$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3af00e5a-391a-369b-869b-4c86e7070714.roa File: 3af00e5a-391a-369b-869b-4c86e7070714.roa (raw, json) Hash identifier: ItIqwEKsBykVDqKBXPNOiI4Urx1+aZpZNJpVe/7BQtM= Subject key identifier: 6C:4C:67:E0:E7:01:CA:1C:51:FD:06:6C:08:F1:E5:AD:FA:72:7A:4D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A8EEE2939A03B61FF35554E80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3af00e5a-391a-369b-869b-4c86e7070714.roa Signing time: Fri 18 Jul 2025 10:25:25 +0000 ROA not before: Fri 18 Jul 2025 10:25:25 +0000 ROA not after: Thu 16 Oct 2025 10:25:25 +0000 asID: 55154 IP address blocks: 172.111.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8e:ee:29:39:a0:3b:61:ff:35:55:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 18 10:25:25 2025 GMT Not After : Oct 16 10:25:25 2025 GMT Subject: CN=a28cc2ac-2058-4f59-84e3-a79f18691fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:35:ed:b7:65:d4:b3:0c:61:52:48:33:34:a4: 27:75:3b:02:e6:c6:f2:d7:97:4c:f8:a5:01:8c:b1: b4:41:c0:ea:11:28:03:17:01:b1:0f:7a:1a:f0:94: 4b:91:0f:b4:e8:9b:8a:9e:9d:b2:97:16:6c:a4:21: 7f:17:64:fb:06:e3:7b:4c:a8:28:fc:57:d3:52:ef: aa:57:6f:45:aa:a1:46:ce:84:db:ed:fb:cc:bc:2b: 5f:1c:8b:ec:71:c2:3c:3b:53:f3:5f:30:fd:ba:d7: a8:cd:5a:90:6d:17:d4:9f:11:ff:80:d2:50:94:4a: 9f:47:40:0d:8e:c1:88:c6:f7:37:65:ea:48:19:ee: c8:7d:b7:1a:66:ff:64:ab:63:19:0e:23:11:67:23: 0a:2a:78:5b:f3:4d:d1:83:51:fa:7e:a9:93:0f:55: 35:fb:95:27:b8:11:f9:ae:42:d2:17:8e:c1:f6:72: 8a:59:48:1a:3f:4d:28:5c:de:a3:ff:a8:1d:6d:14: 8f:75:75:d8:4b:21:5c:3d:90:af:f0:22:cc:f6:04: 05:88:54:00:e9:bf:85:9e:37:be:41:d4:5b:c6:ac: 46:a6:50:b0:4c:55:fd:86:46:8c:7e:46:e2:d2:4d: da:d7:d2:b5:51:5d:5b:60:95:76:08:c2:05:4c:60: 2e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4C:67:E0:E7:01:CA:1C:51:FD:06:6C:08:F1:E5:AD:FA:72:7A:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3af00e5a-391a-369b-869b-4c86e7070714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:21:bf:37:82:4e:8b:fe:83:da:75:90:aa:55:48:31:8a:bb: 24:4d:df:ee:29:27:4d:d8:4b:b4:5f:20:b4:db:87:79:bd:9a: 45:fc:b6:7f:6c:a3:15:34:c8:63:da:8c:a1:cb:ce:87:69:86: 19:17:85:11:04:2c:ff:5c:37:a2:54:9d:99:04:40:17:05:9e: 25:0c:8c:2c:a5:66:c5:9a:40:15:bf:22:0c:08:c6:b2:9e:7f: 57:0e:fa:08:6b:19:60:cb:7e:57:0f:01:29:66:63:47:52:9d: 25:0a:23:88:cf:5e:b7:4c:de:9b:e0:f7:04:21:f5:20:a8:9d: 47:cd:e0:3c:81:11:64:4f:54:95:16:0e:67:45:37:9a:9b:95: b8:70:96:b5:b2:98:71:8c:b6:f3:45:ac:d1:fb:db:69:c8:0f: 37:d2:b3:d8:3f:6b:75:73:48:38:61:48:83:e5:c2:fc:d0:88: 13:5d:1b:fa:8f:9c:3e:18:bd:df:03:81:66:d8:b2:ca:a9:ec: 6c:87:63:83:d5:ff:1b:e1:84:b3:60:36:e8:6d:4d:bc:05:64: 2a:90:5a:7a:4a:8e:b8:2b:5f:44:74:09:f1:7a:b8:8b:45:09: ec:78:9c:03:da:cd:2f:53:8c:5c:fd:e4:d1:7c:40:4b:f7:ff: 53:51:a5:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqO7ik5oDth/zVVToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxODEwMjUyNVoXDTI1MTAxNjEwMjUyNVowLzEtMCsGA1UEAxMk YTI4Y2MyYWMtMjA1OC00ZjU5LTg0ZTMtYTc5ZjE4NjkxZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjXtt2XUswxhUkgzNKQndTsC5sby15dM+KUB jLG0QcDqESgDFwGxD3oa8JRLkQ+06JuKnp2ylxZspCF/F2T7BuN7TKgo/FfTUu+q V29FqqFGzoTb7fvMvCtfHIvsccI8O1PzXzD9uteozVqQbRfUnxH/gNJQlEqfR0AN jsGIxvc3ZepIGe7IfbcaZv9kq2MZDiMRZyMKKnhb803Rg1H6fqmTD1U1+5UnuBH5 rkLSF47B9nKKWUgaP00oXN6j/6gdbRSPdXXYSyFcPZCv8CLM9gQFiFQA6b+Fnje+ QdRbxqxGplCwTFX9hkaMfkbi0k3a19K1UV1bYJV2CMIFTGAuNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxMZ+DnAcocUf0GbAjx5a36cnpNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2FmMDBlNWEtMzkxYS0z NjliLTg2OWItNGM4NmU3MDcwNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMhvzeCTov+g9p1kKpVSDGKuyRN3+4pJ03YS7RfILTbh3m9mkX8tn9s oxU0yGPajKHLzodphhkXhREELP9cN6JUnZkEQBcFniUMjCylZsWaQBW/IgwIxrKe f1cO+ghrGWDLflcPASlmY0dSnSUKI4jPXrdM3pvg9wQh9SConUfN4DyBEWRPVJUW DmdFN5qblbhwlrWymHGMtvNFrNH722nIDzfSs9g/a3VzSDhhSIPlwvzQiBNdG/qP nD4Yvd8DgWbYssqp7GyHY4PV/xvhhLNgNuhtTbwFZCqQWnpKjrgrX0R0CfF6uItF Cex4nAPazS9TjFz95NF8QEv3/1NRpV0= -----END CERTIFICATE-----Generated at Sun Jul 20 06:17:25 2025 by rpki-client