$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa File: 901d7078-5ae0-31f8-a837-37437b50a24f.roa (raw, json) Hash identifier: 8ajcrpZLdMr0uMCes75RYSNaCnK3ER5X3srd5d6U+J0= Subject key identifier: 32:CA:4D:49:FF:36:EF:E3:10:C5:E4:65:4B:3A:79:17:71:47:4B:F3 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A90A0AD88539D2692CDEA8AC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 3223 IP address blocks: 172.111.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:ad:88:53:9d:26:92:cd:ea:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=d23d848e-b73d-4574-b0b1-912e8d5204a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9d:15:1b:38:3e:94:51:bb:c8:63:cc:5d:74: 7e:57:17:c1:af:b3:5c:57:a5:3d:fe:95:30:57:92: c6:90:ed:85:94:ee:68:98:08:ea:4b:9a:13:65:10: 83:fe:ea:99:01:56:75:db:df:70:5d:b4:4e:79:6c: 48:25:c7:df:69:53:e7:7b:af:43:b1:43:5a:08:bd: cc:0c:95:8c:f6:18:10:7a:7f:93:95:b9:c8:75:45: 9a:cb:d8:d6:87:bf:c5:22:f5:21:1b:73:d1:3e:cb: 1c:af:91:49:41:ea:2f:cf:7a:ae:9e:10:b8:0b:22: 93:b3:3a:52:79:53:e5:dc:dd:90:1d:8a:ea:c2:2d: 0b:df:5a:74:57:87:10:84:23:bf:5e:66:3c:95:bb: 45:75:24:1e:bd:4a:3c:cd:f0:62:ba:89:9c:c4:b7: 7b:ee:ec:33:22:4d:b9:9c:9a:1a:42:e5:20:04:fd: 31:f1:3d:e0:15:95:9e:18:d9:11:ee:56:3d:24:bf: cd:5c:38:d0:b8:cb:54:4d:70:a1:da:5f:10:24:b4: e2:72:78:38:ff:06:d2:3b:e7:12:ef:93:12:ae:8d: 2f:8d:08:a6:90:9d:0b:20:16:45:b0:28:61:f7:7b: b9:95:90:b5:f2:a7:f4:ac:cf:86:a2:7b:ac:2e:b8: a5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CA:4D:49:FF:36:EF:E3:10:C5:E4:65:4B:3A:79:17:71:47:4B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7e:76:a5:7a:21:1e:8b:f3:3b:13:f8:0b:de:96:c8:40:94: 51:0a:97:4d:31:f5:a7:f5:95:06:a8:32:19:27:e9:75:b1:c9: 1d:cf:04:2b:c7:6c:d8:33:3d:b3:9c:03:a6:6c:7d:ed:cd:92: 75:d2:c6:32:4e:97:5f:19:5b:b5:0e:4c:ba:6a:81:79:2a:b6: 03:42:20:d2:bc:1d:27:69:8b:0b:72:53:47:27:f3:9e:4e:32: d4:5b:f7:7a:19:e7:90:3e:58:2d:c6:3e:48:39:21:3a:41:07: aa:4f:e9:52:0c:0d:b1:01:83:25:f6:c2:4b:26:85:c5:42:38: 5a:99:69:b7:b9:67:88:a8:39:c5:23:2e:84:67:0a:37:26:c9: 27:00:77:76:df:ee:15:e9:5f:8d:3d:3d:7a:7c:77:6a:86:0b: 6f:1a:0f:8d:5c:3f:fc:12:f3:b4:c2:fc:80:62:23:20:2a:6e: 94:d2:45:ae:99:b0:eb:c7:ae:b4:b9:a0:be:3a:1a:87:0b:0f: 24:37:17:e9:fd:0e:17:98:a6:45:90:84:41:8e:60:bc:fe:07: 81:ec:2b:9c:29:52:b9:ba:c5:60:a4:7a:9c:0a:ac:4a:3d:c9: 2a:2b:ef:3f:4f:d1:80:50:46:fe:a2:9f:a8:75:85:fd:ad:20: 2b:13:ec:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoK2IU50mks3qisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZDIzZDg0OGUtYjczZC00NTc0LWIwYjEtOTEyZThkNTIwNGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ0VGzg+lFG7yGPMXXR+VxfBr7NcV6U9/pUw V5LGkO2FlO5omAjqS5oTZRCD/uqZAVZ1299wXbROeWxIJcffaVPne69DsUNaCL3M DJWM9hgQen+TlbnIdUWay9jWh7/FIvUhG3PRPsscr5FJQeovz3qunhC4CyKTszpS eVPl3N2QHYrqwi0L31p0V4cQhCO/XmY8lbtFdSQevUo8zfBiuomcxLd77uwzIk25 nJoaQuUgBP0x8T3gFZWeGNkR7lY9JL/NXDjQuMtUTXCh2l8QJLTicng4/wbSO+cS 75MSro0vjQimkJ0LIBZFsChh93u5lZC18qf0rM+GonusLrilWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLKTUn/Nu/jEMXkZUs6eRdxR0vzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTAxZDcwNzgtNWFlMC0z MWY4LWE4MzctMzc0MzdiNTBhMjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFt+dqV6IR6L8zsT+AvelshAlFEKl00x9af1lQaoMhkn6XWxyR3PBCvH bNgzPbOcA6Zsfe3NknXSxjJOl18ZW7UOTLpqgXkqtgNCINK8HSdpiwtyU0cn855O MtRb93oZ55A+WC3GPkg5ITpBB6pP6VIMDbEBgyX2wksmhcVCOFqZabe5Z4ioOcUj LoRnCjcmyScAd3bf7hXpX409PXp8d2qGC28aD41cP/wS87TC/IBiIyAqbpTSRa6Z sOvHrrS5oL46GocLDyQ3F+n9DheYpkWQhEGOYLz+B4HsK5wpUrm6xWCkepwKrEo9 ySor7z9P0YBQRv6in6h1hf2tICsT7AA= -----END CERTIFICATE-----Generated at Sun Jul 20 14:58:12 2025 by rpki-client