+AUfQ1HSmvMxhD0Joeusal kzZ+UbDUmXDehS5x2qFQo0RP5HiNlJZsQxMYXsdUptNFLwuOtZEz11hbWM2IQ3pX VzdJFqm3i4YoocNqSNwB6SBI9GSRyvYToLGJ2/3tMCLBFGcgfYjBcgQouDF4LtXF WDqrCy8znYFeuxbRNhY5N2mtpGOk9BmH0KM2YwOlsxVvdWk9LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJA9m7d/BmMUFMOWSoIa4yCDErzWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWE3ZTBkZWYtODBjNi0z MGQ0LTliMzctMDdhZTBiNDhiZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnNjTnNYcEaQ+vIiZO/CNvkWi3O8HZceH7dGM5FfIMlA1iMT1s/ek1Z ND34axwptYqImzbUGNUm6d7TjGoMGRNlBJfJmnlQaDKN4etNJx5IrxYKsJhtIli3 l3ZmNg2oq/hbHcMrMMR5lX3ZCUmC+g06Xpqt/ukZ4PxT0vFUdmQfudklVpNOCmUF 5T5k2hK/N71vpaMplx/OCcgNgQTsUialC6eD3rfD1so9qmnhotPbJVJZOdg95Hoe pfJ2aLOH0w9pB69rh6//Yv2Uc3yeHZxmtuESO4kKYm431tPJRHWy14SU5yEclq3C wWmQvPJdZ6yAnRt00XGjIcU+b4Nzym0= -----END CERTIFICATE-----Generated at Sat Apr 5 13:06:39 2025 by rpki-client