$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a7c850a7-6057-3aba-a856-158b07a73e10.roa File: a7c850a7-6057-3aba-a856-158b07a73e10.roa (raw, json) Hash identifier: Iz9xYwzC8OFpRYKN7f9fn3l1HSgnCrHPFlOwcNKFjCc= Subject key identifier: 45:CA:5F:70:A4:5C:42:C4:01:44:52:48:76:73:9A:2B:90:BC:16:BE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849AA4F706AC1793ED41ECDFB00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a7c850a7-6057-3aba-a856-158b07a73e10.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 14618 IP address blocks: 172.111.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:70:6a:c1:79:3e:d4:1e:cd:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=27861ea4-d184-4ffd-9db6-bc1a4de32eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a7:1c:9c:ad:88:51:1c:b4:21:3d:26:ff:7c: c7:59:ec:33:2b:15:3b:a2:a9:9f:60:67:17:de:a5: c4:85:f5:17:8d:34:a7:8f:21:fd:c0:85:c7:e0:0c: 10:80:94:34:5a:37:65:da:04:4f:ab:f5:72:73:8b: 91:77:85:8c:0c:12:2a:87:50:61:f3:e9:25:72:f9: 93:7a:e1:b7:d6:3c:62:6d:6a:ef:5f:be:e3:98:ed: e4:29:e8:2f:74:f1:43:7d:e7:c7:e5:8b:c9:b0:04: 2d:e9:74:2f:66:15:b4:d6:59:04:6a:43:d1:5e:30: f3:38:fc:e0:a4:f9:16:0a:ad:b6:91:a7:e8:62:28: 07:a3:e7:14:6a:e1:eb:7c:05:09:88:98:29:6d:64: 19:47:c5:b9:7c:49:32:af:f4:72:57:0d:23:d6:ac: 7d:58:46:b6:4c:d4:b2:83:a5:0a:fc:c4:97:b5:86: ae:c1:48:53:15:f2:ab:bd:94:cd:5b:24:74:62:c8: a0:35:47:68:f4:a4:2a:40:6a:78:52:bc:a2:60:32: cc:bd:76:83:6e:58:bd:a3:27:c5:45:a5:e0:38:98: f4:72:d9:12:03:fe:e5:bc:bf:bc:5d:6d:a9:2f:79: 05:b2:93:e7:27:cf:86:bb:f2:a6:15:21:36:67:c6: 46:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CA:5F:70:A4:5C:42:C4:01:44:52:48:76:73:9A:2B:90:BC:16:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a7c850a7-6057-3aba-a856-158b07a73e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:15:cd:90:4a:b7:75:91:06:7c:2b:ec:05:12:f7:33:c1:7d: 79:01:c3:c1:dc:31:dc:d6:bc:27:79:ba:30:a6:f2:fe:43:7f: 65:aa:d8:cc:5c:f0:4b:36:58:3f:2c:14:48:9e:e0:8d:73:0f: 4e:cc:a2:7f:67:7f:1d:d6:60:b8:90:54:20:21:a2:35:e8:e1: 2a:56:f5:0e:4c:ac:cf:53:32:b3:d1:1f:81:07:a6:bb:bb:0b: f2:e8:d0:64:98:ba:58:e3:fd:f5:4d:78:74:43:03:ad:6f:b9: a5:56:2c:be:8f:c8:00:5c:61:ce:0f:d0:e4:61:6b:cf:e1:4e: 4c:91:4c:4f:5f:35:9c:da:d1:cc:ca:44:9a:a2:6f:48:70:57: 3d:74:4f:7b:7a:a1:c3:35:5c:d1:cf:40:ed:b0:ec:b9:04:03: a1:b9:73:2d:a7:8c:ae:f6:3a:4b:50:e9:29:f1:5d:9e:9d:c8: 6e:55:93:54:18:12:64:97:5a:cc:cc:ce:1c:80:48:48:61:20: 28:49:11:92:7f:34:32:2e:f5:27:6f:2b:9e:22:c5:3c:6e:3c: 69:f7:23:13:22:6f:f5:ff:31:6b:45:34:8f:41:02:5c:68:b3: 50:66:62:13:3b:68:b8:18:a2:ba:ba:c7:29:cd:63:4b:ab:2d: 39:ed:53:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3BqwXk+1B7N+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk Mjc4NjFlYTQtZDE4NC00ZmZkLTlkYjYtYmMxYTRkZTMyZWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaccnK2IURy0IT0m/3zHWewzKxU7oqmfYGcX 3qXEhfUXjTSnjyH9wIXH4AwQgJQ0Wjdl2gRPq/Vyc4uRd4WMDBIqh1Bh8+klcvmT euG31jxibWrvX77jmO3kKegvdPFDfefH5YvJsAQt6XQvZhW01lkEakPRXjDzOPzg pPkWCq22kafoYigHo+cUauHrfAUJiJgpbWQZR8W5fEkyr/RyVw0j1qx9WEa2TNSy g6UK/MSXtYauwUhTFfKrvZTNWyR0YsigNUdo9KQqQGp4UryiYDLMvXaDbli9oyfF RaXgOJj0ctkSA/7lvL+8XW2pL3kFspPnJ8+Gu/KmFSE2Z8ZGgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXKX3CkXELEAURSSHZzmiuQvBa+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTdjODUwYTctNjA1Ny0z YWJhLWE4NTYtMTU4YjA3YTczZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8VzZBKt3WRBnwr7AUS9zPBfXkBw8HcMdzWvCd5ujCm8v5Df2Wq2Mxc 8Es2WD8sFEie4I1zD07Mon9nfx3WYLiQVCAhojXo4SpW9Q5MrM9TMrPRH4EHpru7 C/Lo0GSYuljj/fVNeHRDA61vuaVWLL6PyABcYc4P0ORha8/hTkyRTE9fNZza0czK RJqib0hwVz10T3t6ocM1XNHPQO2w7LkEA6G5cy2njK72OktQ6SnxXZ6dyG5Vk1QY EmSXWszMzhyASEhhIChJEZJ/NDIu9SdvK54ixTxuPGn3IxMib/X/MWtFNI9BAlxo s1BmYhM7aLgYorq6xynNY0urLTntU7g= -----END CERTIFICATE-----Generated at Sat May 10 19:27:28 2025 by rpki-client