$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/27696e81-5b54-32f4-b2f8-7949a99a2057.roa File: 27696e81-5b54-32f4-b2f8-7949a99a2057.roa (raw, json) Hash identifier: Y3Ip12yDoipC5HosUcW6pFxC2gTQ6NhOkD8nJNPo6t4= Subject key identifier: 91:44:2B:DC:DA:17:8B:00:39:E1:44:1E:80:CF:6F:F8:7B:FF:58:83 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C429A81F851CCCF703F780 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/27696e81-5b54-32f4-b2f8-7949a99a2057.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 172.111.120.0/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:29:a8:1f:85:1c:cc:f7:03:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=3f0ae6c3-4165-499f-99e6-a5b8824d477f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:45:d8:f3:fa:9f:d4:06:ca:71:2b:d4:04:47: ca:5f:48:4c:7a:0e:b5:d1:51:a3:9f:75:77:5e:39: 0d:5e:10:92:01:0c:1b:6a:27:26:76:ff:88:89:da: c2:64:23:c8:87:93:ae:7e:c9:4c:e3:07:02:dc:01: ad:8f:b0:7c:2f:98:26:14:a1:7b:ca:a4:19:e5:62: 5d:5b:3c:e6:82:b7:26:ed:bc:7b:03:4d:10:81:d8: 58:d5:8c:f8:09:b8:8a:1c:03:f5:2c:25:26:41:7d: b1:05:e3:b8:0e:90:99:58:b8:7f:46:0e:7e:87:c7: 78:e6:5c:b6:7b:84:8c:70:a0:e4:96:78:6c:90:3b: f9:5b:95:82:e9:1c:24:30:c8:6d:91:b4:58:b9:bf: f2:40:f4:05:c4:7a:eb:65:e8:df:ee:5e:60:19:79: 1b:fc:fd:66:49:78:49:c6:25:e1:0b:b9:b5:7c:ff: 5e:68:ba:65:5c:9e:93:69:0d:39:33:99:08:29:0f: 91:f0:8c:9b:69:5c:ab:e4:cb:c8:cc:6e:11:58:86: d4:9c:23:66:b6:3a:e4:51:b9:e7:92:82:bf:51:13: 69:82:3f:15:e5:8a:da:2f:fd:23:f9:54:54:00:8a: c7:c0:ba:5b:20:5b:4b:ab:2c:88:89:78:56:81:08: 25:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:44:2B:DC:DA:17:8B:00:39:E1:44:1E:80:CF:6F:F8:7B:FF:58:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/27696e81-5b54-32f4-b2f8-7949a99a2057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.120.0/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:e2:97:22:c0:46:4d:55:78:a8:0a:0a:41:5c:6c:f0:46:11: 95:bb:46:6d:b3:bc:6d:91:c6:c5:9b:a7:03:0a:65:38:d1:ec: 96:64:7d:cf:a7:3e:ff:66:f8:7d:17:64:b6:64:e2:43:1c:40: 54:18:7e:00:fa:84:a2:b2:7b:e8:eb:5a:0e:ed:a6:64:5a:f1: 5d:aa:ed:8d:be:64:fe:da:81:0a:3b:7d:7a:21:4e:50:5d:a7: 12:06:f5:69:8a:5a:32:53:d2:be:c2:9e:68:27:c3:65:a8:13: a0:0d:aa:1a:00:ac:a9:a4:a3:c1:cb:cf:ce:70:c3:d9:a0:0d: f7:40:de:29:46:eb:3a:b9:53:83:b8:60:1a:26:90:8a:58:07: e4:e3:2b:bd:17:cb:7e:a2:19:53:95:8c:54:a0:2c:c8:1e:9d: 09:f6:f5:c2:94:50:0b:9d:42:28:c5:20:30:d2:8d:de:3c:3d: 2f:99:b4:36:15:0e:f2:96:d0:7c:1c:9b:0f:6f:f9:2d:72:75: 13:1c:f9:e5:d3:06:ef:1a:36:f1:65:c8:79:4c:39:41:3f:e5: fd:e5:cf:b6:f3:c0:fe:65:b6:5b:7d:91:7e:01:69:b0:ed:a1: 34:c5:e6:17:e4:4e:66:f4:ba:58:d9:d6:e3:d5:63:cd:81:75: 3a:9a:2f:25 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxCmoH4UczPcD94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk M2YwYWU2YzMtNDE2NS00OTlmLTk5ZTYtYTViODgyNGQ0NzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykXY8/qf1AbKcSvUBEfKX0hMeg610VGjn3V3 XjkNXhCSAQwbaicmdv+IidrCZCPIh5OufslM4wcC3AGtj7B8L5gmFKF7yqQZ5WJd Wzzmgrcm7bx7A00QgdhY1Yz4CbiKHAP1LCUmQX2xBeO4DpCZWLh/Rg5+h8d45ly2 e4SMcKDklnhskDv5W5WC6RwkMMhtkbRYub/yQPQFxHrrZejf7l5gGXkb/P1mSXhJ xiXhC7m1fP9eaLplXJ6TaQ05M5kIKQ+R8IybaVyr5MvIzG4RWIbUnCNmtjrkUbnn koK/URNpgj8V5YraL/0j+VRUAIrHwLpbIFtLqyyIiXhWgQglRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJFEK9zaF4sAOeFEHoDPb/h7/1iDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMjc2OTZlODEtNWI1NC0z MmY0LWIyZjgtNzk0OWE5OWEyMDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUErG94ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCa4pciwEZNVXioCgpBXGzwRhGVu0Zts7xtkcbFm6cDCmU40eyWZH3P pz7/Zvh9F2S2ZOJDHEBUGH4A+oSisnvo61oO7aZkWvFdqu2NvmT+2oEKO316IU5Q XacSBvVpiloyU9K+wp5oJ8NlqBOgDaoaAKyppKPBy8/OcMPZoA33QN4pRus6uVOD uGAaJpCKWAfk4yu9F8t+ohlTlYxUoCzIHp0J9vXClFALnUIoxSAw0o3ePD0vmbQ2 FQ7yltB8HJsPb/ktcnUTHPnl0wbvGjbxZch5TDlBP+X95c+288D+ZbZbfZF+AWmw 7aE0xeYX5E5m9LpY2dbj1WPNgXU6mi8l -----END CERTIFICATE-----Generated at Thu Apr 3 02:59:43 2025 by rpki-client