$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa File: febb0e75-40f1-37a9-a0a4-5dc80635d514.roa (raw, json) Hash identifier: 9iqS79RPoe6dqcTBHKzFVlhcmueNOJjfH+G1YcqMHMc= Subject key identifier: B0:07:F0:C7:A0:39:4D:AB:3D:77:FB:6C:AF:F8:A5:3F:74:8C:BF:DB Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584944693A8D574A60977B2AA4E0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 3223 IP address blocks: 172.111.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:3a:8d:57:4a:60:97:7b:2a:a4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=1ca3e67c-9f07-4623-8ca8-27428ca9a6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:56:1f:b3:db:83:36:ea:5e:94:63:d6:04:b7: 14:e7:4d:a6:07:3a:6e:33:f3:97:4c:3a:e3:19:43: e4:d1:0d:69:99:b1:40:6e:ee:73:82:5d:be:bc:af: 80:65:87:30:dd:8a:77:0f:b0:99:f1:da:5a:2f:19: 86:43:52:ff:37:22:e5:c9:5a:f9:4c:21:11:e6:0c: 8a:aa:83:81:a3:88:12:cd:18:48:1b:27:64:4b:85: 13:97:c2:df:ed:b8:d7:ce:ce:a9:e1:08:41:d8:12: 15:be:d9:8e:18:ff:7f:25:26:d7:65:63:4a:eb:e5: 2b:4a:69:d6:7a:13:4c:16:9f:fb:d5:a1:d5:f9:30: 75:9d:4e:9f:32:fe:96:1b:21:7c:ee:ab:0f:ff:cc: 85:69:67:b2:0d:e7:70:0f:ca:2b:87:55:8a:b7:48: 70:f8:bd:73:0e:71:6a:4a:8d:8b:eb:66:25:d7:c8: c7:1e:e4:4f:b5:ec:59:7d:fe:bd:5b:63:f8:bf:19: b6:39:bf:f0:25:d3:f2:33:9d:b6:ee:43:74:15:36: 08:ce:5c:38:86:1e:b1:df:1b:be:c6:eb:68:ea:61: 70:6c:ff:78:ba:e9:5d:12:34:0f:36:01:2c:8d:ab: 24:c0:77:d6:02:f0:ba:8c:07:96:ba:9e:d6:c8:c0: 5d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:07:F0:C7:A0:39:4D:AB:3D:77:FB:6C:AF:F8:A5:3F:74:8C:BF:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:46:47:d8:ba:9a:6e:fe:5d:98:d6:f9:de:38:2a:b5:20:09: 81:40:8e:67:15:1e:b3:39:7a:2b:77:bc:7c:f5:a4:0c:87:76: 16:52:bb:d9:ad:c0:93:ec:86:99:a2:ae:69:39:b8:bf:40:da: 56:a4:40:e4:60:df:15:6f:e4:41:d0:e6:14:47:93:ea:d1:8c: 54:15:d9:c7:5c:0d:0b:e6:f8:4d:a6:8d:8a:c9:61:46:e4:2a: 70:d7:30:4c:85:f4:3d:66:df:bb:67:1a:92:7f:3d:43:73:00: 92:6f:16:1a:0c:b6:fe:f2:88:73:3e:75:78:e4:26:94:d7:0f: af:88:a9:66:41:00:cd:ac:e4:a6:3e:c7:bc:82:dc:4f:ff:af: 69:8f:b3:c3:d9:e1:ef:c6:53:c6:6b:13:2e:23:a7:8a:e6:12: 2e:a4:a8:0a:ea:5a:9d:d8:35:c1:21:6c:0f:34:3b:fe:f0:1e: 25:70:02:76:15:31:18:6f:9f:e1:17:e4:97:03:19:41:2d:66: 36:2b:17:d8:2c:eb:03:cd:fe:cf:65:1c:ed:6e:9c:1c:34:96: 99:f9:b5:0e:48:4e:cb:f9:e2:a3:43:4b:a6:89:f9:f5:ca:93: 86:52:08:81:71:8b:d2:ea:48:95:59:8d:34:ec:89:2c:fa:0d: fd:db:a9:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTqNV0pgl3sqpOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk MWNhM2U2N2MtOWYwNy00NjIzLThjYTgtMjc0MjhjYTlhNmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61Yfs9uDNupelGPWBLcU502mBzpuM/OXTDrj GUPk0Q1pmbFAbu5zgl2+vK+AZYcw3Yp3D7CZ8dpaLxmGQ1L/NyLlyVr5TCER5gyK qoOBo4gSzRhIGydkS4UTl8Lf7bjXzs6p4QhB2BIVvtmOGP9/JSbXZWNK6+UrSmnW ehNMFp/71aHV+TB1nU6fMv6WGyF87qsP/8yFaWeyDedwD8orh1WKt0hw+L1zDnFq So2L62Yl18jHHuRPtexZff69W2P4vxm2Ob/wJdPyM5227kN0FTYIzlw4hh6x3xu+ xuto6mFwbP94uuldEjQPNgEsjaskwHfWAvC6jAeWup7WyMBdgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAH8MegOU2rPXf7bK/4pT90jL/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmViYjBlNzUtNDBmMS0z N2E5LWEwYTQtNWRjODA2MzVkNTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdGR9i6mm7+XZjW+d44KrUgCYFAjmcVHrM5eit3vHz1pAyHdhZSu9mt wJPshpmirmk5uL9A2lakQORg3xVv5EHQ5hRHk+rRjFQV2cdcDQvm+E2mjYrJYUbk KnDXMEyF9D1m37tnGpJ/PUNzAJJvFhoMtv7yiHM+dXjkJpTXD6+IqWZBAM2s5KY+ x7yC3E//r2mPs8PZ4e/GU8ZrEy4jp4rmEi6kqArqWp3YNcEhbA80O/7wHiVwAnYV MRhvn+EX5JcDGUEtZjYrF9gs6wPN/s9lHO1unBw0lpn5tQ5ITsv54qNDS6aJ+fXK k4ZSCIFxi9LqSJVZjTTsiSz6Df3bqYk= -----END CERTIFICATE-----Generated at Sat Apr 5 13:10:56 2025 by rpki-client