$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ff77275-cd8b-34d5-a0d2-6469a112947f.roa File: 4ff77275-cd8b-34d5-a0d2-6469a112947f.roa (raw, json) Hash identifier: Upb0RAvkFsjRsg5ZpE4aHsZibzwlQivQ/mUg7U6RxQw= Subject key identifier: 7D:21:1D:2B:E8:C5:7B:A4:6F:B3:DF:3E:01:EF:CC:A3:33:76:33:72 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A89A61F43779BF7D73DB67900 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ff77275-cd8b-34d5-a0d2-6469a112947f.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 16509 IP address blocks: 172.111.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:1f:43:77:9b:f7:d7:3d:b6:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=fccd2de9-30dd-4a38-9998-92043e545cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f4:8b:51:c6:ed:5a:43:63:90:3e:5a:58:1c: 82:f3:3a:8d:3d:f2:61:6e:ab:18:7e:37:26:b0:44: 2a:c1:50:81:26:ec:bb:48:41:88:19:75:37:d4:c9: 72:8c:4d:49:a5:f2:e7:4a:72:8a:c8:fd:dd:f4:9c: c3:0e:0c:b8:54:88:ca:e5:d8:e6:59:84:ff:66:3b: 79:88:bf:cc:dc:a4:6a:23:ac:3d:55:81:f2:5d:5e: d6:f4:f6:95:31:74:c5:88:a5:ba:98:bf:80:f3:4a: 90:96:00:4a:68:8f:fa:21:39:77:9e:fa:b5:bd:46: 58:ed:e7:b5:d9:d6:3f:c8:fa:86:c9:2a:37:b8:c4: 5a:42:3a:ae:fe:bf:f6:86:0b:9c:97:ff:cc:ba:c0: ac:57:69:26:fd:5b:24:ea:3d:57:39:ed:6f:9b:e4: fd:96:d8:43:11:d5:d3:81:f9:08:6a:98:14:7b:82: 11:08:33:d3:bf:91:3e:0c:a3:d4:76:ba:30:6a:e2: e0:b7:28:94:ef:20:43:ee:25:9c:e1:fd:f9:37:8b: b2:82:b1:04:44:15:c0:8b:31:03:02:75:3f:e8:a9: 7b:3e:1f:57:44:0e:a4:97:bd:f1:d7:82:ed:f2:36: a8:e1:5b:7d:53:7f:f2:57:f8:a4:c4:5c:09:f4:91: 8d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:21:1D:2B:E8:C5:7B:A4:6F:B3:DF:3E:01:EF:CC:A3:33:76:33:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ff77275-cd8b-34d5-a0d2-6469a112947f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:04:a8:2e:e8:58:6c:3b:d5:c8:e6:0f:d4:38:63:6d:ea:64: b3:69:0e:4c:61:4c:9e:ff:95:5d:0d:de:59:ea:53:5b:03:02: ce:bf:8b:a8:60:7f:20:71:7b:7d:6f:85:7d:04:8a:c5:af:78: f6:08:ac:7f:1a:11:d3:18:84:48:c8:ef:79:10:4e:f5:e5:b3: 32:98:ee:69:2a:3b:7c:df:9f:15:02:d4:ad:95:10:97:e6:4e: 72:b8:49:7e:83:ba:98:2f:84:45:30:5e:57:1e:23:4f:b5:9d: 4f:7f:66:a2:8b:c3:11:37:04:57:14:00:60:93:f7:13:f2:12: c1:21:d9:e1:ee:b5:5f:c7:14:95:d1:6f:c4:eb:1a:0e:63:87: 79:d5:25:4e:a4:59:6d:06:c1:b2:ee:0b:6c:5d:48:1a:74:fc: 05:21:0a:6e:9f:72:e6:b1:dd:64:58:01:5a:8e:a9:8d:a9:d4: 5f:52:0c:39:7e:14:c9:80:9d:f1:48:01:3d:a5:a4:f2:e3:a6: d3:03:7c:9e:8f:b1:0a:ed:5d:11:70:86:98:fe:c0:3c:65:80: 1c:58:9c:eb:c8:0d:9f:7a:cb:71:56:87:e9:a1:20:f1:68:f1: a3:ae:aa:19:3b:28:47:01:d4:9c:98:b4:58:42:d5:c9:77:a4: 28:f5:6a:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJph9Dd5v31z22eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk ZmNjZDJkZTktMzBkZC00YTM4LTk5OTgtOTIwNDNlNTQ1Y2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/SLUcbtWkNjkD5aWByC8zqNPfJhbqsYfjcm sEQqwVCBJuy7SEGIGXU31MlyjE1JpfLnSnKKyP3d9JzDDgy4VIjK5djmWYT/Zjt5 iL/M3KRqI6w9VYHyXV7W9PaVMXTFiKW6mL+A80qQlgBKaI/6ITl3nvq1vUZY7ee1 2dY/yPqGySo3uMRaQjqu/r/2hgucl//MusCsV2km/Vsk6j1XOe1vm+T9lthDEdXT gfkIapgUe4IRCDPTv5E+DKPUdrowauLgtyiU7yBD7iWc4f35N4uygrEERBXAizED AnU/6Kl7Ph9XRA6kl73x14Lt8jao4Vt9U3/yV/ikxFwJ9JGN3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0hHSvoxXukb7PfPgHvzKMzdjNyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGZmNzcyNzUtY2Q4Yi0z NGQ1LWEwZDItNjQ2OWExMTI5NDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQEqC7oWGw71cjmD9Q4Y23qZLNpDkxhTJ7/lV0N3lnqU1sDAs6/i6hg fyBxe31vhX0EisWvePYIrH8aEdMYhEjI73kQTvXlszKY7mkqO3zfnxUC1K2VEJfm TnK4SX6DupgvhEUwXlceI0+1nU9/ZqKLwxE3BFcUAGCT9xPyEsEh2eHutV/HFJXR b8TrGg5jh3nVJU6kWW0GwbLuC2xdSBp0/AUhCm6fcuax3WRYAVqOqY2p1F9SDDl+ FMmAnfFIAT2lpPLjptMDfJ6PsQrtXRFwhpj+wDxlgBxYnOvIDZ96y3FWh+mhIPFo 8aOuqhk7KEcB1JyYtFhC1cl3pCj1akU= -----END CERTIFICATE-----Generated at Tue Jul 22 11:54:08 2025 by rpki-client