$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1432af3c-575c-3899-b5d9-2db4ddbbda9c.roa File: 1432af3c-575c-3899-b5d9-2db4ddbbda9c.roa (raw, json) Hash identifier: TN2llMyxYZ+ATR1quDREDLn3tPaQNtO+Bah9+sBFnTY= Subject key identifier: A2:F5:98:F5:73:DE:53:C8:96:AB:C1:91:55:19:A8:3E:8D:72:0D:10 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A8EEEA266D18E630C8082AE80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1432af3c-575c-3899-b5d9-2db4ddbbda9c.roa Signing time: Fri 18 Jul 2025 10:26:22 +0000 ROA not before: Fri 18 Jul 2025 10:26:22 +0000 ROA not after: Thu 16 Oct 2025 10:26:22 +0000 asID: 55154 IP address blocks: 172.111.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8e:ee:a2:66:d1:8e:63:0c:80:82:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 18 10:26:22 2025 GMT Not After : Oct 16 10:26:22 2025 GMT Subject: CN=ad70167b-74b7-4210-b1dc-ebd7c851fc93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e8:11:d4:d1:52:31:63:41:b6:ae:9c:85:6b: cb:6f:cb:bc:d7:d0:03:fe:d4:28:4a:15:93:c6:22: 34:6d:a1:98:aa:34:f1:31:d2:74:a8:d9:5b:32:d9: 15:7c:b7:3e:b9:db:08:e3:be:5a:c1:62:70:f0:64: f7:1f:51:02:7a:51:dd:0d:73:49:71:37:44:9f:4d: 80:da:25:d2:2a:34:27:60:e1:f7:c5:13:16:0b:43: 15:2d:26:e5:a8:ca:63:70:14:fc:40:b7:f9:5e:a3: c7:21:0d:13:32:fa:16:e8:b2:fd:dd:1f:fa:6e:8d: 8f:72:0e:b1:74:c9:d0:eb:05:8b:1e:fb:4b:10:d7: 94:83:bf:4a:57:0c:fe:82:93:bf:45:f8:11:dd:3c: ed:15:33:d3:81:32:20:c2:65:3a:45:9d:7f:2b:af: 4c:b8:e9:2c:04:e3:4f:52:ec:b6:be:43:61:68:62: ed:9c:34:90:77:d6:0d:95:0d:cc:a5:f4:62:f9:91: 36:e0:6b:67:97:2d:ba:7d:f0:88:aa:db:6d:aa:17: 86:9a:7f:79:ee:61:cb:05:3d:82:3a:46:2a:3c:6a: cf:aa:d8:b4:17:c8:4a:ea:8c:72:1f:18:ae:4f:35: 01:56:5e:af:bf:c0:93:2a:1a:4c:1b:14:93:d4:e9: 1b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F5:98:F5:73:DE:53:C8:96:AB:C1:91:55:19:A8:3E:8D:72:0D:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1432af3c-575c-3899-b5d9-2db4ddbbda9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c4:6b:61:44:ca:31:f9:4b:ec:d7:f2:3e:69:bd:b3:b7:21: 31:3f:40:da:22:17:1b:77:63:58:4e:dc:f3:d3:a4:69:1e:f5: 0c:af:63:98:53:3e:c9:74:0d:60:d1:44:84:bd:e5:a9:23:51: d2:b1:4f:10:d7:f7:ce:e2:92:18:34:6a:c5:70:17:74:ae:fd: 37:a6:eb:16:e4:8a:8f:5a:07:43:a4:9c:24:16:62:93:f1:2e: 2d:d7:fe:fa:ec:b6:80:1e:6f:91:b2:27:5f:b8:07:93:8f:24: 81:49:e8:b4:33:83:73:95:b8:7f:b1:90:77:80:f6:94:1e:93: 01:d1:d9:26:06:54:41:58:5a:f3:26:d3:e8:5f:1a:5c:f6:09: 89:a7:33:b1:0e:9f:ff:e6:e1:b1:4d:aa:cd:ce:90:4a:26:1a: 6d:70:3e:7b:28:68:5f:f0:a4:3c:b0:11:66:b9:b8:ca:6f:02: 68:39:bf:69:cc:e2:89:d6:e4:6a:34:2b:22:58:dc:ca:2d:ff: f1:0f:9a:2f:34:af:3c:5b:9d:c9:e4:33:65:ca:6e:03:d4:f9: de:b7:6a:8c:1e:5a:e7:84:8f:0d:6d:aa:05:c9:a7:9a:b5:f2: 50:ee:0a:bd:7a:af:fe:31:61:36:21:f6:cd:dc:ec:02:f8:fa: 29:37:23:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqO7qJm0Y5jDICCroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxODEwMjYyMloXDTI1MTAxNjEwMjYyMlowLzEtMCsGA1UEAxMk YWQ3MDE2N2ItNzRiNy00MjEwLWIxZGMtZWJkN2M4NTFmYzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+gR1NFSMWNBtq6chWvLb8u819AD/tQoShWT xiI0baGYqjTxMdJ0qNlbMtkVfLc+udsI475awWJw8GT3H1ECelHdDXNJcTdEn02A 2iXSKjQnYOH3xRMWC0MVLSblqMpjcBT8QLf5XqPHIQ0TMvoW6LL93R/6bo2Pcg6x dMnQ6wWLHvtLENeUg79KVwz+gpO/RfgR3TztFTPTgTIgwmU6RZ1/K69MuOksBONP Uuy2vkNhaGLtnDSQd9YNlQ3MpfRi+ZE24Gtnly26ffCIqtttqheGmn957mHLBT2C OkYqPGrPqti0F8hK6oxyHxiuTzUBVl6vv8CTKhpMGxST1OkbNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKL1mPVz3lPIlqvBkVUZqD6Ncg0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTQzMmFmM2MtNTc1Yy0z ODk5LWI1ZDktMmRiNGRkYmJkYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXEa2FEyjH5S+zX8j5pvbO3ITE/QNoiFxt3Y1hO3PPTpGke9QyvY5hT Psl0DWDRRIS95akjUdKxTxDX987ikhg0asVwF3Su/Tem6xbkio9aB0OknCQWYpPx Li3X/vrstoAeb5GyJ1+4B5OPJIFJ6LQzg3OVuH+xkHeA9pQekwHR2SYGVEFYWvMm 0+hfGlz2CYmnM7EOn//m4bFNqs3OkEomGm1wPnsoaF/wpDywEWa5uMpvAmg5v2nM 4onW5Go0KyJY3Mot//EPmi80rzxbncnkM2XKbgPU+d63aoweWueEjw1tqgXJp5q1 8lDuCr16r/4xYTYh9s3c7AL4+ik3I/E= -----END CERTIFICATE-----Generated at Sun Jul 20 06:10:12 2025 by rpki-client