$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02c9137a-3faa-3dcd-b5df-4f1573dd5a0d.roa File: 02c9137a-3faa-3dcd-b5df-4f1573dd5a0d.roa (raw, json) Hash identifier: WK3y+6DEXyAWxqdvpd8S403tT3WokT05QYYvLEn2vZo= Subject key identifier: 05:62:5A:1C:B5:DA:B9:14:80:73:B1:05:AF:48:44:6C:F2:3C:18:E2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A89A61FADB4A5B66C0ED34F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02c9137a-3faa-3dcd-b5df-4f1573dd5a0d.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 16509 IP address blocks: 172.111.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:1f:ad:b4:a5:b6:6c:0e:d3:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=64e189bc-512f-4720-961d-32790640e4a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ff:77:54:60:d5:b2:b2:bb:c1:28:22:3b:ac: d0:04:94:e2:9a:36:e8:e8:c7:9d:49:43:b2:8a:ab: b6:62:6d:36:e0:ef:77:5e:03:57:81:74:15:cb:01: 85:34:31:92:9e:46:42:49:54:1d:83:30:3b:2a:7a: 73:c2:70:14:e6:a6:61:90:1f:18:5a:96:b2:93:6f: 2c:2e:9a:74:2d:37:6f:fb:72:7d:7c:f2:06:63:71: 61:36:91:a2:d8:85:29:40:48:f4:0d:cd:e5:e5:73: 42:3f:c5:ad:d2:ca:16:4a:b4:08:8e:7a:f3:68:15: 75:4a:33:ed:b8:4a:e4:5a:65:dd:c5:20:4e:3e:24: db:65:9b:87:92:9d:c0:0a:7e:18:15:e7:b9:e6:9d: b4:d8:f6:fc:21:53:4d:7f:83:ac:1f:cd:b4:75:cb: 73:a2:57:af:86:0d:6e:0e:cb:04:02:c0:74:08:97: 41:b1:b1:2c:bf:0c:ab:09:d3:cf:0e:d3:c6:e6:c2: 8f:e3:b4:72:3e:c0:1e:e7:97:83:d2:0f:8d:c7:24: 25:15:25:d9:b2:7f:4c:68:cf:f0:6e:4e:41:42:31: 30:9f:cc:54:c8:f2:e3:35:d7:b6:14:fe:70:49:ce: 03:0d:e7:4c:a1:df:31:71:28:79:d1:dd:13:c1:95: 0f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:62:5A:1C:B5:DA:B9:14:80:73:B1:05:AF:48:44:6C:F2:3C:18:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02c9137a-3faa-3dcd-b5df-4f1573dd5a0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:7c:55:9c:d7:30:57:a7:ef:dc:b8:cf:38:39:e1:be:b2:27: 19:0f:d9:10:e9:7e:5c:2f:49:ec:d1:3e:88:e7:72:5f:93:d4: f1:13:29:fd:58:7e:f9:9c:21:04:5d:9d:ae:5f:b7:9c:ca:78: 98:e0:56:ab:40:fd:a1:bd:1c:72:2d:c2:3a:2e:84:ca:18:a9: 82:35:48:fb:03:ab:ea:0c:9f:6d:6c:06:66:b6:3d:dc:76:68: 7a:19:11:a3:84:74:b3:87:1d:25:37:81:12:f1:e2:6e:9c:e8: b8:9e:ff:16:38:43:47:0b:62:e2:c8:68:d3:70:bf:43:cb:f9: 93:83:8c:e1:ef:ea:d9:08:2d:55:ae:7d:73:5f:22:06:56:b5: ef:24:b2:52:b4:04:4d:0d:2e:38:47:6b:fb:9e:96:e5:fd:34: e7:33:9e:20:b4:82:dd:9d:9e:e2:9e:4c:5c:6c:9b:80:c0:0d: a1:6d:8c:eb:68:70:27:d9:bf:58:e4:b4:be:33:f9:34:d8:11: c4:e1:c4:78:a5:8e:94:fb:40:49:ad:9e:3b:85:86:b5:f9:98: db:22:04:c9:b2:ca:73:2e:66:2a:8f:6c:f8:37:26:1e:50:21: 79:a2:e8:65:b0:ea:2c:3d:43:2b:b2:ed:02:a8:1f:8e:2e:c1: e5:47:0b:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJph+ttKW2bA7TT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk NjRlMTg5YmMtNTEyZi00NzIwLTk2MWQtMzI3OTA2NDBlNGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/93VGDVsrK7wSgiO6zQBJTimjbo6MedSUOy iqu2Ym024O93XgNXgXQVywGFNDGSnkZCSVQdgzA7KnpzwnAU5qZhkB8YWpayk28s Lpp0LTdv+3J9fPIGY3FhNpGi2IUpQEj0Dc3l5XNCP8Wt0soWSrQIjnrzaBV1SjPt uErkWmXdxSBOPiTbZZuHkp3ACn4YFee55p202Pb8IVNNf4OsH820dctzolevhg1u DssEAsB0CJdBsbEsvwyrCdPPDtPG5sKP47RyPsAe55eD0g+NxyQlFSXZsn9MaM/w bk5BQjEwn8xUyPLjNde2FP5wSc4DDedMod8xcSh50d0TwZUPGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAViWhy12rkUgHOxBa9IRGzyPBjiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDJjOTEzN2EtM2ZhYS0z ZGNkLWI1ZGYtNGYxNTczZGQ1YTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEN8VZzXMFen79y4zzg54b6yJxkP2RDpflwvSezRPojncl+T1PETKf1Y fvmcIQRdna5ft5zKeJjgVqtA/aG9HHItwjouhMoYqYI1SPsDq+oMn21sBma2Pdx2 aHoZEaOEdLOHHSU3gRLx4m6c6Lie/xY4Q0cLYuLIaNNwv0PL+ZODjOHv6tkILVWu fXNfIgZWte8kslK0BE0NLjhHa/ueluX9NOczniC0gt2dnuKeTFxsm4DADaFtjOto cCfZv1jktL4z+TTYEcThxHiljpT7QEmtnjuFhrX5mNsiBMmyynMuZiqPbPg3Jh5Q IXmi6GWw6iw9Qyuy7QKoH44uweVHC5E= -----END CERTIFICATE-----Generated at Tue Jul 22 11:51:20 2025 by rpki-client