$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f6c09e1d-d18e-3b72-a39f-34f9d04ede7a.roa File: f6c09e1d-d18e-3b72-a39f-34f9d04ede7a.roa (raw, json) Hash identifier: UNKpdhLW6Cb2/G9dgJDV3hHjcLbOzRVbwFNQJ59qPmY= Subject key identifier: 2A:BE:99:81:9A:DD:F5:38:D7:EC:55:95:E0:A3:11:9D:78:1A:2E:9C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848CB1649DAA58BAB036AD6A2C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f6c09e1d-d18e-3b72-a39f-34f9d04ede7a.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 172.111.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:49:da:a5:8b:ab:03:6a:d6:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=fa4f634d-5e06-425a-ac99-41172fed334e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1c:db:33:65:00:7d:86:61:20:73:98:c7:b9: 3b:01:9f:74:f7:1d:90:15:9a:93:fd:54:06:32:9c: 6b:f2:e5:0a:ba:e2:9d:94:76:9f:8d:69:68:54:e0: 05:9e:99:b4:5a:f0:fc:42:6e:82:43:18:e4:ca:ab: 51:c8:72:45:8c:73:d2:0e:53:b4:56:ec:2a:40:24: ea:62:97:dd:f4:62:87:dc:1d:5d:ad:2f:f5:a2:a4: ed:dc:6e:89:23:cc:e1:d2:ce:e4:35:9c:89:2f:a8: c9:d2:14:2c:20:24:e2:c7:e5:fd:fd:b2:bb:e5:32: fb:3c:3b:ab:44:d6:50:2c:b6:bf:aa:6e:9e:a1:d0: c4:9a:48:ac:10:09:d7:e1:92:78:91:02:e2:e7:bf: c9:09:00:d9:b8:d3:43:f4:4b:0e:15:a0:d7:03:60: 07:f3:fc:00:61:33:a0:7b:cc:44:a9:a1:7d:09:ed: 95:e5:fb:91:eb:6e:91:17:ff:d4:dc:ba:f8:a3:39: 1e:b0:07:1f:2a:6c:53:07:04:81:d7:f3:27:b8:1c: 7a:15:99:4b:0d:60:89:b7:03:8b:12:11:66:cf:3b: 06:e1:92:76:e9:41:63:8a:3b:8b:eb:64:f5:c3:4a: 62:6d:2e:13:83:27:a1:12:08:4e:f4:27:4d:15:ba: 3d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BE:99:81:9A:DD:F5:38:D7:EC:55:95:E0:A3:11:9D:78:1A:2E:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f6c09e1d-d18e-3b72-a39f-34f9d04ede7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:99:87:64:ed:97:c2:d2:1e:eb:a6:60:fb:b6:35:cc:6a:e9: b1:1d:74:fa:54:7d:ee:bb:f0:a3:18:93:4f:eb:15:4b:87:f5: e6:3e:c4:c8:12:57:dd:f3:13:84:e4:8b:53:a4:3e:de:be:59: d7:a8:6d:6c:ce:e6:fd:07:9d:6f:78:48:85:6d:08:34:41:16: eb:f9:7c:c7:cb:9a:c1:2b:c8:8c:0a:44:ca:07:ab:97:0a:c0: 93:03:a8:59:5f:18:7f:7a:ac:9f:1c:d3:8c:ac:fc:96:f6:02: 13:74:1c:b4:85:6a:5d:5c:92:a5:d6:64:8d:b9:bf:7d:91:7c: b1:51:76:93:51:23:92:45:ed:40:d8:b6:a0:cb:52:c2:fc:d5: 5d:03:0e:7f:39:e0:cf:aa:35:93:92:00:77:44:92:07:cd:31: 54:81:b7:e7:aa:da:0c:73:31:7e:60:72:7d:2c:5f:cb:a7:20: 40:cb:d9:48:11:b4:75:a9:c3:a9:21:0f:56:16:40:14:d5:d6: 04:83:42:dc:f8:28:17:d5:ac:48:b8:f1:38:68:34:99:8c:99: cc:8c:c7:5c:25:93:84:a3:8e:e7:cc:d0:df:97:19:c8:e2:ed: 6b:80:8e:93:53:cb:13:e8:40:9f:66:93:e6:eb:bd:13:5f:e0: fe:e7:29:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFknapYurA2rWosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZmE0ZjYzNGQtNWUwNi00MjVhLWFjOTktNDExNzJmZWQzMzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRzbM2UAfYZhIHOYx7k7AZ909x2QFZqT/VQG Mpxr8uUKuuKdlHafjWloVOAFnpm0WvD8Qm6CQxjkyqtRyHJFjHPSDlO0VuwqQCTq Ypfd9GKH3B1drS/1oqTt3G6JI8zh0s7kNZyJL6jJ0hQsICTix+X9/bK75TL7PDur RNZQLLa/qm6eodDEmkisEAnX4ZJ4kQLi57/JCQDZuNND9EsOFaDXA2AH8/wAYTOg e8xEqaF9Ce2V5fuR626RF//U3Lr4ozkesAcfKmxTBwSB1/MnuBx6FZlLDWCJtwOL EhFmzzsG4ZJ26UFjijuL62T1w0pibS4TgyehEghO9CdNFbo9fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCq+mYGa3fU41+xVleCjEZ14Gi6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjZjMDllMWQtZDE4ZS0z YjcyLWEzOWYtMzRmOWQwNGVkZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuZh2Ttl8LSHuumYPu2Ncxq6bEddPpUfe678KMYk0/rFUuH9eY+xMgS V93zE4Tki1OkPt6+WdeobWzO5v0HnW94SIVtCDRBFuv5fMfLmsEryIwKRMoHq5cK wJMDqFlfGH96rJ8c04ys/Jb2AhN0HLSFal1ckqXWZI25v32RfLFRdpNRI5JF7UDY tqDLUsL81V0DDn854M+qNZOSAHdEkgfNMVSBt+eq2gxzMX5gcn0sX8unIEDL2UgR tHWpw6khD1YWQBTV1gSDQtz4KBfVrEi48ThoNJmMmcyMx1wlk4SjjufM0N+XGcji 7WuAjpNTyxPoQJ9mk+brvRNf4P7nKe4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:52 2025 by rpki-client