$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d718e811-5d3b-3e92-94a4-9ad6d104b712.roa File: d718e811-5d3b-3e92-94a4-9ad6d104b712.roa (raw, json) Hash identifier: qlmzzX6WyTLwe+WwzlLFnpMNQSSkA67Yjp2Vt4cgsP0= Subject key identifier: E0:E4:B9:E0:73:00:3F:E5:8E:70:DC:F7:55:05:7F:E0:6D:9F:9A:8C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849B2AF62F0F45C80EF7C538CA8 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d718e811-5d3b-3e92-94a4-9ad6d104b712.roa Signing time: Wed 30 Apr 2025 13:01:02 +0000 ROA not before: Wed 30 Apr 2025 13:01:02 +0000 ROA not after: Tue 29 Jul 2025 13:01:02 +0000 asID: 6939 IP address blocks: 172.111.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:af:62:f0:f4:5c:80:ef:7c:53:8c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 30 13:01:02 2025 GMT Not After : Jul 29 13:01:02 2025 GMT Subject: CN=6784b5c6-97b6-4d0c-be24-8ed200710638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ca:14:b2:7a:23:7a:cd:61:c0:96:c3:ec:a6: 28:0f:f1:a8:12:a9:97:48:1a:0d:3d:99:dc:23:ec: 8c:48:d1:4b:41:4a:97:2f:56:96:d5:4b:7e:1d:58: 73:af:72:e3:28:d3:c3:9d:a2:21:a7:83:c4:fb:d8: b6:c0:7b:30:aa:de:56:fa:44:39:fc:66:c1:15:ad: bd:86:cb:90:ad:16:82:5b:89:65:b2:72:67:b6:3e: b3:2b:45:49:81:19:d4:9f:9f:58:7b:3b:f6:db:84: fc:50:3f:d7:be:b0:32:e5:a2:89:fa:06:68:5f:ed: aa:48:1a:03:64:3f:c5:58:27:6b:13:ba:08:99:c4: aa:2e:4e:3a:f4:2e:d1:fa:84:28:b2:74:27:73:18: a4:b2:b7:f0:f2:37:4e:52:39:11:28:0a:04:0f:72: 94:e6:3d:d8:83:9b:78:cb:73:1f:d3:11:53:f6:df: a3:7e:c5:28:61:db:40:d4:8f:54:a7:b7:c6:ff:f8: fe:8d:6e:12:3f:01:48:ba:c1:d2:81:e7:f2:c8:2f: 1a:89:40:a2:8d:b3:9a:e1:3f:20:28:0d:c5:79:41: 8d:5f:a2:ee:9e:89:4f:8b:33:fe:a3:fc:63:ef:92: c3:83:56:6e:45:52:91:34:ce:7c:be:bf:ef:eb:88: 79:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E4:B9:E0:73:00:3F:E5:8E:70:DC:F7:55:05:7F:E0:6D:9F:9A:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d718e811-5d3b-3e92-94a4-9ad6d104b712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a4:52:13:06:6d:76:41:0c:ad:af:c4:d6:4e:71:f5:8c:13: e2:a9:b4:82:8a:41:f6:bb:50:6f:d6:6e:55:5e:b4:0a:47:86: 2f:4b:0a:ce:d9:d5:b9:c7:0a:15:5d:25:bb:8c:86:0e:e5:16: 4e:45:1d:4b:c3:b8:25:5f:a1:13:4e:76:7f:19:d0:4b:c3:0d: 0c:54:f6:19:4c:44:f6:15:c6:c8:6f:3c:64:cc:ed:10:fe:9b: 00:d2:3d:75:50:f1:a2:52:dc:c4:ce:e6:10:50:1a:0d:8b:df: c9:eb:27:1c:e7:f4:a1:41:3d:33:16:e0:30:1e:a7:dc:ff:d7: 8d:08:8e:1c:5c:d2:b2:26:95:37:6d:5e:92:12:57:0b:47:66: a7:2e:38:57:58:65:76:08:f6:c3:ed:55:06:50:2f:4a:95:21: 78:c4:cf:99:43:b3:bf:0b:48:ac:20:ec:f4:5a:9b:f1:d1:8e: fc:46:21:64:ad:fa:9f:09:5a:9a:87:89:a2:ef:c4:1c:ee:56: 2f:60:03:12:45:68:f0:85:7f:94:16:cf:fe:a2:23:73:41:6a: fe:7e:24:4f:30:b0:88:25:6d:ba:34:bd:80:c8:9f:c6:52:20: b3:14:dc:ac:35:a3:ac:45:58:0b:e5:0b:bf:39:78:de:f6:cc: 79:bb:a5:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyr2Lw9FyA73xTjKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk Njc4NGI1YzYtOTdiNi00ZDBjLWJlMjQtOGVkMjAwNzEwNjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMoUsnojes1hwJbD7KYoD/GoEqmXSBoNPZnc I+yMSNFLQUqXL1aW1Ut+HVhzr3LjKNPDnaIhp4PE+9i2wHswqt5W+kQ5/GbBFa29 hsuQrRaCW4llsnJntj6zK0VJgRnUn59Yezv224T8UD/XvrAy5aKJ+gZoX+2qSBoD ZD/FWCdrE7oImcSqLk469C7R+oQosnQncxiksrfw8jdOUjkRKAoED3KU5j3Yg5t4 y3Mf0xFT9t+jfsUoYdtA1I9Up7fG//j+jW4SPwFIusHSgefyyC8aiUCijbOa4T8g KA3FeUGNX6LunolPizP+o/xj75LDg1ZuRVKRNM58vr/v64h58QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODkueBzAD/ljnDc91UFf+Btn5qMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDcxOGU4MTEtNWQzYi0z ZTkyLTk0YTQtOWFkNmQxMDRiNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGkUhMGbXZBDK2vxNZOcfWME+KptIKKQfa7UG/WblVetApHhi9LCs7Z 1bnHChVdJbuMhg7lFk5FHUvDuCVfoRNOdn8Z0EvDDQxU9hlMRPYVxshvPGTM7RD+ mwDSPXVQ8aJS3MTO5hBQGg2L38nrJxzn9KFBPTMW4DAep9z/140Ijhxc0rImlTdt XpISVwtHZqcuOFdYZXYI9sPtVQZQL0qVIXjEz5lDs78LSKwg7PRam/HRjvxGIWSt +p8JWpqHiaLvxBzuVi9gAxJFaPCFf5QWz/6iI3NBav5+JE8wsIglbbo0vYDIn8ZS ILMU3Kw1o6xFWAvlC785eN72zHm7pcE= -----END CERTIFICATE-----Generated at Sat May 10 04:46:59 2025 by rpki-client