$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08e32952-ffb7-3d9a-b4fd-75e58b99758b.roa File: 08e32952-ffb7-3d9a-b4fd-75e58b99758b.roa (raw, json) Hash identifier: ZGRSMdv+bfXdxDaGj4TmY5jerje6o+Msyl2af0SCBGk= Subject key identifier: 37:A0:80:3B:ED:9A:E4:74:B4:44:E3:FE:98:43:7D:F2:88:70:73:56 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849AA4F704922E75470C9A43340 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08e32952-ffb7-3d9a-b4fd-75e58b99758b.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 172.111.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:70:49:22:e7:54:70:c9:a4:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=593bcaa3-80be-4cb6-870d-fccac76ec29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0c:aa:e3:c0:26:ef:88:a2:6d:0c:2d:bf:f4: 42:a1:3d:04:3c:08:f7:0a:aa:98:97:3e:96:33:9b: ed:86:b6:75:2c:6e:f0:b3:ae:9d:51:4d:9b:9b:4f: f0:a6:d4:6b:0c:7b:ad:c9:c6:7b:0c:5a:00:bf:44: eb:c2:1b:dd:74:fc:1e:89:64:fc:fc:09:35:95:6d: c3:3f:09:67:a0:ea:8a:9f:dc:e2:ea:ea:43:60:76: be:89:0d:05:77:66:25:d7:ff:86:83:fb:01:08:47: 88:87:3d:4e:91:55:26:b9:8b:3a:b2:ea:f6:d7:bf: d3:55:e8:70:9c:6c:99:28:10:7e:a7:22:3b:eb:06: 9f:26:d2:90:01:31:02:52:fe:8a:21:5d:ea:65:dc: 32:79:b9:4b:ce:db:24:47:1d:cd:56:d9:62:d2:e7: 88:e4:81:b7:1f:ed:f6:8b:68:57:22:09:26:e1:82: ac:ff:27:2f:6a:db:33:3e:f6:93:7c:ef:55:18:60: 56:e5:c1:05:39:aa:0e:23:71:85:99:01:85:0b:a0: 43:b2:fb:6a:91:13:80:9b:39:4c:88:54:e6:98:3a: 75:98:ba:2f:b6:5b:a6:4e:36:b2:d2:d2:a9:28:54: fd:e1:f8:f1:ad:5d:08:3c:3b:54:bd:ae:60:70:c3: 62:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A0:80:3B:ED:9A:E4:74:B4:44:E3:FE:98:43:7D:F2:88:70:73:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08e32952-ffb7-3d9a-b4fd-75e58b99758b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:bd:5a:e2:24:f1:4b:07:7f:c1:b9:8e:92:08:10:5a:1d:ff: d5:71:ad:2b:fe:fb:41:cb:43:8a:d9:8c:26:c2:b8:a9:59:6e: 88:fd:58:ee:2c:7c:8e:08:d5:1e:b7:22:52:eb:73:95:6a:97: f9:23:b1:92:6e:bc:4e:00:40:75:70:43:6e:4d:7b:ee:40:16: ee:90:38:8b:b2:01:59:0f:72:5a:e6:02:0d:38:05:04:bb:3c: 59:80:36:f6:07:17:e7:ff:b7:c5:5a:51:26:fd:77:ac:5a:36: a3:5f:cb:64:3b:db:b1:4e:f3:ac:bb:9c:85:c6:76:e0:df:a0: 6b:1b:01:92:01:77:6a:14:ef:5f:ac:45:04:e1:b5:d0:3a:59: 0c:64:a6:68:84:d1:45:da:4d:79:9b:4f:9b:ef:fc:a1:1e:7b: 8d:85:d9:5f:f8:40:a3:5a:c4:66:69:03:6b:a0:5d:94:a5:8b: 86:1a:16:0a:2a:07:b1:0a:51:8e:d2:68:86:dc:96:75:27:c3: 59:5e:33:e9:5e:91:9c:83:d4:fe:05:62:f7:88:bd:86:1f:14: 41:cb:b5:a1:cc:da:a9:0e:9d:e8:3f:a7:1a:52:84:0d:a2:3a: 5f:01:ae:45:0b:e5:cd:6f:5a:5b:6a:24:26:59:ed:9b:16:77: 6d:bf:5b:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3BJIudUcMmkM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk NTkzYmNhYTMtODBiZS00Y2I2LTg3MGQtZmNjYWM3NmVjMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ayq48Am74iibQwtv/RCoT0EPAj3CqqYlz6W M5vthrZ1LG7ws66dUU2bm0/wptRrDHutycZ7DFoAv0TrwhvddPweiWT8/Ak1lW3D PwlnoOqKn9zi6upDYHa+iQ0Fd2Yl1/+Gg/sBCEeIhz1OkVUmuYs6sur217/TVehw nGyZKBB+pyI76wafJtKQATECUv6KIV3qZdwyeblLztskRx3NVtli0ueI5IG3H+32 i2hXIgkm4YKs/ycvatszPvaTfO9VGGBW5cEFOaoOI3GFmQGFC6BDsvtqkROAmzlM iFTmmDp1mLovtlumTjay0tKpKFT94fjxrV0IPDtUva5gcMNidQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeggDvtmuR0tETj/phDffKIcHNWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDhlMzI5NTItZmZiNy0z ZDlhLWI0ZmQtNzVlNThiOTk3NThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrG++MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+9WuIk8UsHf8G5jpIIEFod/9VxrSv++0HLQ4rZjCbCuKlZboj9WO4s fI4I1R63IlLrc5Vql/kjsZJuvE4AQHVwQ25Ne+5AFu6QOIuyAVkPclrmAg04BQS7 PFmANvYHF+f/t8VaUSb9d6xaNqNfy2Q727FO86y7nIXGduDfoGsbAZIBd2oU71+s RQThtdA6WQxkpmiE0UXaTXmbT5vv/KEee42F2V/4QKNaxGZpA2ugXZSli4YaFgoq B7EKUY7SaIbclnUnw1leM+lekZyD1P4FYveIvYYfFEHLtaHM2qkOneg/pxpShA2i Ol8BrkUL5c1vWltqJCZZ7ZsWd22/W4s= -----END CERTIFICATE-----Generated at Sat May 10 21:35:57 2025 by rpki-client