$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa File: 901d7078-5ae0-31f8-a837-37437b50a24f.roa (raw, json) Hash identifier: yciP/vLvmV2W840R/qOhkSa1VOQfh8fsv86TLjrf7Xg= Subject key identifier: BE:FD:F3:20:1A:63:01:E3:6A:B1:34:8E:16:70:32:27:EB:C9:A6:E1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849B14A02D2E25C7FDECEF01800 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 3223 IP address blocks: 172.111.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:02:d2:e2:5c:7f:de:ce:f0:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=ad899203-1ddf-4fb6-b2e9-41648a1af9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ee:fe:88:4f:2a:bb:40:48:e2:cf:ba:28:65: 16:72:5c:fa:46:c5:72:ae:df:2c:48:7b:be:56:63: dc:27:21:1b:c7:15:94:48:85:19:2f:fb:b2:4c:e4: 34:89:bf:7a:59:09:38:50:1f:43:fa:89:f9:bb:31: 79:27:89:77:e5:7b:e4:7b:af:02:40:28:85:3c:a0: 72:a4:46:62:3a:e6:a3:36:ca:8a:6a:98:39:5d:9e: 13:36:b8:73:32:ad:ee:c6:ab:b4:26:93:b4:1b:42: ae:f1:91:00:eb:2e:f5:ae:7c:b7:3c:ba:7c:2d:14: 11:0b:0d:67:b4:58:21:ce:4e:b4:25:cf:9c:65:02: ef:7d:ab:9f:0b:6b:33:43:ad:f0:21:e4:6e:76:0f: 36:05:41:45:bc:4c:78:00:78:d8:a4:cb:64:37:92: cc:f7:19:cd:09:1a:57:1a:f4:30:54:ca:44:53:e6: d7:9e:b7:b7:65:4d:13:68:c0:60:0d:2b:71:dd:f8: b0:f6:83:da:b0:93:39:e8:4b:54:75:82:d3:87:1b: 18:d6:52:2e:f4:1a:cd:cd:c4:c0:ce:02:4c:cc:b1: b3:49:ec:4c:78:fd:6a:08:ec:cd:e6:8d:55:ce:0f: 2f:da:0f:b0:00:c1:d9:ca:34:c3:c0:f4:9a:c3:da: 84:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FD:F3:20:1A:63:01:E3:6A:B1:34:8E:16:70:32:27:EB:C9:A6:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:34:fc:44:1d:12:31:49:cc:8f:a6:5d:37:70:b8:63:e5:78: 45:ee:11:e6:e1:85:b2:81:0f:c9:a9:7f:3a:d3:e0:a6:4c:8e: 79:5c:ee:58:2b:11:6b:e6:4b:47:42:1e:3f:c7:8f:29:0e:81: d7:87:f1:e7:63:93:66:87:a2:bd:04:7a:d6:1c:9b:a2:bb:46: e0:0f:7f:51:21:7a:69:f3:cb:74:cf:10:e0:db:b9:ce:7e:56: e1:07:22:6c:2f:35:17:2d:25:6e:e4:79:9d:4c:41:8d:6f:18: 31:8e:ab:0c:bb:9c:74:0c:cd:d3:d3:07:53:da:6b:39:6c:3a: e7:b4:56:51:6b:49:48:77:fa:1e:f5:85:81:2c:f7:a7:b7:10: 37:1c:47:58:2f:cd:bd:33:5a:10:ab:f3:94:3c:ba:71:64:02: 94:d6:75:e0:cf:2e:d2:e9:18:d0:65:2c:5b:28:4d:3b:e3:f5: 6c:a2:d9:5b:d6:e4:1e:b8:12:ca:3a:62:6f:d5:70:23:3a:4e: f5:9c:91:2d:f7:28:9a:22:f7:5b:26:1f:8d:59:a8:6c:d2:7a: e5:de:c6:1e:90:f4:c6:aa:3c:73:a8:e6:6a:15:2f:00:11:a6: c3:34:30:7b:c5:cf:59:8d:7b:d1:8b:43:fd:27:5e:cc:09:08: 12:c2:4f:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSgLS4lx/3s7wGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YWQ4OTkyMDMtMWRkZi00ZmI2LWIyZTktNDE2NDhhMWFmOWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+7+iE8qu0BI4s+6KGUWclz6RsVyrt8sSHu+ VmPcJyEbxxWUSIUZL/uyTOQ0ib96WQk4UB9D+on5uzF5J4l35Xvke68CQCiFPKBy pEZiOuajNsqKapg5XZ4TNrhzMq3uxqu0JpO0G0Ku8ZEA6y71rny3PLp8LRQRCw1n tFghzk60Jc+cZQLvfaufC2szQ63wIeRudg82BUFFvEx4AHjYpMtkN5LM9xnNCRpX GvQwVMpEU+bXnre3ZU0TaMBgDStx3fiw9oPasJM56EtUdYLThxsY1lIu9BrNzcTA zgJMzLGzSexMeP1qCOzN5o1Vzg8v2g+wAMHZyjTDwPSaw9qE2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL798yAaYwHjarE0jhZwMifryabhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTAxZDcwNzgtNWFlMC0z MWY4LWE4MzctMzc0MzdiNTBhMjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHg0/EQdEjFJzI+mXTdwuGPleEXuEebhhbKBD8mpfzrT4KZMjnlc7lgr EWvmS0dCHj/HjykOgdeH8edjk2aHor0EetYcm6K7RuAPf1Ehemnzy3TPEODbuc5+ VuEHImwvNRctJW7keZ1MQY1vGDGOqwy7nHQMzdPTB1PaazlsOue0VlFrSUh3+h71 hYEs96e3EDccR1gvzb0zWhCr85Q8unFkApTWdeDPLtLpGNBlLFsoTTvj9Wyi2VvW 5B64Eso6Ym/VcCM6TvWckS33KJoi91smH41ZqGzSeuXexh6Q9MaqPHOo5moVLwAR psM0MHvFz1mNe9GLQ/0nXswJCBLCTyA= -----END CERTIFICATE-----Generated at Sat May 10 22:16:13 2025 by rpki-client