$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/48afdee3-6323-3856-b569-6a0bad0efb94.roa File: 48afdee3-6323-3856-b569-6a0bad0efb94.roa (raw, json) Hash identifier: qeL1jaiJ+qBdeGFdHhFNzkeq86SZgEhq/2wnBVii7sk= Subject key identifier: 6E:37:C3:0B:C6:71:A5:2A:E8:57:02:C7:23:54:B7:30:41:FE:D5:19 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A89A61EF9BACA9CB24F7F5B00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/48afdee3-6323-3856-b569-6a0bad0efb94.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 16509 IP address blocks: 172.111.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:1e:f9:ba:ca:9c:b2:4f:7f:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=68ef8d18-b9a1-4684-aa8a-2517d885dbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2c:14:50:7f:5f:e6:c0:22:44:ce:ac:df:de: 2e:bd:04:ce:bb:c4:2a:b2:94:5c:d0:bf:e1:99:eb: e8:dc:a8:e3:60:64:87:85:e5:e1:cf:7a:24:08:92: 3d:7c:91:ba:d6:6c:b2:6a:58:eb:68:08:61:6d:c4: 2c:c0:58:f6:92:35:0e:04:7b:0c:ff:00:fd:8f:85: 8a:15:1b:9c:6e:08:c0:4c:11:2d:9c:6b:b0:17:ce: a7:98:3a:56:25:53:00:7c:2d:26:3b:1e:ed:50:2d: fb:0a:ef:42:b7:c9:62:e7:b0:34:14:92:7a:f6:44: 33:d9:db:bb:cb:bf:ab:61:8c:9a:6b:07:c3:c8:98: 05:7e:22:72:9b:90:99:64:88:86:86:cf:c0:ab:8a: 1d:a9:36:c3:33:68:43:19:8a:36:bf:20:e0:5b:2f: 3c:8d:f9:45:f9:63:fd:00:b9:d1:b9:bf:45:87:17: d7:2e:8f:74:6d:cb:36:59:37:15:9c:db:ad:36:bd: e1:ed:72:e7:21:d3:14:b3:fe:45:81:93:53:42:b6: b7:d1:eb:54:63:1d:e7:43:ac:b3:29:e1:e3:87:82: d4:ea:4b:c5:e6:3a:49:9d:7d:b8:da:5f:2d:f3:c2: 84:5c:1f:63:05:5a:cd:d9:13:99:00:1c:85:c5:f0: c8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:37:C3:0B:C6:71:A5:2A:E8:57:02:C7:23:54:B7:30:41:FE:D5:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/48afdee3-6323-3856-b569-6a0bad0efb94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:3e:14:07:08:e9:b9:c5:d6:0b:cd:ec:87:51:bc:fc:eb:ee: 2f:18:a6:5c:67:1a:84:d2:de:be:91:8f:7f:c2:fa:00:9f:96: c4:46:02:32:c1:a3:46:88:22:7a:b9:fe:e2:25:a5:bd:74:f1: bc:be:85:de:3c:09:02:12:5c:e7:0f:1f:35:f7:34:85:c9:e8: ff:7d:3f:3c:5e:50:99:a9:fb:86:d7:56:9f:62:5b:5b:c4:fe: 56:ab:0d:a3:61:1c:49:88:50:db:fe:b1:b7:1a:77:ee:bf:44: 87:ff:3c:fe:53:a8:9d:11:dd:b1:20:a2:ba:e2:05:f5:cb:d5: 74:ce:34:cf:a0:b1:f4:d6:70:05:6b:88:05:ca:3d:8d:23:b1: 72:dd:a9:58:16:78:ef:bc:0a:4c:46:ce:c2:97:1c:e2:bb:a7: 54:a4:2f:b2:49:36:05:b1:f9:6b:9d:86:fa:55:46:ce:1c:83: 56:7f:ba:5d:e3:16:c9:8c:26:83:6a:13:b0:7f:c6:77:85:bc: be:03:c6:5e:c3:c0:5b:71:32:03:00:75:42:f2:0b:b3:ea:f0: 29:1f:56:c8:67:16:42:dc:d3:e9:61:33:06:bb:da:c1:f4:ab: 14:29:43:bd:f7:67:fb:26:e3:a6:da:14:33:3a:32:0d:51:6b: 01:2d:86:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJph75usqcsk9/WwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk NjhlZjhkMTgtYjlhMS00Njg0LWFhOGEtMjUxN2Q4ODVkYmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSwUUH9f5sAiRM6s394uvQTOu8QqspRc0L/h mevo3KjjYGSHheXhz3okCJI9fJG61myyaljraAhhbcQswFj2kjUOBHsM/wD9j4WK FRucbgjATBEtnGuwF86nmDpWJVMAfC0mOx7tUC37Cu9Ct8li57A0FJJ69kQz2du7 y7+rYYyaawfDyJgFfiJym5CZZIiGhs/Aq4odqTbDM2hDGYo2vyDgWy88jflF+WP9 ALnRub9FhxfXLo90bcs2WTcVnNutNr3h7XLnIdMUs/5FgZNTQra30etUYx3nQ6yz KeHjh4LU6kvF5jpJnX242l8t88KEXB9jBVrN2ROZAByFxfDIZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG43wwvGcaUq6FcCxyNUtzBB/tUZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDhhZmRlZTMtNjMyMy0z ODU2LWI1NjktNmEwYmFkMGVmYjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs+FAcI6bnF1gvN7IdRvPzr7i8YplxnGoTS3r6Rj3/C+gCflsRGAjLB o0aIInq5/uIlpb108by+hd48CQISXOcPHzX3NIXJ6P99PzxeUJmp+4bXVp9iW1vE /larDaNhHEmIUNv+sbcad+6/RIf/PP5TqJ0R3bEgorriBfXL1XTONM+gsfTWcAVr iAXKPY0jsXLdqVgWeO+8CkxGzsKXHOK7p1SkL7JJNgWx+WudhvpVRs4cg1Z/ul3j FsmMJoNqE7B/xneFvL4Dxl7DwFtxMgMAdULyC7Pq8CkfVshnFkLc0+lhMwa72sH0 qxQpQ733Z/sm46baFDM6Mg1RawEthnk= -----END CERTIFICATE-----Generated at Tue Jul 22 11:56:41 2025 by rpki-client