$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa File: d187a421-c3fa-3a3d-82ce-a52b6630982c.roa (raw, json) Hash identifier: u7soy/Hi8XbKb2wiPU4czzgaCK06MCtPCga0tvddLmk= Subject key identifier: 99:5F:F9:C1:90:B3:06:74:B6:79:77:DD:1B:51:D9:F5:40:B5:D7:6F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584944693D69BA312D3F7747BFA0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 9009 IP address blocks: 172.111.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:3d:69:ba:31:2d:3f:77:47:bf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=171df5bc-f17a-4947-b768-fecf16139c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1d:6a:98:d5:c6:c0:c5:c4:a6:ba:63:e7:28: 4d:03:80:af:d9:d4:54:75:e8:22:8f:f1:1e:87:f8: a0:eb:f0:2d:4a:33:c3:61:c6:f7:af:3d:a2:9b:57: 4b:cb:7a:46:f0:54:da:ec:31:60:1b:78:70:5d:0e: 37:24:64:74:2f:43:9c:8e:c0:60:d7:03:0c:ab:3d: e2:52:de:b8:bb:97:1f:1f:e8:bb:1c:d4:c2:56:4f: 63:d6:31:d6:4d:91:ad:43:91:3c:c6:29:15:ec:6b: a0:9e:90:98:a9:cf:f1:6b:13:3f:09:7b:10:f7:22: 74:7b:e5:72:20:37:b1:70:85:c4:38:9f:f0:59:79: 69:c6:85:84:66:5d:45:e1:d0:d0:57:14:cf:1d:37: 21:18:6a:b3:9d:dc:50:9a:1c:6c:33:0a:61:d6:e0: 1f:df:4c:a1:dd:8e:8a:18:5b:e0:05:23:33:54:d0: 2d:ed:12:53:2a:cf:06:61:e8:e9:f3:38:46:48:af: ef:88:ca:93:eb:b4:4a:cd:f4:cb:39:11:1c:47:c0: b6:aa:d5:89:23:28:2e:0d:b5:bb:da:4b:7f:82:9b: 3b:8b:21:3e:12:af:39:2e:40:08:01:85:1e:44:87: a0:2e:08:d8:c2:ab:1d:f2:f7:72:a9:0b:1f:04:99: 9b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5F:F9:C1:90:B3:06:74:B6:79:77:DD:1B:51:D9:F5:40:B5:D7:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:43:de:9c:4a:d7:00:87:5b:7b:87:ad:e2:ac:d2:31:c0:f2: 19:50:a7:27:ee:ca:53:6c:19:65:d8:cb:33:85:12:42:9e:d0: b8:dc:c5:f6:54:af:76:85:13:1d:dd:f8:7f:d9:75:a2:a6:52: 1b:66:d2:00:d5:14:8f:86:65:4e:84:8a:7f:d0:42:89:ec:fb: 97:74:80:8e:75:7c:f7:7b:7d:13:d8:6d:55:5b:ce:a7:15:c0: 6b:27:48:4b:ac:b9:36:2b:47:be:1c:07:3a:e0:47:a7:33:cf: 47:a7:f6:f7:f7:ce:17:8b:7e:85:0b:2a:4c:e0:7b:93:a7:5b: c2:51:f3:de:82:46:35:0b:e0:5d:91:29:8e:87:9a:a1:ab:ed: b9:2f:84:76:d3:ec:fb:b5:e0:07:21:b8:dc:f0:aa:e1:81:02: 5f:87:cb:8f:59:b4:f8:fd:48:69:7c:93:a0:66:59:95:4b:0c: dc:a5:c2:43:2d:e5:bc:76:91:4d:f3:85:ff:3f:fe:42:82:03: 8e:60:ee:b4:c9:0d:2e:32:32:4e:d9:bb:4d:e1:d8:16:c9:e0: bc:7d:4b:37:13:ed:c7:7b:fc:a3:94:a7:eb:25:04:08:d7:b6: 01:24:27:fa:c8:3e:c7:62:88:65:b6:b9:e6:46:01:35:9a:ee: a3:59:35:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaT1pujEtP3dHv6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk MTcxZGY1YmMtZjE3YS00OTQ3LWI3NjgtZmVjZjE2MTM5YzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx1qmNXGwMXEprpj5yhNA4Cv2dRUdegij/Ee h/ig6/AtSjPDYcb3rz2im1dLy3pG8FTa7DFgG3hwXQ43JGR0L0OcjsBg1wMMqz3i Ut64u5cfH+i7HNTCVk9j1jHWTZGtQ5E8xikV7GugnpCYqc/xaxM/CXsQ9yJ0e+Vy IDexcIXEOJ/wWXlpxoWEZl1F4dDQVxTPHTchGGqzndxQmhxsMwph1uAf30yh3Y6K GFvgBSMzVNAt7RJTKs8GYejp8zhGSK/viMqT67RKzfTLOREcR8C2qtWJIyguDbW7 2kt/gps7iyE+Eq85LkAIAYUeRIegLgjYwqsd8vdyqQsfBJmb2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlf+cGQswZ0tnl33RtR2fVAtddvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDE4N2E0MjEtYzNmYS0z YTNkLTgyY2UtYTUyYjY2MzA5ODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARD3pxK1wCHW3uHreKs0jHA8hlQpyfuylNsGWXYyzOFEkKe0LjcxfZU r3aFEx3d+H/ZdaKmUhtm0gDVFI+GZU6Ein/QQons+5d0gI51fPd7fRPYbVVbzqcV wGsnSEusuTYrR74cBzrgR6czz0en9vf3zheLfoULKkzge5OnW8JR896CRjUL4F2R KY6HmqGr7bkvhHbT7Pu14AchuNzwquGBAl+Hy49ZtPj9SGl8k6BmWZVLDNylwkMt 5bx2kU3zhf8//kKCA45g7rTJDS4yMk7Zu03h2BbJ4Lx9SzcT7cd7/KOUp+slBAjX tgEkJ/rIPsdiiGW2ueZGATWa7qNZNXc= -----END CERTIFICATE-----Generated at Sun Apr 13 01:12:44 2025 by rpki-client