$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5f0338b1-cf07-3c46-b656-9c7140c1396c.roa File: 5f0338b1-cf07-3c46-b656-9c7140c1396c.roa (raw, json) Hash identifier: /ge1wPS3eF+zdYhaNBGHPR1xLWizosPh/IBe/Bsz53M= Subject key identifier: 34:2C:40:71:E1:48:72:FA:09:0C:DD:52:37:C4:F0:3F:F5:7E:64:3D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A5FC5E2F06CDE385B276F6540 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5f0338b1-cf07-3c46-b656-9c7140c1396c.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 206264 IP address blocks: 172.111.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e2:f0:6c:de:38:5b:27:6f:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=48162cec-4f12-40cf-ae50-4f5f8f8045b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:05:44:8a:15:e8:26:c1:f9:66:ca:2d:f1:a1: aa:81:87:c9:57:eb:1e:00:f4:ca:41:d2:d2:8b:3a: 30:91:53:e7:b8:21:1b:85:b5:6c:64:a3:d8:96:36: 3b:13:d8:57:48:f0:62:4e:ed:67:80:59:b1:6c:5c: cd:c5:32:5b:d0:95:ba:30:7a:52:62:6d:ed:79:a2: 64:96:48:5a:31:fe:79:a2:72:09:82:cc:56:47:1c: e3:8c:9e:74:e6:7f:21:3b:80:5d:de:64:71:5d:69: 9d:29:e5:e7:72:21:dc:0a:fa:d3:4f:a4:78:0d:74: 25:37:2e:cf:b8:fb:d0:bf:a6:91:f0:be:a4:d3:77: 6c:5e:cf:a6:ca:a1:b5:86:bc:c7:ee:64:fb:e9:44: d0:b0:49:54:c2:b2:3b:4f:31:0d:7d:b4:a6:db:93: 8e:59:6a:71:e5:76:c4:0d:eb:5d:aa:8c:72:c4:ec: 72:9d:21:ee:86:b3:52:9f:3a:e1:f1:58:f4:23:6e: 4f:cf:14:1d:94:18:5a:e4:a1:24:1f:ac:81:3d:28: a9:79:88:2c:d6:77:b4:fb:f4:b9:78:c6:c6:c9:26: b4:02:13:4f:4c:3a:1f:62:94:87:2e:14:68:d8:38: de:52:df:70:2e:0e:6d:4b:df:50:0c:c5:26:66:a5: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2C:40:71:E1:48:72:FA:09:0C:DD:52:37:C4:F0:3F:F5:7E:64:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5f0338b1-cf07-3c46-b656-9c7140c1396c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:02:a9:2f:17:c8:06:36:11:d2:44:b6:04:d0:ef:91:ae:57: 1d:f4:07:ee:aa:e7:58:71:44:0e:87:c6:29:92:2a:18:fa:b2: ed:42:14:5d:7d:10:75:40:9f:4f:5c:36:08:00:85:90:12:fe: 93:78:77:26:88:54:20:61:02:9e:49:23:ab:e6:a8:4f:05:6e: b2:87:e0:51:14:4d:cf:ac:3d:58:18:38:9c:c7:43:ff:7a:89: be:0a:91:e9:e8:84:4d:7d:d0:9c:00:55:3a:53:1f:b9:0e:02: 6d:cb:77:bd:b8:d6:aa:3c:4a:7f:aa:5c:a0:dc:06:8f:39:2e: cd:37:7c:e8:ea:db:ec:2a:fe:f2:9e:22:49:df:7f:89:90:79: 22:68:a4:09:95:b9:bd:67:21:33:8b:13:28:56:36:f2:c9:11: aa:34:4e:94:fa:18:09:f5:6e:ac:eb:f9:18:5f:ba:a5:0f:cd: ee:11:03:ab:f4:37:3c:ab:ab:11:a5:13:79:30:04:d9:f5:88: ad:5d:d1:12:dc:66:af:39:83:68:cf:7d:c7:0c:4f:03:75:54: 31:c4:de:54:2b:54:64:89:bc:f6:19:ec:91:2f:09:22:f7:7a: bc:19:f2:e7:dd:83:c3:d0:e0:1a:b4:44:1b:d2:b4:1d:c3:62: d0:34:d5:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxeLwbN44WydvZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk NDgxNjJjZWMtNGYxMi00MGNmLWFlNTAtNGY1ZjhmODA0NWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQVEihXoJsH5Zsot8aGqgYfJV+seAPTKQdLS izowkVPnuCEbhbVsZKPYljY7E9hXSPBiTu1ngFmxbFzNxTJb0JW6MHpSYm3teaJk lkhaMf55onIJgsxWRxzjjJ505n8hO4Bd3mRxXWmdKeXnciHcCvrTT6R4DXQlNy7P uPvQv6aR8L6k03dsXs+myqG1hrzH7mT76UTQsElUwrI7TzENfbSm25OOWWpx5XbE DetdqoxyxOxynSHuhrNSnzrh8Vj0I25PzxQdlBha5KEkH6yBPSipeYgs1ne0+/S5 eMbGySa0AhNPTDofYpSHLhRo2DjeUt9wLg5tS99QDMUmZqUE0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQsQHHhSHL6CQzdUjfE8D/1fmQ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNWYwMzM4YjEtY2YwNy0z YzQ2LWI2NTYtOWM3MTQwYzEzOTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8CqS8XyAY2EdJEtgTQ75GuVx30B+6q51hxRA6HximSKhj6su1CFF19 EHVAn09cNggAhZAS/pN4dyaIVCBhAp5JI6vmqE8FbrKH4FEUTc+sPVgYOJzHQ/96 ib4KkenohE190JwAVTpTH7kOAm3Ld7241qo8Sn+qXKDcBo85Ls03fOjq2+wq/vKe Iknff4mQeSJopAmVub1nITOLEyhWNvLJEao0TpT6GAn1bqzr+RhfuqUPze4RA6v0 NzyrqxGlE3kwBNn1iK1d0RLcZq85g2jPfccMTwN1VDHE3lQrVGSJvPYZ7JEvCSL3 erwZ8ufdg8PQ4Bq0RBvStB3DYtA01VU= -----END CERTIFICATE-----Generated at Sun Jul 20 17:26:39 2025 by rpki-client