$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5870b535-7cf0-371f-854f-5ef9eb1089e2.roa File: 5870b535-7cf0-371f-854f-5ef9eb1089e2.roa (raw, json) Hash identifier: xRfrk3UsO3hkpEKisWm/85f1AOz1nUrVYgsyoHVy19o= Subject key identifier: 25:FA:48:9C:02:F0:03:46:2F:DF:50:30:80:A1:3C:92:08:23:58:2B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A8EF04959BAEEDD75FFFD1760 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5870b535-7cf0-371f-854f-5ef9eb1089e2.roa Signing time: Fri 18 Jul 2025 10:29:42 +0000 ROA not before: Fri 18 Jul 2025 10:29:42 +0000 ROA not after: Thu 16 Oct 2025 10:29:42 +0000 asID: 55154 IP address blocks: 172.111.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8e:f0:49:59:ba:ee:dd:75:ff:fd:17:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 18 10:29:42 2025 GMT Not After : Oct 16 10:29:42 2025 GMT Subject: CN=69e4eac6-443f-4809-aab9-55defd3e9a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:11:94:c1:31:a3:fb:73:44:17:e7:d2:69:f2: ee:1e:40:69:51:94:3c:52:86:b3:44:b3:11:31:6e: 82:97:18:cb:ed:82:b5:c5:4c:6e:9c:42:e7:02:b9: b1:2d:ab:5d:dd:83:49:d5:02:30:8e:ff:58:00:b1: b0:58:27:f1:c5:7a:7e:cb:70:8d:58:72:ff:6f:ed: f5:e9:27:dc:38:1e:b8:c4:b1:a0:2d:d3:0e:22:f5: 09:64:e4:ff:15:84:ac:35:5c:37:0b:5a:90:7c:98: e9:3e:7b:b3:cc:76:87:1c:ab:42:19:7c:7e:c6:d2: e4:00:1c:44:18:cf:c4:7b:3a:70:47:77:77:b0:3f: 10:c0:15:39:61:cd:25:2d:35:52:cf:42:bc:83:5b: b6:32:2b:15:a4:a4:84:f0:d6:3f:44:74:d3:25:df: b9:f5:1c:c9:26:f5:ee:74:7f:8f:7e:3e:90:db:45: d1:e3:1e:f2:3b:e9:79:10:6c:19:58:ac:da:87:29: 99:02:47:4d:80:a1:75:45:ea:60:53:38:c4:fd:39: f9:09:7b:fc:19:63:e6:cf:4a:56:9c:96:1a:3b:74: 9a:0f:e0:74:b0:70:b5:fc:be:70:8f:7d:48:74:db: 45:14:f2:8c:fd:f8:09:3c:f4:90:70:19:45:c8:3f: 25:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FA:48:9C:02:F0:03:46:2F:DF:50:30:80:A1:3C:92:08:23:58:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5870b535-7cf0-371f-854f-5ef9eb1089e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:55:64:39:5f:9d:03:15:38:2f:9a:c8:10:e0:60:86:34:b8: 53:3f:58:5d:3e:0a:4b:a7:62:a2:3a:4c:0c:93:10:cc:c1:60: 65:05:b4:b6:0f:e9:30:1f:65:f1:15:07:fc:31:f4:2c:18:34: 2a:52:0e:93:8a:f5:8d:2b:28:a4:93:9a:76:b0:64:f7:f2:aa: 9d:9f:1c:b7:bb:a5:fc:90:95:0d:0a:55:3c:e0:d6:25:99:31: 07:0c:8f:17:31:a9:7c:14:1e:5e:51:a1:fa:78:20:d1:88:8b: e5:d5:89:3f:04:5d:9b:e0:76:7c:9c:8c:b9:0a:ce:2d:90:b7: c2:bf:c5:45:82:39:a9:32:74:e7:41:7a:15:0c:20:12:65:18: c1:58:c3:06:1c:99:a8:19:05:1a:9a:3a:1b:d2:49:72:1c:df: 83:15:b3:76:a5:5b:87:fe:25:24:c9:72:ea:5a:a3:7c:79:c7: 0f:18:1c:a3:73:ab:0b:91:a2:5d:bf:e8:8f:e4:d5:6c:15:f6: fd:8a:fb:79:7b:93:b8:d3:f9:65:87:76:cf:31:21:b2:7c:7a: bf:43:b7:f7:7b:2a:2b:0a:3b:e3:86:16:89:32:6d:36:d0:7a: a8:c5:4c:85:32:97:80:25:13:7e:63:53:03:0c:b6:41:6a:75: a8:8b:43:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqO8ElZuu7ddf/9F2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxODEwMjk0MloXDTI1MTAxNjEwMjk0MlowLzEtMCsGA1UEAxMk NjllNGVhYzYtNDQzZi00ODA5LWFhYjktNTVkZWZkM2U5YTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBGUwTGj+3NEF+fSafLuHkBpUZQ8UoazRLMR MW6ClxjL7YK1xUxunELnArmxLatd3YNJ1QIwjv9YALGwWCfxxXp+y3CNWHL/b+31 6SfcOB64xLGgLdMOIvUJZOT/FYSsNVw3C1qQfJjpPnuzzHaHHKtCGXx+xtLkABxE GM/EezpwR3d3sD8QwBU5Yc0lLTVSz0K8g1u2MisVpKSE8NY/RHTTJd+59RzJJvXu dH+Pfj6Q20XR4x7yO+l5EGwZWKzahymZAkdNgKF1RepgUzjE/Tn5CXv8GWPmz0pW nJYaO3SaD+B0sHC1/L5wj31IdNtFFPKM/fgJPPSQcBlFyD8l+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCX6SJwC8ANGL99QMIChPJIII1grMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTg3MGI1MzUtN2NmMC0z NzFmLTg1NGYtNWVmOWViMTA4OWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhVZDlfnQMVOC+ayBDgYIY0uFM/WF0+CkunYqI6TAyTEMzBYGUFtLYP 6TAfZfEVB/wx9CwYNCpSDpOK9Y0rKKSTmnawZPfyqp2fHLe7pfyQlQ0KVTzg1iWZ MQcMjxcxqXwUHl5Rofp4INGIi+XViT8EXZvgdnycjLkKzi2Qt8K/xUWCOakydOdB ehUMIBJlGMFYwwYcmagZBRqaOhvSSXIc34MVs3alW4f+JSTJcupao3x5xw8YHKNz qwuRol2/6I/k1WwV9v2K+3l7k7jT+WWHds8xIbJ8er9Dt/d7KisKO+OGFokybTbQ eqjFTIUyl4AlE35jUwMMtkFqdaiLQ54= -----END CERTIFICATE-----Generated at Sun Jul 20 06:17:24 2025 by rpki-client