$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b604490b-74cd-3e5b-931b-76222655763c.roa File: b604490b-74cd-3e5b-931b-76222655763c.roa (raw, json) Hash identifier: 5Qkn3phYQz3UZRwRw2sLkSzb+XGo+t0ra+0OAMGFvKs= Subject key identifier: 2D:B4:88:B2:BD:E6:DB:E8:E4:F9:75:86:B9:12:43:69:6A:78:65:7C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849AA4F70E65EEA03A1D3BAF880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b604490b-74cd-3e5b-931b-76222655763c.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 172.111.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:70:e6:5e:ea:03:a1:d3:ba:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=d3b45afa-f468-4ecf-a82d-97abd2cdd5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:41:b2:20:6e:88:3a:a4:e8:36:ab:c1:ac:dc: 23:a7:b0:ef:7b:82:ab:44:fd:b1:08:71:0f:17:cb: 16:c4:c1:5c:b0:12:f7:eb:7b:91:d6:51:44:49:d5: 43:d5:fb:33:ed:bc:6f:4a:bf:bc:0d:cf:92:f2:24: c0:b9:c1:31:7b:c1:22:7d:71:c0:ed:dc:d9:35:a9: bb:73:8f:45:ca:ad:d1:bc:66:b7:58:41:50:3f:0e: 62:d1:ef:27:ce:4e:09:49:f4:78:3b:98:21:e4:74: 61:ce:6f:a1:21:2e:8f:09:42:95:8b:b3:71:c6:26: 99:b8:23:e8:e4:49:73:12:a1:cf:43:6f:e3:9e:d2: c5:b2:60:e8:b1:16:87:94:c3:20:9a:fe:33:d5:51: cb:40:51:15:2a:c6:a1:c8:a7:99:e6:d5:f2:44:2b: 9e:eb:d1:e2:5f:fc:cf:7d:60:7a:3e:68:c0:f4:06: 99:89:30:bc:a9:27:53:eb:d5:9e:47:85:79:0c:42: 49:12:87:42:b1:b1:29:93:3c:93:6b:1f:a8:8a:78: b0:76:a6:5a:4b:1e:26:6c:d3:1c:f2:32:0f:a0:96: cf:74:2c:68:06:2b:32:ba:49:22:21:49:fe:48:a5: 8c:70:02:2a:78:3a:74:a6:29:85:18:07:d2:f5:f5: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B4:88:B2:BD:E6:DB:E8:E4:F9:75:86:B9:12:43:69:6A:78:65:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b604490b-74cd-3e5b-931b-76222655763c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:65:92:05:01:64:e2:09:ec:23:bb:ca:d0:bd:a8:a0:82:db: 65:19:fb:84:69:db:a4:ae:3a:3b:b7:ff:6a:86:08:1f:36:8d: 5e:5b:0b:25:3b:21:1a:27:b2:9a:41:2d:b6:2a:a4:b2:a8:71: 47:a1:73:81:86:33:b9:69:1a:b4:4d:32:34:47:92:44:2f:d3: 84:ae:95:84:cc:1f:04:db:c8:a5:35:1d:e6:ca:7c:5d:2a:84: 5e:dd:50:ca:01:3b:d3:a7:27:cb:94:9d:ec:be:af:78:13:32: b2:03:9d:24:9e:83:a3:d3:62:26:0d:74:e9:df:09:a6:de:dd: 74:f2:d9:b9:ba:36:9c:70:ea:79:48:05:24:93:b1:d6:dc:66: 7a:a1:5c:c9:4b:c1:e3:fd:83:48:a7:bc:a5:8c:f5:67:95:8c: 0e:7c:48:f0:28:a0:2f:46:67:ad:2c:ce:17:09:65:40:6d:8c: 04:e6:f7:cd:4e:05:cb:49:74:de:ca:9e:0a:2a:c0:cc:0c:d4: 4b:57:cd:ac:a4:3d:29:5e:87:65:47:2c:36:36:61:43:19:8d: 32:32:62:5a:8c:b0:a8:04:fe:a4:03:87:cb:31:67:52:e4:cf: 46:c3:94:8b:4c:80:9a:71:b1:cb:a5:26:c8:29:0b:e2:a2:fc: c1:f4:42:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3DmXuoDodO6+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk ZDNiNDVhZmEtZjQ2OC00ZWNmLWE4MmQtOTdhYmQyY2RkNWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEGyIG6IOqToNqvBrNwjp7Dve4KrRP2xCHEP F8sWxMFcsBL363uR1lFESdVD1fsz7bxvSr+8Dc+S8iTAucExe8EifXHA7dzZNam7 c49Fyq3RvGa3WEFQPw5i0e8nzk4JSfR4O5gh5HRhzm+hIS6PCUKVi7NxxiaZuCPo 5ElzEqHPQ2/jntLFsmDosRaHlMMgmv4z1VHLQFEVKsahyKeZ5tXyRCue69HiX/zP fWB6PmjA9AaZiTC8qSdT69WeR4V5DEJJEodCsbEpkzyTax+oiniwdqZaSx4mbNMc 8jIPoJbPdCxoBisyukkiIUn+SKWMcAIqeDp0pimFGAfS9fV/+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC20iLK95tvo5Pl1hrkSQ2lqeGV8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjYwNDQ5MGItNzRjZC0z ZTViLTkzMWItNzYyMjI2NTU3NjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZlkgUBZOIJ7CO7ytC9qKCC22UZ+4Rp26SuOju3/2qGCB82jV5bCyU7 IRonsppBLbYqpLKocUehc4GGM7lpGrRNMjRHkkQv04SulYTMHwTbyKU1HebKfF0q hF7dUMoBO9OnJ8uUney+r3gTMrIDnSSeg6PTYiYNdOnfCabe3XTy2bm6Npxw6nlI BSSTsdbcZnqhXMlLweP9g0invKWM9WeVjA58SPAooC9GZ60szhcJZUBtjATm981O BctJdN7KngoqwMwM1EtXzaykPSleh2VHLDY2YUMZjTIyYlqMsKgE/qQDh8sxZ1Lk z0bDlItMgJpxsculJsgpC+Ki/MH0Qn8= -----END CERTIFICATE-----Generated at Sat May 10 19:08:58 2025 by rpki-client