$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0eaff69e-51ef-3ab2-a0de-bf6635cb0b36.roa File: 0eaff69e-51ef-3ab2-a0de-bf6635cb0b36.roa (raw, json) Hash identifier: DGjhavhQEDV7c4TYLaAcnTa7BSA/ft69wepRFSQY1u0= Subject key identifier: F3:9C:D0:D9:F0:1B:49:FF:14:9A:2D:26:65:69:97:25:80:06:D7:E1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A89A61F7BDBF0215F96ACCE00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0eaff69e-51ef-3ab2-a0de-bf6635cb0b36.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 14618 IP address blocks: 172.111.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:1f:7b:db:f0:21:5f:96:ac:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=f592b398-f8aa-44ea-a903-107d4357be8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:59:67:3b:b6:68:06:6b:ce:8e:24:38:56:1c: 58:8f:8e:e6:36:81:5f:b9:56:94:0a:58:e9:da:14: 2d:04:6a:f5:ef:6d:8a:51:3a:b4:d5:77:87:69:81: 85:9f:25:73:c6:f8:a3:aa:05:f1:21:df:71:ed:f5: 5b:98:3d:30:05:92:07:29:73:80:75:5e:23:a4:1b: 25:c7:ef:aa:7a:64:86:3a:b9:91:39:09:65:0c:dc: ba:4a:bd:4a:eb:96:b6:83:93:c7:c0:ac:62:5f:f9: af:3d:91:89:17:76:81:95:b0:54:94:d0:0d:6f:83: b7:ad:78:3d:d9:ca:a3:16:b6:95:72:b6:df:e4:e2: 93:4d:71:5e:0e:85:fd:70:e6:05:07:80:8a:d4:a2: 08:b9:28:18:67:fa:59:ee:63:b4:93:97:e0:26:24: ba:88:ec:4a:15:c8:72:37:0e:c1:a6:44:59:72:5d: 35:02:15:d9:d4:05:9e:bb:be:97:63:0c:c6:6d:61: 32:1d:d8:90:60:df:70:56:c0:ca:9f:25:99:32:0b: 3d:6b:c4:22:d3:ba:88:aa:89:28:e2:13:38:fe:b0: 1d:bd:e4:81:bb:1d:a8:59:46:eb:9c:45:38:85:4c: 8d:75:9a:1e:12:a1:ee:02:c3:f8:6e:bc:7f:35:03: a3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9C:D0:D9:F0:1B:49:FF:14:9A:2D:26:65:69:97:25:80:06:D7:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0eaff69e-51ef-3ab2-a0de-bf6635cb0b36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ee:3f:e0:5f:4a:db:0e:ba:c1:d4:0e:bd:d6:96:b5:31:27: 96:6f:4e:35:0f:2a:f1:93:da:2a:cd:87:d0:06:ae:cb:1c:5b: a9:bd:69:24:e4:8c:76:22:b4:d5:83:7c:f6:34:88:1b:da:77: 8c:44:f3:46:9e:60:b3:c1:c1:71:61:b2:f4:84:61:5a:7e:64: 6f:11:0f:3a:fd:dd:d9:05:61:ab:bf:8a:14:04:82:f2:f3:e9: 27:4e:41:86:5d:01:e1:d5:7b:3b:c3:12:47:69:83:e7:9e:f9: 5e:13:ce:54:dc:09:5a:b2:69:a9:e3:7c:6f:2f:7d:b7:61:fc: 55:f3:46:da:3a:e5:34:74:53:61:a1:ee:b8:c2:33:d9:fc:dc: 9f:20:00:45:c7:80:e4:71:13:07:32:ff:fd:1e:16:1a:1c:f1: 12:dc:af:68:c5:22:0c:13:1b:0b:ff:a0:78:b1:c1:10:99:ae: 5a:72:a7:fa:40:12:56:5a:d0:86:5b:05:4f:f1:d1:9d:05:f0: 15:62:3b:ca:96:50:73:d0:8b:6c:bc:39:19:b0:41:55:7d:cb: 3c:c0:66:88:8d:87:97:2a:46:94:ae:aa:4f:5c:da:05:df:1d: 73:77:14:34:35:1a:43:2e:3b:20:15:81:73:33:6d:10:0c:10: 79:86:1d:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJph972/AhX5aszgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk ZjU5MmIzOTgtZjhhYS00NGVhLWE5MDMtMTA3ZDQzNTdiZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqllnO7ZoBmvOjiQ4VhxYj47mNoFfuVaUCljp 2hQtBGr1722KUTq01XeHaYGFnyVzxvijqgXxId9x7fVbmD0wBZIHKXOAdV4jpBsl x++qemSGOrmROQllDNy6Sr1K65a2g5PHwKxiX/mvPZGJF3aBlbBUlNANb4O3rXg9 2cqjFraVcrbf5OKTTXFeDoX9cOYFB4CK1KIIuSgYZ/pZ7mO0k5fgJiS6iOxKFchy Nw7BpkRZcl01AhXZ1AWeu76XYwzGbWEyHdiQYN9wVsDKnyWZMgs9a8Qi07qIqoko 4hM4/rAdveSBux2oWUbrnEU4hUyNdZoeEqHuAsP4brx/NQOjywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOc0NnwG0n/FJotJmVplyWABtfhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGVhZmY2OWUtNTFlZi0z YWIyLWEwZGUtYmY2NjM1Y2IwYjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjuP+BfStsOusHUDr3WlrUxJ5ZvTjUPKvGT2irNh9AGrsscW6m9aSTk jHYitNWDfPY0iBvad4xE80aeYLPBwXFhsvSEYVp+ZG8RDzr93dkFYau/ihQEgvLz 6SdOQYZdAeHVezvDEkdpg+ee+V4TzlTcCVqyaanjfG8vfbdh/FXzRto65TR0U2Gh 7rjCM9n83J8gAEXHgORxEwcy//0eFhoc8RLcr2jFIgwTGwv/oHixwRCZrlpyp/pA ElZa0IZbBU/x0Z0F8BViO8qWUHPQi2y8ORmwQVV9yzzAZoiNh5cqRpSuqk9c2gXf HXN3FDQ1GkMuOyAVgXMzbRAMEHmGHVE= -----END CERTIFICATE-----Generated at Tue Jul 22 11:51:09 2025 by rpki-client