$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa File: f3a11e3c-29b8-3899-a1d3-970745a11a14.roa (raw, json) Hash identifier: i3NZphPZO3WKPG+1VwF3qbBeuaK6KubFpJPz82KCWpI= Subject key identifier: 2F:2C:B8:EB:08:E3:31:78:F5:0C:B6:B7:17:A7:0F:FD:74:31:A6:C0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848CB16498B80B8033E95212F40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 172.111.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:49:8b:80:b8:03:3e:95:21:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=6f83fb0a-6f8a-4a22-8c02-059c6a488086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:05:8d:5a:83:82:cb:f6:a3:20:8b:da:dc:73: 37:d0:e8:a2:4b:d4:63:08:df:6b:91:73:95:09:47: e2:b0:53:20:65:4b:e9:25:b8:05:40:9b:e7:e2:ee: e8:64:5f:9c:f0:0d:13:54:b3:07:04:f9:c7:e9:e5: 82:63:55:69:88:7f:c5:05:cf:06:f8:93:e7:cf:c7: 13:45:78:4d:7d:bc:b8:f5:8a:c9:60:da:94:e9:67: eb:58:60:80:38:7b:86:13:95:1c:07:3a:fc:bf:83: b1:6d:41:90:b9:b0:bb:09:3f:55:74:0e:78:75:9b: 28:2d:9f:eb:bb:d5:92:fa:bb:dd:a5:f9:c5:df:ca: 98:77:92:b0:f8:69:bc:78:ee:7d:8a:49:ce:c5:df: 73:83:6d:6d:b6:88:27:53:7a:0d:82:5a:b6:6d:5b: 97:3b:b8:82:fe:43:65:59:e4:45:34:ad:01:5d:2c: f4:d1:30:92:7d:b8:2d:f6:4d:bb:39:0f:a0:3e:14: 5e:64:77:fe:7d:09:56:d0:ca:12:a6:05:f6:c4:75: dc:17:ad:bd:69:c6:35:1d:ca:ae:0e:28:4a:10:58: f4:a1:39:59:12:15:28:c2:2e:f6:15:12:e3:a2:38: 32:dd:f0:c4:0d:7f:83:e7:87:e9:b5:30:9d:25:f1: 43:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2C:B8:EB:08:E3:31:78:F5:0C:B6:B7:17:A7:0F:FD:74:31:A6:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:fd:cf:10:2b:26:e9:ef:5d:fe:2f:1e:d2:cb:01:75:c6:22: f0:bb:a4:ce:f0:c0:af:f6:96:8b:59:a1:e7:74:0e:5a:58:96: ea:4a:b8:37:7b:96:8c:38:7b:22:b4:df:c3:48:2e:c5:db:bb: 88:1e:7c:6a:c1:e7:aa:8f:5e:61:96:19:9b:ce:06:83:0d:72: 9e:03:ba:92:74:49:6b:ae:d7:5a:c2:2d:8a:1d:30:e2:50:bd: d5:f3:0e:06:15:3d:c2:4d:6c:3e:f1:65:77:d3:10:4f:7e:cd: 4b:a2:7c:40:af:24:e7:c4:18:77:56:43:bb:5e:c6:0e:6d:13: b7:c3:06:d7:d6:d1:f9:08:e8:24:60:c1:d5:67:e8:fb:38:d2: 29:0a:a0:03:10:f9:39:fd:86:f2:57:47:4f:a3:19:f6:d7:6c: 71:ce:db:ee:6b:a8:59:c3:93:1f:4e:1f:c7:7a:99:95:1f:00: 9e:08:4d:a4:1e:4e:81:21:6e:62:0c:ab:df:47:aa:a2:54:0b: e9:1b:23:85:dd:7e:45:54:f7:2a:17:ed:32:d3:2e:9e:ef:25: da:8a:fd:06:81:2b:e3:09:91:e0:79:96:f2:ec:b3:16:c4:48: d0:6d:95:7d:17:09:43:5d:ed:ff:08:61:9d:df:9e:0d:e5:4d: cb:aa:ad:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFkmLgLgDPpUhL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk NmY4M2ZiMGEtNmY4YS00YTIyLThjMDItMDU5YzZhNDg4MDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wWNWoOCy/ajIIva3HM30OiiS9RjCN9rkXOV CUfisFMgZUvpJbgFQJvn4u7oZF+c8A0TVLMHBPnH6eWCY1VpiH/FBc8G+JPnz8cT RXhNfby49YrJYNqU6WfrWGCAOHuGE5UcBzr8v4OxbUGQubC7CT9VdA54dZsoLZ/r u9WS+rvdpfnF38qYd5Kw+Gm8eO59iknOxd9zg21ttognU3oNglq2bVuXO7iC/kNl WeRFNK0BXSz00TCSfbgt9k27OQ+gPhReZHf+fQlW0MoSpgX2xHXcF629acY1Hcqu DihKEFj0oTlZEhUowi72FRLjojgy3fDEDX+D54fptTCdJfFDlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8suOsI4zF49Qy2txenD/10MabAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjNhMTFlM2MtMjliOC0z ODk5LWExZDMtOTcwNzQ1YTExYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEL9zxArJunvXf4vHtLLAXXGIvC7pM7wwK/2lotZoed0DlpYlupKuDd7 low4eyK038NILsXbu4gefGrB56qPXmGWGZvOBoMNcp4DupJ0SWuu11rCLYodMOJQ vdXzDgYVPcJNbD7xZXfTEE9+zUuifECvJOfEGHdWQ7texg5tE7fDBtfW0fkI6CRg wdVn6Ps40ikKoAMQ+Tn9hvJXR0+jGfbXbHHO2+5rqFnDkx9OH8d6mZUfAJ4ITaQe ToEhbmIMq99HqqJUC+kbI4XdfkVU9yoX7TLTLp7vJdqK/QaBK+MJkeB5lvLssxbE SNBtlX0XCUNd7f8IYZ3fng3lTcuqrYs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:36 2025 by rpki-client