$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c2903b46-7a42-3a58-9246-9f4488352a66.roa File: c2903b46-7a42-3a58-9246-9f4488352a66.roa (raw, json) Hash identifier: 7Q6SGdoaFSdmeuo00DWCHm+uIImheSa74FKesoRJxJk= Subject key identifier: 53:9A:50:13:3F:E3:F0:51:5F:B3:61:A0:D1:28:14:56:9A:67:F9:53 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848EB3109813DA8F7A093D81600 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c2903b46-7a42-3a58-9246-9f4488352a66.roa Signing time: Tue 18 Feb 2025 02:00:38 +0000 ROA not before: Tue 18 Feb 2025 02:00:38 +0000 ROA not after: Mon 19 May 2025 01:00:38 +0000 asID: 53356 IP address blocks: 172.111.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:eb:31:09:81:3d:a8:f7:a0:93:d8:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 18 02:00:38 2025 GMT Not After : May 19 01:00:38 2025 GMT Subject: CN=1a30cb66-173a-485c-9dcc-5a0be28da70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c0:ad:b0:31:90:51:6f:f1:7c:6f:3b:e4:df: 0c:de:70:b1:b4:c9:89:c6:9f:10:40:a8:ee:1c:3c: fe:4f:40:4f:59:2e:c8:14:90:fc:de:27:76:c1:0f: 64:65:50:91:ad:f3:ab:f2:93:f8:71:9d:7e:5b:31: 00:00:72:0b:3b:3c:8a:29:21:83:eb:21:a0:49:08: a6:3d:a2:34:b1:bd:41:bf:7f:22:95:c6:ca:69:71: c0:6c:93:8b:1b:f3:1c:0c:21:d7:71:b3:f3:d7:7b: a6:5b:7c:42:91:95:26:f6:4d:64:18:01:7b:70:54: dc:53:1b:0b:d2:de:67:00:59:f0:b5:d4:28:0f:2a: ab:ec:20:fe:8e:37:9b:d2:ca:4e:33:ab:f5:0d:2d: 4f:92:f1:df:ae:6d:3b:4a:04:4b:52:58:a3:3b:44: 67:80:65:33:31:eb:c5:ee:0a:db:a2:e4:97:9d:7b: 15:ef:2c:9d:4e:98:99:f1:04:98:15:80:74:06:38: d7:d7:3b:c5:88:b6:2e:84:a7:de:0f:57:28:9f:fe: e6:ae:37:fa:4c:e6:43:2f:7a:56:8c:10:cc:94:2a: fe:3d:b1:6a:23:79:90:3c:95:4f:c9:89:81:c7:ae: 74:aa:9e:bc:6b:92:10:2d:cc:1f:83:d5:2b:65:33: 40:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9A:50:13:3F:E3:F0:51:5F:B3:61:A0:D1:28:14:56:9A:67:F9:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c2903b46-7a42-3a58-9246-9f4488352a66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:a8:55:b1:18:e9:9b:54:bc:aa:9b:1c:7e:c3:68:6f:4d:c9: db:a2:b7:c0:27:cc:18:b6:81:5b:a2:ac:73:16:29:f2:14:62: b1:e8:d3:8e:c4:09:d9:2d:15:1f:e8:0a:4a:4c:f9:d5:52:01: c0:aa:40:66:cd:5d:ba:9e:61:ae:46:17:ec:6e:99:93:d5:2e: b8:d7:b8:2f:3c:3a:fb:5b:ee:eb:71:a7:8a:41:ee:8e:55:2a: 44:88:12:fa:4e:cd:5b:f0:99:b6:da:2c:0f:f4:86:75:82:a6: f6:87:53:87:aa:f4:da:16:08:df:5a:71:72:ac:ad:a6:c7:9b: 44:c9:54:96:8e:67:0c:40:1d:4d:59:e0:74:73:cc:10:f8:83: e6:76:33:99:fd:5f:dc:d9:c4:65:a3:6c:9f:4c:4f:74:19:cc: 2d:f7:81:2a:87:2d:83:63:81:d4:83:ec:ac:74:1d:39:d7:10: 11:44:72:39:2d:cd:7a:a8:7b:37:dd:b3:da:32:ed:87:76:a7: d4:02:3e:2e:fd:e4:a9:d6:ef:06:b4:15:e9:00:21:05:34:f5: 8e:3f:c0:a9:62:ea:f6:61:88:2e:8e:25:86:e7:bc:ec:f5:b6: c8:c8:e8:91:95:4c:6a:b8:8a:b3:47:06:1e:b3:2e:17:f9:92: 72:67:8d:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjrMQmBPaj3oJPYFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIxODAyMDAzOFoXDTI1MDUxOTAxMDAzOFowLzEtMCsGA1UEAxMk MWEzMGNiNjYtMTczYS00ODVjLTlkY2MtNWEwYmUyOGRhNzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsCtsDGQUW/xfG875N8M3nCxtMmJxp8QQKju HDz+T0BPWS7IFJD83id2wQ9kZVCRrfOr8pP4cZ1+WzEAAHILOzyKKSGD6yGgSQim PaI0sb1Bv38ilcbKaXHAbJOLG/McDCHXcbPz13umW3xCkZUm9k1kGAF7cFTcUxsL 0t5nAFnwtdQoDyqr7CD+jjeb0spOM6v1DS1PkvHfrm07SgRLUlijO0RngGUzMevF 7grbouSXnXsV7yydTpiZ8QSYFYB0BjjX1zvFiLYuhKfeD1con/7mrjf6TOZDL3pW jBDMlCr+PbFqI3mQPJVPyYmBx650qp68a5IQLcwfg9UrZTNAQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOaUBM/4/BRX7NhoNEoFFaaZ/lTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzI5MDNiNDYtN2E0Mi0z YTU4LTkyNDYtOWY0NDg4MzUyYTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOoVbEY6ZtUvKqbHH7DaG9Nyduit8AnzBi2gVuirHMWKfIUYrHo047E CdktFR/oCkpM+dVSAcCqQGbNXbqeYa5GF+xumZPVLrjXuC88Ovtb7utxp4pB7o5V KkSIEvpOzVvwmbbaLA/0hnWCpvaHU4eq9NoWCN9acXKsrabHm0TJVJaOZwxAHU1Z 4HRzzBD4g+Z2M5n9X9zZxGWjbJ9MT3QZzC33gSqHLYNjgdSD7Kx0HTnXEBFEcjkt zXqoezfds9oy7Yd2p9QCPi795KnW7wa0FekAIQU09Y4/wKli6vZhiC6OJYbnvOz1 tsjI6JGVTGq4irNHBh6zLhf5knJnjVc= -----END CERTIFICATE-----Generated at Fri Apr 11 23:11:11 2025 by rpki-client