$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/48afdee3-6323-3856-b569-6a0bad0efb94.roa File: 48afdee3-6323-3856-b569-6a0bad0efb94.roa (raw, json) Hash identifier: SatarUlaD+gA2XzIJ84foWzREswomM70/hs1kLhZAFA= Subject key identifier: 79:C0:7C:CD:DD:22:92:EA:9E:9A:86:22:6A:AA:C2:93:37:4C:1D:81 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849AA4F70596B1C87CC77115300 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/48afdee3-6323-3856-b569-6a0bad0efb94.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 172.111.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:70:59:6b:1c:87:cc:77:11:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=f7b5369e-8ef7-444f-81b3-ee6076907e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f4:65:ed:37:a4:88:e1:d2:d1:93:4b:fc:d1: c8:5b:e6:74:e0:37:b9:53:64:9b:0d:d3:97:d2:16: fe:f7:93:ca:34:f8:fd:f2:f6:4d:68:ce:f7:66:92: 74:5c:ee:c2:58:23:ea:1f:54:8c:7f:15:d4:01:bd: 53:7f:f0:af:65:20:9d:b6:d6:a1:d5:65:76:33:80: db:ec:d2:61:ce:36:8c:45:37:ac:e4:69:6e:65:af: d6:97:45:7e:b7:c0:18:99:51:56:31:e4:85:3d:dc: 97:e1:8b:4a:42:44:b2:16:32:f7:9f:64:71:76:e8: ec:33:84:4c:46:fe:85:3a:64:c5:6f:85:fa:4c:3e: f9:0b:29:ce:4a:3e:1d:51:84:54:00:ae:e8:01:eb: d7:f8:c5:62:24:a1:63:eb:f2:de:e3:d9:a6:94:67: f0:fc:e8:da:10:fd:c3:c1:1f:64:33:1c:ae:70:1a: 08:cf:ba:bd:d0:2c:a5:20:fe:e4:99:eb:b3:f2:ca: 91:21:1d:40:09:6d:14:71:30:5a:a2:dd:96:ef:20: 6d:c4:63:83:c7:2e:5c:42:12:22:df:71:09:e6:94: 07:cc:fa:fc:56:c5:6c:2c:0f:62:c8:6b:93:22:d4: db:8d:9b:e5:52:13:c4:f9:33:3a:f4:0e:55:bc:5b: b9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C0:7C:CD:DD:22:92:EA:9E:9A:86:22:6A:AA:C2:93:37:4C:1D:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/48afdee3-6323-3856-b569-6a0bad0efb94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c6:24:c7:f2:e5:e7:b2:59:b8:2f:b4:6f:cb:ff:a8:79:4d: 85:d3:a0:c4:5f:c9:b1:32:d7:ac:5c:23:c0:5b:91:77:18:15: ae:30:fc:c2:c7:e4:77:f7:c2:f1:c1:ac:7c:7b:7a:2b:5f:d6: b9:49:70:30:53:be:3d:b7:ae:d1:65:72:77:7a:f1:46:31:69: 21:3e:96:4f:5a:c0:ed:17:c3:28:d7:5e:a2:42:7f:8d:15:56: 48:5a:73:98:73:8d:d4:10:f2:e9:17:d6:70:2d:0c:eb:ce:0e: c0:60:61:2c:f4:33:bf:83:cb:10:8b:ad:06:7f:1c:2d:db:b3: d2:66:4b:00:a4:7e:59:b2:9c:5d:e7:d3:39:1f:08:45:c8:cd: a7:02:5c:44:f4:81:ec:6a:f7:cc:b2:05:5a:e6:c5:6c:11:12: 69:d8:a6:1a:2a:67:49:0c:d5:50:cb:cd:69:a8:7d:d2:ba:77: e6:b8:d6:7b:0f:fe:46:7c:29:11:c3:70:69:30:ca:f9:c0:40: d6:0b:dc:c0:43:50:69:41:0f:d6:c6:f7:d0:16:f6:bb:6a:6c: d6:02:a3:13:17:48:22:5b:da:5b:3c:92:ba:50:74:e3:68:29: 0d:e6:3a:40:ab:77:68:1b:9c:d1:d0:de:27:1b:95:8d:15:59: 32:af:ca:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3BZaxyHzHcRUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk ZjdiNTM2OWUtOGVmNy00NDRmLTgxYjMtZWU2MDc2OTA3ZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvRl7TekiOHS0ZNL/NHIW+Z04De5U2SbDdOX 0hb+95PKNPj98vZNaM73ZpJ0XO7CWCPqH1SMfxXUAb1Tf/CvZSCdttah1WV2M4Db 7NJhzjaMRTes5GluZa/Wl0V+t8AYmVFWMeSFPdyX4YtKQkSyFjL3n2RxdujsM4RM Rv6FOmTFb4X6TD75CynOSj4dUYRUAK7oAevX+MViJKFj6/Le49mmlGfw/OjaEP3D wR9kMxyucBoIz7q90CylIP7kmeuz8sqRIR1ACW0UcTBaot2W7yBtxGODxy5cQhIi 33EJ5pQHzPr8VsVsLA9iyGuTItTbjZvlUhPE+TM69A5VvFu58QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnAfM3dIpLqnpqGImqqwpM3TB2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDhhZmRlZTMtNjMyMy0z ODU2LWI1NjktNmEwYmFkMGVmYjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrGJMfy5eeyWbgvtG/L/6h5TYXToMRfybEy16xcI8BbkXcYFa4w/MLH 5Hf3wvHBrHx7eitf1rlJcDBTvj23rtFlcnd68UYxaSE+lk9awO0XwyjXXqJCf40V Vkhac5hzjdQQ8ukX1nAtDOvODsBgYSz0M7+DyxCLrQZ/HC3bs9JmSwCkflmynF3n 0zkfCEXIzacCXET0gexq98yyBVrmxWwREmnYphoqZ0kM1VDLzWmofdK6d+a41nsP /kZ8KRHDcGkwyvnAQNYL3MBDUGlBD9bG99AW9rtqbNYCoxMXSCJb2ls8krpQdONo KQ3mOkCrd2gbnNHQ3icblY0VWTKvyuc= -----END CERTIFICATE-----Generated at Sun May 11 14:01:36 2025 by rpki-client