$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02c9137a-3faa-3dcd-b5df-4f1573dd5a0d.roa File: 02c9137a-3faa-3dcd-b5df-4f1573dd5a0d.roa (raw, json) Hash identifier: Tsd+YoQOQRJK4LVLeSIU4mDF2FGvx0mkJjaqKS7iwos= Subject key identifier: 25:65:25:59:C7:0C:43:15:8C:2E:C3:83:AA:DB:FA:42:3C:DF:DE:09 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849AA4F710768A0F11A08CDDFC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02c9137a-3faa-3dcd-b5df-4f1573dd5a0d.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 172.111.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:71:07:68:a0:f1:1a:08:cd:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=800049b0-1f69-4594-92ab-0744254899b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0c:67:2b:f9:b0:1f:fc:c4:2a:de:97:fd:7c: d4:b8:8d:c0:e2:6a:1c:8e:1a:fc:74:52:c2:b5:9c: e5:1d:27:e9:5e:88:d7:8a:c4:17:1c:d4:53:e7:3e: 50:04:0f:11:a2:3d:8d:b0:03:23:e0:9f:42:83:91: b8:43:c1:cd:82:b1:9d:74:54:21:43:cc:09:70:c1: be:cf:0b:62:4d:b9:7c:6b:3c:c7:12:e9:44:58:99: 4c:98:1b:c1:b9:6d:32:6f:44:e6:91:fc:a3:46:0f: b5:37:42:61:a1:31:ee:18:9c:fb:58:9d:04:f1:f8: d7:38:5a:77:93:58:e8:eb:19:41:b7:11:88:a3:00: 0d:cf:62:14:6b:5f:04:58:e1:80:9d:9d:94:39:b8: 0e:22:dd:4c:13:47:54:d2:af:85:97:07:46:00:47: 89:d1:8c:1c:39:60:5f:9f:8c:d0:53:c5:57:05:47: 88:3a:5d:7b:ad:b9:2f:82:73:c1:85:58:e7:54:0d: be:02:14:cf:d2:c6:ed:86:73:db:88:40:70:d8:81: cf:a9:82:74:09:ac:89:49:08:35:ea:25:80:b1:f0: d6:03:35:de:14:08:48:21:6b:8e:69:25:1b:10:0c: 32:5f:91:1c:09:c7:4f:46:73:47:90:4e:ae:dc:e1: ca:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:65:25:59:C7:0C:43:15:8C:2E:C3:83:AA:DB:FA:42:3C:DF:DE:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02c9137a-3faa-3dcd-b5df-4f1573dd5a0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:49:25:36:b5:67:aa:63:62:32:9d:01:13:9b:13:4f:ab:5f: 67:e6:5c:21:9e:57:85:2d:67:3b:91:e2:ee:2c:ef:60:f2:2c: ed:c0:33:9b:fb:f3:7a:9b:3a:e4:85:c0:26:35:12:b3:f9:16: e2:8d:d5:7e:ce:34:bf:e1:79:91:ca:65:d3:ae:d0:ed:fe:ea: 6f:79:20:c4:11:3e:37:56:9b:d0:c1:9e:4f:76:4c:52:24:25: cf:c2:8f:70:1d:82:6d:b3:fb:e0:94:0c:9c:64:54:65:fa:4a: b7:c9:22:17:04:ba:60:75:4b:3b:71:3a:f9:fe:e2:cc:a7:3e: 76:32:94:ba:28:14:a9:1d:83:24:91:23:00:10:8d:92:b8:ab: 04:73:55:55:5e:06:99:f9:d2:7e:7c:84:88:05:6b:78:af:29: d7:97:85:d8:03:cc:75:a0:1d:5b:f5:56:68:ab:83:f2:b4:f8: 46:e2:72:3a:c5:4a:fa:45:38:93:9e:84:6a:d3:07:a7:88:e6: 5e:45:d4:1c:61:c9:88:ce:20:2f:d7:d5:ac:a7:ef:64:d9:13: 8d:40:9f:ba:80:b4:bc:a5:68:88:1b:54:69:f7:a1:a5:c8:81: 59:51:f5:95:89:7e:49:fe:b5:df:80:69:d8:24:a2:2f:f0:4b: 98:b4:b8:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3EHaKDxGgjN38AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk ODAwMDQ5YjAtMWY2OS00NTk0LTkyYWItMDc0NDI1NDg5OWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwxnK/mwH/zEKt6X/XzUuI3A4mocjhr8dFLC tZzlHSfpXojXisQXHNRT5z5QBA8Roj2NsAMj4J9Cg5G4Q8HNgrGddFQhQ8wJcMG+ zwtiTbl8azzHEulEWJlMmBvBuW0yb0TmkfyjRg+1N0JhoTHuGJz7WJ0E8fjXOFp3 k1jo6xlBtxGIowANz2IUa18EWOGAnZ2UObgOIt1ME0dU0q+FlwdGAEeJ0YwcOWBf n4zQU8VXBUeIOl17rbkvgnPBhVjnVA2+AhTP0sbthnPbiEBw2IHPqYJ0CayJSQg1 6iWAsfDWAzXeFAhIIWuOaSUbEAwyX5EcCcdPRnNHkE6u3OHKhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVlJVnHDEMVjC7Dg6rb+kI8394JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDJjOTEzN2EtM2ZhYS0z ZGNkLWI1ZGYtNGYxNTczZGQ1YTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpJJTa1Z6pjYjKdARObE0+rX2fmXCGeV4UtZzuR4u4s72DyLO3AM5v7 83qbOuSFwCY1ErP5FuKN1X7ONL/heZHKZdOu0O3+6m95IMQRPjdWm9DBnk92TFIk Jc/Cj3Adgm2z++CUDJxkVGX6SrfJIhcEumB1SztxOvn+4synPnYylLooFKkdgySR IwAQjZK4qwRzVVVeBpn50n58hIgFa3ivKdeXhdgDzHWgHVv1Vmirg/K0+EbicjrF SvpFOJOehGrTB6eI5l5F1BxhyYjOIC/X1ayn72TZE41An7qAtLylaIgbVGn3oaXI gVlR9ZWJfkn+td+Aadgkoi/wS5i0uNU= -----END CERTIFICATE-----Generated at Mon May 5 10:19:42 2025 by rpki-client