$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bd0d438a-73fb-383e-b0e9-2825b99d031c.roa File: bd0d438a-73fb-383e-b0e9-2825b99d031c.roa (raw, json) Hash identifier: rsDBkGeMtb+6lc1jmXCWWWIhse71CO7EILJpHJUNy/Y= Subject key identifier: 27:09:0A:75:44:75:BF:1E:FB:A5:65:D1:0D:D4:92:8A:61:36:C8:A6 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C4298CF96548FD993FB5B8 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bd0d438a-73fb-383e-b0e9-2825b99d031c.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 172.111.117.32/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:29:8c:f9:65:48:fd:99:3f:b5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=5f47bf59-64cd-4465-8374-270f3674db65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4b:4b:16:d0:af:12:e1:02:31:ad:28:59:81: 01:a3:81:92:b3:fa:89:17:25:15:32:88:42:f3:58: 0a:7b:8a:dd:3e:38:bf:4d:92:eb:4b:05:c8:44:35: 18:a1:12:5e:77:49:78:4d:eb:d4:03:61:33:f4:5f: d3:27:14:16:e7:de:67:bf:b6:b2:80:11:63:2c:b6: 6f:48:52:cd:ed:10:2e:22:23:e1:11:71:b4:5b:7f: 55:82:e7:54:3b:ee:c3:d9:e9:59:74:08:c1:ab:a2: fd:5a:78:53:01:3a:c0:5b:c4:31:f7:6c:de:bc:3a: be:00:7f:b3:3f:ae:57:28:81:26:d2:4f:d0:33:44: f0:bb:43:9e:e1:64:ca:b5:8f:e5:b5:e6:66:71:4d: 83:05:ec:68:f3:77:bc:b4:0c:60:77:56:59:e6:98: e1:da:93:6d:b9:68:44:b1:9d:f2:56:a2:57:7b:2a: 0e:b4:9b:60:37:6b:ce:15:25:a9:68:97:95:32:a1: b2:c1:4f:4d:09:a2:a4:7b:5b:bb:61:bb:ba:98:ff: 91:a2:5e:5b:56:13:d2:8a:2c:ee:d0:67:83:da:42: 85:37:dd:92:34:de:76:e9:e2:73:7b:0e:2a:5d:c3: e1:b3:b1:a6:2f:49:9c:13:87:ad:73:f3:8a:d8:e8: 25:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:09:0A:75:44:75:BF:1E:FB:A5:65:D1:0D:D4:92:8A:61:36:C8:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bd0d438a-73fb-383e-b0e9-2825b99d031c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.117.32/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:13:0f:4d:cc:f1:3a:f6:a2:61:11:f5:e6:ca:22:54:4b:41: 04:f5:10:10:31:40:4d:57:31:85:00:31:4b:09:a4:30:e8:18: 65:78:0a:53:69:6f:42:45:c2:02:0c:16:57:3f:5b:16:9e:dd: e1:26:89:4b:ab:4b:11:86:9d:5b:2a:f1:e9:1d:5f:8c:ae:52: e2:7e:30:78:db:e5:bb:4c:63:2c:77:e0:32:a3:6f:f5:6e:5d: 51:06:55:67:7f:c0:67:02:67:ac:01:e1:2e:27:6d:86:ed:e1: 86:a9:d0:a9:f2:83:73:e7:77:73:2f:bd:41:db:d3:e8:9e:ef: a4:e1:03:83:21:1f:55:1a:77:35:9b:b7:ca:0b:48:d6:35:9a: 9d:e2:93:23:56:12:e2:fa:0c:25:51:35:39:fe:15:a5:a0:b1: 89:f0:95:66:ee:b2:ca:38:5d:09:f4:fe:26:31:ec:f2:80:4f: b0:12:73:fb:61:a6:a6:74:61:1d:c1:81:43:1c:a8:31:3d:bd: 42:ef:52:b9:99:ca:2f:2a:13:71:f7:d8:8f:f1:e8:a8:92:8a: c9:5d:eb:db:97:57:2f:65:79:58:e5:85:f9:23:e9:ac:82:ba: 7e:9d:85:de:28:82:b2:67:e5:a6:c8:b3:66:ce:02:1d:c2:b2: 58:b3:10:13 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxCmM+WVI/Zk/tbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NWY0N2JmNTktNjRjZC00NDY1LTgzNzQtMjcwZjM2NzRkYjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0tLFtCvEuECMa0oWYEBo4GSs/qJFyUVMohC 81gKe4rdPji/TZLrSwXIRDUYoRJed0l4TevUA2Ez9F/TJxQW595nv7aygBFjLLZv SFLN7RAuIiPhEXG0W39VgudUO+7D2elZdAjBq6L9WnhTATrAW8Qx92zevDq+AH+z P65XKIEm0k/QM0Twu0Oe4WTKtY/lteZmcU2DBexo83e8tAxgd1ZZ5pjh2pNtuWhE sZ3yVqJXeyoOtJtgN2vOFSWpaJeVMqGywU9NCaKke1u7Ybu6mP+Rol5bVhPSiizu 0GeD2kKFN92SNN526eJzew4qXcPhs7GmL0mcE4etc/OK2OglvwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCcJCnVEdb8e+6Vl0Q3UkophNsimMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYmQwZDQzOGEtNzNmYi0z ODNlLWIwZTktMjgyNWI5OWQwMzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUErG91IDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAvEw9NzPE69qJhEfXmyiJUS0EE9RAQMUBNVzGFADFLCaQw6BhleApT aW9CRcICDBZXP1sWnt3hJolLq0sRhp1bKvHpHV+MrlLifjB42+W7TGMsd+Ayo2/1 bl1RBlVnf8BnAmesAeEuJ22G7eGGqdCp8oNz53dzL71B29Ponu+k4QODIR9VGnc1 m7fKC0jWNZqd4pMjVhLi+gwlUTU5/hWloLGJ8JVm7rLKOF0J9P4mMezygE+wEnP7 YaamdGEdwYFDHKgxPb1C71K5mcovKhNx99iP8eiokorJXevbl1cvZXlY5YX5I+ms grp+nYXeKIKyZ+WmyLNmzgIdwrJYsxAT -----END CERTIFICATE-----Generated at Thu Apr 3 02:52:52 2025 by rpki-client