$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89c763ab-13dd-3b24-8c22-2a785ba3be64.roa File: 89c763ab-13dd-3b24-8c22-2a785ba3be64.roa (raw, json) Hash identifier: Cd4Vr+/VOOuc7ZlXNjPsRHP/sFOagbfAQYqEZjae5JU= Subject key identifier: 29:27:B6:6C:87:71:15:AB:E6:26:D6:0F:0D:82:D7:84:02:99:81:A7 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849C79F64E6CA9F7549C4D69BC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89c763ab-13dd-3b24-8c22-2a785ba3be64.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 9009 IP address blocks: 172.111.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:64:e6:ca:9f:75:49:c4:d6:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=f7daeaa9-4e12-44f9-b5f5-4f5ca504fa41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:86:59:b9:b0:ca:98:42:ff:e5:f7:0b:8b:75: 0a:03:15:e7:3f:c6:c4:07:4b:8a:42:a8:4a:1b:68: 0a:2d:8b:5c:15:a6:11:af:c9:8e:d3:27:ef:2f:39: 7f:60:cc:d5:7b:c1:e0:5f:e6:cb:79:fb:3e:fd:2f: fa:5d:e1:96:8f:05:ba:31:31:9b:b8:73:be:27:65: 0f:d7:5a:aa:07:a7:b6:75:c7:90:37:a6:e8:de:b9: da:68:a0:c7:1b:9f:1a:18:30:6e:79:32:b3:b2:fe: 74:8e:cf:b6:b4:d3:3b:df:5c:48:fb:df:80:83:97: b0:9d:c1:0e:81:b3:be:9f:58:4c:45:99:39:76:c2: f0:f5:25:c8:a7:fc:74:0f:6b:bb:9b:fd:88:5b:ef: bd:76:e5:7e:a6:92:9d:5b:43:1b:c6:44:60:ea:4a: 29:ef:9b:c6:d8:f5:02:4d:59:89:45:27:98:14:5b: c7:0d:f7:da:b2:ea:79:7b:7c:b4:4f:95:e1:ae:08: 3d:c6:7d:87:7c:0a:f0:67:dc:9f:63:0f:ce:d3:41: 54:b1:90:71:4f:6f:6a:ff:3d:7c:a0:5b:e1:e5:1e: 1a:c9:cd:67:ff:96:ac:e2:b9:1c:e8:1c:ad:fb:65: 63:40:a9:a2:6b:9a:44:a3:b3:c3:ca:de:88:a3:40: 4d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:27:B6:6C:87:71:15:AB:E6:26:D6:0F:0D:82:D7:84:02:99:81:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89c763ab-13dd-3b24-8c22-2a785ba3be64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:55:b9:11:1d:9f:10:45:01:c0:86:64:bf:2e:a5:37:03:38: 17:08:f8:53:d1:e9:0e:f7:d1:b0:50:f2:8f:9c:63:cd:77:d7: a2:bd:62:7d:82:42:5b:05:5f:52:42:60:97:f6:7f:8b:f2:1e: b5:9f:4e:66:4b:cd:42:6e:b3:08:57:76:8c:36:e1:6e:20:5a: ec:32:c8:65:22:86:d6:20:66:f3:d9:ce:bd:f1:94:6e:09:70: 5e:38:10:c7:5d:41:73:15:1a:e2:66:e6:88:77:a2:04:9d:17: fc:90:e9:52:f8:15:ed:40:07:bb:26:e0:c5:69:94:75:93:50: 8c:09:57:63:a7:3c:25:86:67:d1:8a:50:11:ee:31:80:f1:73: 5c:32:e8:23:cb:94:0d:9e:37:a2:53:d7:71:5a:e6:f6:1e:5c: c5:d5:97:e8:59:bc:eb:87:4a:b3:2f:0e:55:ba:f6:14:0e:d8: 88:5a:b7:85:91:7c:6c:4c:36:54:a5:84:a7:5a:b8:3a:7a:3c: 1f:fc:1a:58:2b:9d:88:45:c7:ed:98:7c:fb:b3:5b:44:f8:7f: e7:47:8b:16:94:50:8d:7d:f9:26:e2:95:5e:ee:f5:26:e8:ab: 9d:7d:6b:5d:cf:f2:07:8b:32:f6:42:60:7c:e3:1b:e4:f1:99: 49:42:c5:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn2Tmyp91ScTWm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk ZjdkYWVhYTktNGUxMi00NGY5LWI1ZjUtNGY1Y2E1MDRmYTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIZZubDKmEL/5fcLi3UKAxXnP8bEB0uKQqhK G2gKLYtcFaYRr8mO0yfvLzl/YMzVe8HgX+bLefs+/S/6XeGWjwW6MTGbuHO+J2UP 11qqB6e2dceQN6bo3rnaaKDHG58aGDBueTKzsv50js+2tNM731xI+9+Ag5ewncEO gbO+n1hMRZk5dsLw9SXIp/x0D2u7m/2IW++9duV+ppKdW0MbxkRg6kop75vG2PUC TVmJRSeYFFvHDffasup5e3y0T5Xhrgg9xn2HfArwZ9yfYw/O00FUsZBxT29q/z18 oFvh5R4ayc1n/5as4rkc6Byt+2VjQKmia5pEo7PDyt6Io0BNZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkntmyHcRWr5ibWDw2C14QCmYGnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODljNzYzYWItMTNkZC0z YjI0LThjMjItMmE3ODViYTNiZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlVuREdnxBFAcCGZL8upTcDOBcI+FPR6Q730bBQ8o+cY81316K9Yn2C QlsFX1JCYJf2f4vyHrWfTmZLzUJuswhXdow24W4gWuwyyGUihtYgZvPZzr3xlG4J cF44EMddQXMVGuJm5oh3ogSdF/yQ6VL4Fe1AB7sm4MVplHWTUIwJV2OnPCWGZ9GK UBHuMYDxc1wy6CPLlA2eN6JT13Fa5vYeXMXVl+hZvOuHSrMvDlW69hQO2Ihat4WR fGxMNlSlhKdauDp6PB/8GlgrnYhFx+2YfPuzW0T4f+dHixaUUI19+SbilV7u9Sbo q519a13P8geLMvZCYHzjG+TxmUlCxQk= -----END CERTIFICATE-----Generated at Sat May 10 10:16:56 2025 by rpki-client