$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7582669e-2fd1-324c-ad24-9a18f5d395ea.roa File: 7582669e-2fd1-324c-ad24-9a18f5d395ea.roa (raw, json) Hash identifier: SC+njeVSLCUKcB5Xzn6R8/33IT8seb1MJARH+GSzyMk= Subject key identifier: 24:76:81:D9:FF:87:F9:A9:69:0D:01:D9:A0:08:91:58:68:C2:8F:F3 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A89A61F21DC25513139CC6400 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7582669e-2fd1-324c-ad24-9a18f5d395ea.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 14618 IP address blocks: 172.111.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:1f:21:dc:25:51:31:39:cc:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=1d1d97a8-ecee-4790-b3b2-12d0e6812840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b4:59:3e:24:f2:10:27:d5:cc:27:4e:e6:21: aa:30:04:d0:18:74:98:d1:79:db:ad:8e:f4:16:15: 3e:79:d2:3c:fb:34:26:a3:6d:7a:9d:db:ed:b3:1c: fb:10:9a:c1:89:38:07:8e:82:d4:92:52:7d:45:7d: a7:88:6c:c9:37:e6:40:9a:89:b1:57:33:12:83:fc: a2:86:fa:7e:67:00:7f:c8:85:1d:49:59:16:b3:c4: b5:00:c0:dc:ca:4e:63:d8:3d:ea:0b:6e:a2:50:4c: 08:8d:95:84:63:aa:70:17:40:fb:40:5e:6a:42:15: d3:83:95:19:be:87:aa:b9:82:c1:02:34:d5:50:82: b2:49:38:a4:e1:cf:d3:35:7c:d4:53:76:33:17:89: b1:31:3f:85:60:aa:f1:d8:ec:e9:3b:fb:7b:12:ca: e8:2e:43:7a:82:cf:0d:07:c9:e6:ba:e5:9c:53:67: d4:b3:d0:9b:05:31:dc:f2:49:56:72:95:63:8d:db: e8:ce:f0:b5:5b:71:29:4f:80:6f:fa:61:f3:0c:9f: b8:0c:a7:f4:0c:e7:6c:07:68:f9:30:a1:09:31:4c: fb:63:6e:d8:29:3a:d3:15:74:ad:9c:2e:72:f6:10: e6:d6:e4:d8:78:f9:23:2b:a3:bb:df:72:11:f3:ab: 47:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:76:81:D9:FF:87:F9:A9:69:0D:01:D9:A0:08:91:58:68:C2:8F:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7582669e-2fd1-324c-ad24-9a18f5d395ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:d5:9c:50:37:6a:f5:16:e3:3b:c7:7d:a2:d0:8b:07:93:62: 56:18:3d:13:59:b6:26:c8:b8:3a:bd:a9:4b:1f:bb:82:b4:96: 59:06:6d:88:92:7c:26:b5:b4:36:77:ac:e8:8a:92:8a:41:8b: be:65:f6:90:20:d9:09:96:b1:9a:ac:43:32:24:89:54:c2:f0: 45:a4:42:c5:a6:b5:1d:6f:a4:e4:45:00:66:eb:8b:1c:4e:d8: c3:ff:6c:d0:f3:36:5e:f9:5d:cb:b5:a3:64:c5:d4:3a:bb:5e: b1:33:9f:c9:4c:73:db:ba:b1:f9:6d:20:50:6b:9d:24:4a:9b: 08:90:08:47:17:77:22:25:fe:59:1b:dc:a7:9e:6e:07:6a:80: de:38:97:1c:91:d4:ea:67:ee:a1:4b:7f:de:56:d2:84:c1:e8: 70:e2:6b:fc:fe:c0:6e:2a:4a:2b:d6:71:95:8a:b4:9b:ec:b5: b2:42:ca:f4:de:3e:f3:13:cd:69:da:a5:16:98:df:29:9e:ad: 9f:a8:3c:fc:7d:31:0e:a1:87:5b:ab:25:57:1a:b0:23:5b:e0: d4:52:cb:a7:7f:05:06:1f:9e:cc:90:cf:57:58:09:e0:e4:b6: 54:a6:54:30:59:e1:4e:d6:16:06:1a:a1:8f:4c:28:83:8c:16: 2a:11:7a:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJph8h3CVRMTnMZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk MWQxZDk3YTgtZWNlZS00NzkwLWIzYjItMTJkMGU2ODEyODQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7RZPiTyECfVzCdO5iGqMATQGHSY0XnbrY70 FhU+edI8+zQmo216ndvtsxz7EJrBiTgHjoLUklJ9RX2niGzJN+ZAmomxVzMSg/yi hvp+ZwB/yIUdSVkWs8S1AMDcyk5j2D3qC26iUEwIjZWEY6pwF0D7QF5qQhXTg5UZ voequYLBAjTVUIKySTik4c/TNXzUU3YzF4mxMT+FYKrx2OzpO/t7EsroLkN6gs8N B8nmuuWcU2fUs9CbBTHc8klWcpVjjdvozvC1W3EpT4Bv+mHzDJ+4DKf0DOdsB2j5 MKEJMUz7Y27YKTrTFXStnC5y9hDm1uTYePkjK6O733IR86tHXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCR2gdn/h/mpaQ0B2aAIkVhowo/zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzU4MjY2OWUtMmZkMS0z MjRjLWFkMjQtOWExOGY1ZDM5NWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbVnFA3avUW4zvHfaLQiweTYlYYPRNZtibIuDq9qUsfu4K0llkGbYiS fCa1tDZ3rOiKkopBi75l9pAg2QmWsZqsQzIkiVTC8EWkQsWmtR1vpORFAGbrixxO 2MP/bNDzNl75Xcu1o2TF1Dq7XrEzn8lMc9u6sfltIFBrnSRKmwiQCEcXdyIl/lkb 3KeebgdqgN44lxyR1Opn7qFLf95W0oTB6HDia/z+wG4qSivWcZWKtJvstbJCyvTe PvMTzWnapRaY3ymerZ+oPPx9MQ6hh1urJVcasCNb4NRSy6d/BQYfnsyQz1dYCeDk tlSmVDBZ4U7WFgYaoY9MKIOMFioRevA= -----END CERTIFICATE-----Generated at Tue Jul 22 11:51:12 2025 by rpki-client