$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7582669e-2fd1-324c-ad24-9a18f5d395ea.roa File: 7582669e-2fd1-324c-ad24-9a18f5d395ea.roa (raw, json) Hash identifier: aZFCMZYKfuZULDIheVcTkxhX1U0AyJxjMZ+dVE56pKQ= Subject key identifier: 2D:A6:09:AD:A6:D2:29:DA:D9:1A:B5:68:29:F9:93:4A:13:6B:44:59 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849AA4F707C1B96DFCB945514C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7582669e-2fd1-324c-ad24-9a18f5d395ea.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 14618 IP address blocks: 172.111.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:70:7c:1b:96:df:cb:94:55:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=b51ace0b-2328-4253-9907-fe47cd4e5106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:1b:9a:a3:c9:5b:2c:00:6d:f2:74:5a:97: d3:b9:bc:b5:54:43:6f:cb:ef:bd:83:23:56:38:f8: eb:9c:fb:b9:a2:29:92:18:b7:6c:63:fe:9a:11:70: cb:a2:a2:54:6f:52:8f:bc:28:d5:98:64:44:42:89: 70:0c:0b:5c:af:f6:3b:bb:44:6c:44:65:59:47:0c: e8:39:51:35:ba:95:89:29:49:10:dc:95:4c:69:7e: 04:29:68:de:c3:5a:ba:8d:0c:4d:87:6c:d2:e9:8d: 5a:f8:25:ae:64:08:ab:18:92:57:50:c8:b9:38:d2: df:e7:f1:fa:eb:03:da:de:64:a9:45:e3:94:66:84: 99:28:a0:a8:02:c9:03:68:2f:89:2a:bc:b2:05:fd: 58:af:75:24:de:06:f4:57:73:c0:d5:26:86:d0:20: f5:bd:1e:b3:a9:69:83:c9:1c:e9:f0:10:48:aa:fe: 9f:0b:2f:1e:a9:77:ce:96:30:5c:d0:ad:22:75:d3: fc:11:b4:bd:30:3b:c2:e4:38:18:c1:d9:3b:fc:e0: 35:1b:33:ef:45:1e:11:36:0c:18:c0:a0:7f:e5:df: 82:5c:d4:86:72:56:49:65:97:f1:86:2c:a5:fe:df: 32:6f:8c:88:e7:cc:58:49:87:cf:02:4d:ef:73:7a: 27:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A6:09:AD:A6:D2:29:DA:D9:1A:B5:68:29:F9:93:4A:13:6B:44:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7582669e-2fd1-324c-ad24-9a18f5d395ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d1:63:37:6c:ea:83:d4:6f:85:92:ea:90:6b:1f:88:3d:6d: f4:48:2e:5d:a7:41:61:bb:1f:2a:70:e6:da:40:93:8d:5c:d4: 41:4c:1d:26:a9:e8:29:57:f0:e0:d9:6b:7e:f1:ed:0c:94:76: e8:62:25:48:48:74:21:f7:db:39:af:9e:58:8d:0b:dc:e2:db: 13:d6:36:2a:a5:d2:05:c0:12:88:61:79:42:ad:3b:df:c4:30: 61:76:6c:cb:34:7c:da:b4:83:d2:eb:5a:21:3e:9b:0c:75:ec: 6a:50:bc:83:84:5a:f2:52:21:da:23:f5:86:cd:42:13:37:01: f0:6e:dd:24:56:24:9b:07:b2:f7:3d:ff:59:00:54:33:4f:48: 92:7f:89:9d:56:98:43:0d:1b:d9:43:d8:a2:ef:c0:34:26:85: a7:9f:02:62:b9:3b:46:31:4f:f9:ef:f2:2e:1c:c5:7d:33:db: a7:87:b4:20:eb:86:e5:34:01:35:70:64:f9:7c:dc:b6:08:35: 7b:ed:50:23:bb:09:c9:68:a9:71:45:f6:76:a5:62:ce:ac:dc: 63:ed:fe:4d:5b:dd:dc:ff:5e:0b:9d:89:57:6d:a4:f2:97:35: 1e:3c:5e:e8:09:0b:f4:cc:2a:bb:4d:7a:4c:1b:df:ff:82:7e: 4d:05:61:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3B8G5bfy5RVFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk YjUxYWNlMGItMjMyOC00MjUzLTk5MDctZmU0N2NkNGU1MTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXEbmqPJWywAbfJ0WpfTuby1VENvy++9gyNW OPjrnPu5oimSGLdsY/6aEXDLoqJUb1KPvCjVmGREQolwDAtcr/Y7u0RsRGVZRwzo OVE1upWJKUkQ3JVMaX4EKWjew1q6jQxNh2zS6Y1a+CWuZAirGJJXUMi5ONLf5/H6 6wPa3mSpReOUZoSZKKCoAskDaC+JKryyBf1Yr3Uk3gb0V3PA1SaG0CD1vR6zqWmD yRzp8BBIqv6fCy8eqXfOljBc0K0iddP8EbS9MDvC5DgYwdk7/OA1GzPvRR4RNgwY wKB/5d+CXNSGclZJZZfxhiyl/t8yb4yI58xYSYfPAk3vc3onbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2mCa2m0ina2Rq1aCn5k0oTa0RZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzU4MjY2OWUtMmZkMS0z MjRjLWFkMjQtOWExOGY1ZDM5NWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLRYzds6oPUb4WS6pBrH4g9bfRILl2nQWG7Hypw5tpAk41c1EFMHSap 6ClX8ODZa37x7QyUduhiJUhIdCH32zmvnliNC9zi2xPWNiql0gXAEohheUKtO9/E MGF2bMs0fNq0g9LrWiE+mwx17GpQvIOEWvJSIdoj9YbNQhM3AfBu3SRWJJsHsvc9 /1kAVDNPSJJ/iZ1WmEMNG9lD2KLvwDQmhaefAmK5O0YxT/nv8i4cxX0z26eHtCDr huU0ATVwZPl83LYINXvtUCO7CcloqXFF9nalYs6s3GPt/k1b3dz/XgudiVdtpPKX NR48XugJC/TMKrtNekwb3/+Cfk0FYXo= -----END CERTIFICATE-----Generated at Fri May 9 09:48:15 2025 by rpki-client