$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a11dca3-51d2-35cb-b5fd-714374f39f9e.roa File: 1a11dca3-51d2-35cb-b5fd-714374f39f9e.roa (raw, json) Hash identifier: dI+q9yAsKvtXzUyGpt+sohVNmQouKqa4dl/V2G26w6A= Subject key identifier: 26:57:2E:2B:E0:ED:7A:D1:58:70:4E:08:20:6B:59:07:C9:8C:6A:2B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A8EEC878EAE611DA632020280 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a11dca3-51d2-35cb-b5fd-714374f39f9e.roa Signing time: Fri 18 Jul 2025 10:22:08 +0000 ROA not before: Fri 18 Jul 2025 10:22:08 +0000 ROA not after: Thu 16 Oct 2025 10:22:08 +0000 asID: 55154 IP address blocks: 172.111.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8e:ec:87:8e:ae:61:1d:a6:32:02:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 18 10:22:08 2025 GMT Not After : Oct 16 10:22:08 2025 GMT Subject: CN=a60ce9d5-3dc8-43e0-9974-467afe48f31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:24:99:ff:3c:63:3e:60:18:67:b2:c6:42:83: e9:79:9c:b1:7a:c3:9c:88:a9:29:9e:f6:7a:e8:d1: db:8a:f3:f4:11:e1:5b:a9:41:86:23:8a:ed:ff:7d: 62:bf:0a:5b:79:0e:fc:2f:97:22:94:2c:29:6d:86: 6b:2f:91:29:4d:4f:2b:da:d6:b2:54:c7:2e:1e:e9: af:17:82:9d:26:6f:7c:94:53:39:5d:6d:60:82:00: 4a:64:80:e0:e9:87:c9:fd:cb:27:f3:c0:5f:59:7e: 0d:c8:e1:3e:15:28:80:90:d2:2f:03:b1:0a:b9:aa: 10:df:72:f9:9a:6b:83:5b:ac:59:3c:b3:42:56:15: 37:f7:02:7d:bd:40:11:65:89:da:3a:c6:b3:48:3e: f0:95:e5:b3:38:ef:4b:74:c6:ca:0c:e4:83:4f:27: 04:7c:c1:fb:c1:f0:03:65:67:7b:d6:1e:e4:07:af: 0d:25:78:76:62:06:7b:20:ae:66:d4:66:88:0f:72: fc:29:d1:f6:d9:0a:7f:6b:e4:e4:56:ae:82:1d:e9: 9d:52:9b:63:ef:56:bb:ae:90:e4:54:3b:ec:d0:be: 0a:01:83:55:20:b9:4d:14:3a:97:c6:88:76:45:0c: 2a:89:fd:85:a5:31:ef:09:e0:6c:a9:40:73:5a:98: 29:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:57:2E:2B:E0:ED:7A:D1:58:70:4E:08:20:6B:59:07:C9:8C:6A:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a11dca3-51d2-35cb-b5fd-714374f39f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:27:48:41:bc:a6:d8:6c:c4:8d:8e:de:0d:ce:5a:c7:a0:28: bf:ae:50:f7:50:42:cf:2a:f3:df:03:84:e2:3f:bb:32:c6:22: a3:a3:08:f2:2d:cf:ae:6b:03:26:34:af:cc:ff:4f:17:09:cd: 9c:24:ca:dc:57:4c:25:98:80:81:91:6c:28:fd:d3:1f:dc:3a: a8:dc:dd:28:4c:e2:b3:15:75:15:01:95:fd:c4:e4:2b:32:ce: 7f:1c:f3:2a:32:43:a8:c8:84:60:05:87:e4:d0:08:8c:fb:02: 8a:01:5b:97:d4:70:90:d4:8d:7a:79:52:93:ce:48:e2:05:e2: a5:a1:08:ed:41:7f:8f:7b:f1:df:58:37:97:34:63:e6:c1:62: 46:32:bf:ca:26:c0:94:00:a8:dd:42:45:79:b6:bc:28:2d:8f: ef:58:57:bc:26:c8:6a:d1:a7:23:89:a5:24:67:48:a4:d1:fb: ad:97:0b:7c:da:3d:0c:92:dd:42:bc:ce:d8:f2:9d:0f:33:d7: 05:02:78:e6:43:3c:ad:6a:1d:d6:0a:69:5e:a8:1f:a9:e3:e2: 47:d9:88:23:12:08:f5:2f:d0:82:27:ea:f7:0e:a6:63:94:0c: 22:4a:98:b5:c8:76:78:4f:12:00:07:1b:f5:c2:c8:5f:7d:21: db:bd:02:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqO7IeOrmEdpjICAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxODEwMjIwOFoXDTI1MTAxNjEwMjIwOFowLzEtMCsGA1UEAxMk YTYwY2U5ZDUtM2RjOC00M2UwLTk5NzQtNDY3YWZlNDhmMzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CSZ/zxjPmAYZ7LGQoPpeZyxesOciKkpnvZ6 6NHbivP0EeFbqUGGI4rt/31ivwpbeQ78L5cilCwpbYZrL5EpTU8r2tayVMcuHumv F4KdJm98lFM5XW1gggBKZIDg6YfJ/csn88BfWX4NyOE+FSiAkNIvA7EKuaoQ33L5 mmuDW6xZPLNCVhU39wJ9vUARZYnaOsazSD7wleWzOO9LdMbKDOSDTycEfMH7wfAD ZWd71h7kB68NJXh2YgZ7IK5m1GaID3L8KdH22Qp/a+TkVq6CHemdUptj71a7rpDk VDvs0L4KAYNVILlNFDqXxoh2RQwqif2FpTHvCeBsqUBzWpgp1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZXLivg7XrRWHBOCCBrWQfJjGorMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWExMWRjYTMtNTFkMi0z NWNiLWI1ZmQtNzE0Mzc0ZjM5ZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUnSEG8pthsxI2O3g3OWsegKL+uUPdQQs8q898DhOI/uzLGIqOjCPIt z65rAyY0r8z/TxcJzZwkytxXTCWYgIGRbCj90x/cOqjc3ShM4rMVdRUBlf3E5Csy zn8c8yoyQ6jIhGAFh+TQCIz7AooBW5fUcJDUjXp5UpPOSOIF4qWhCO1Bf4978d9Y N5c0Y+bBYkYyv8omwJQAqN1CRXm2vCgtj+9YV7wmyGrRpyOJpSRnSKTR+62XC3za PQyS3UK8ztjynQ8z1wUCeOZDPK1qHdYKaV6oH6nj4kfZiCMSCPUv0IIn6vcOpmOU DCJKmLXIdnhPEgAHG/XCyF99Idu9AtU= -----END CERTIFICATE-----Generated at Sun Jul 20 06:12:32 2025 by rpki-client