$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a7c850a7-6057-3aba-a856-158b07a73e10.roa File: a7c850a7-6057-3aba-a856-158b07a73e10.roa (raw, json) Hash identifier: 5F6XA/qBv2EoxKq4DYZ2Wpj4M18mf1qj9ZkWmU7GwjM= Subject key identifier: 37:ED:90:EC:E5:4F:64:2F:C5:F7:9F:00:CD:23:B3:D0:34:8C:43:5E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A89A61F0DC9BABCB0E56B0020 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a7c850a7-6057-3aba-a856-158b07a73e10.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 14618 IP address blocks: 172.111.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:1f:0d:c9:ba:bc:b0:e5:6b:00:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=21e33d7a-f728-465a-b744-9eba16cd44ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f2:26:9d:69:49:1e:0b:52:65:cf:f9:ef:a4: 0f:83:6e:e1:14:3a:e1:cc:32:bf:82:ef:26:3b:94: 10:60:b7:70:ac:28:2c:18:c9:86:b6:3e:20:c1:ce: 7c:a6:67:1b:bd:46:28:82:79:d9:aa:31:00:3c:61: 62:d7:0f:ad:c0:29:d3:1d:e9:28:4e:55:64:ba:98: a5:8f:e2:c9:76:bd:ba:29:f3:22:17:73:67:13:b3: 3b:15:9e:a0:e5:7b:17:6b:52:d4:f1:f7:ee:07:d7: 6f:3d:de:69:af:04:4e:d1:fc:93:dc:67:9b:1d:47: 97:2b:4a:40:87:92:3c:52:98:b5:4b:6a:15:3f:f3: 97:a8:af:fa:66:c2:40:d8:16:22:c6:da:af:13:4b: bf:16:4f:3d:37:06:55:56:db:be:c5:9d:43:41:11: ff:22:a6:ca:d4:25:a6:00:61:5d:00:34:1c:a6:46: f7:2a:ac:1d:bf:6e:dd:32:69:5b:18:a7:91:19:98: 69:fa:04:c9:40:07:4a:a8:95:c6:fe:d4:aa:ef:a9: 25:c4:dd:59:ed:9e:32:d8:39:0c:cf:b8:a5:0b:db: ef:1a:28:b8:16:99:c7:ed:d9:f0:05:b8:90:51:db: e0:11:f7:20:bf:e9:bf:a6:e2:6f:f5:d9:1b:0c:92: 3a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:ED:90:EC:E5:4F:64:2F:C5:F7:9F:00:CD:23:B3:D0:34:8C:43:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a7c850a7-6057-3aba-a856-158b07a73e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:fc:74:2e:48:7d:44:83:44:96:72:68:84:7e:b4:63:e7:46: 6a:db:8a:cb:57:fc:1b:ac:b8:da:34:32:61:4c:c3:94:18:bd: 94:e5:cd:47:8d:fa:df:d8:05:2f:c9:c8:d7:83:0d:18:1a:19: ce:de:ff:d7:c5:c9:ab:5b:29:f0:9f:b2:8c:e0:1b:a7:cb:4a: 23:9d:a2:4e:99:c8:a9:14:6a:9d:19:77:d3:0a:1f:ee:6c:8a: 22:38:6d:53:9f:25:30:b7:52:fc:ac:50:df:5e:e2:7e:67:98: 39:6c:f9:ab:5f:dd:26:5c:fa:3a:12:91:e5:9a:ee:99:81:14: 4d:fb:1f:fa:81:67:4f:6c:30:b2:d0:1e:02:9f:d1:ea:55:41: 52:9d:90:86:78:4f:0a:a2:80:02:c6:0c:41:e7:8f:2d:a1:cb: d5:a8:d9:f5:fe:04:74:bb:db:8e:a0:9d:12:4e:ac:b7:28:58: 75:de:2d:47:31:cb:5d:b7:d1:f2:ea:97:a4:50:33:0e:d1:56: eb:e5:38:97:2c:05:e4:c8:9f:8b:9d:d6:9c:26:ab:99:6e:58: e2:90:08:5f:10:cd:95:d7:c1:68:d7:d9:88:7c:bf:b6:49:1a: 54:12:70:46:ac:6f:e7:54:09:26:6b:49:45:62:ca:2c:30:79: b1:b0:5c:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJph8Nybq8sOVrACAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk MjFlMzNkN2EtZjcyOC00NjVhLWI3NDQtOWViYTE2Y2Q0NGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfImnWlJHgtSZc/576QPg27hFDrhzDK/gu8m O5QQYLdwrCgsGMmGtj4gwc58pmcbvUYognnZqjEAPGFi1w+twCnTHekoTlVkupil j+LJdr26KfMiF3NnE7M7FZ6g5XsXa1LU8ffuB9dvPd5prwRO0fyT3GebHUeXK0pA h5I8Upi1S2oVP/OXqK/6ZsJA2BYixtqvE0u/Fk89NwZVVtu+xZ1DQRH/IqbK1CWm AGFdADQcpkb3Kqwdv27dMmlbGKeRGZhp+gTJQAdKqJXG/tSq76klxN1Z7Z4y2DkM z7ilC9vvGii4FpnH7dnwBbiQUdvgEfcgv+m/puJv9dkbDJI6QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDftkOzlT2QvxfefAM0js9A0jENeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTdjODUwYTctNjA1Ny0z YWJhLWE4NTYtMTU4YjA3YTczZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD78dC5IfUSDRJZyaIR+tGPnRmrbistX/BusuNo0MmFMw5QYvZTlzUeN +t/YBS/JyNeDDRgaGc7e/9fFyatbKfCfsozgG6fLSiOdok6ZyKkUap0Zd9MKH+5s iiI4bVOfJTC3UvysUN9e4n5nmDls+atf3SZc+joSkeWa7pmBFE37H/qBZ09sMLLQ HgKf0epVQVKdkIZ4TwqigALGDEHnjy2hy9Wo2fX+BHS7246gnRJOrLcoWHXeLUcx y1230fLql6RQMw7RVuvlOJcsBeTIn4ud1pwmq5luWOKQCF8QzZXXwWjX2Yh8v7ZJ GlQScEasb+dUCSZrSUViyiwwebGwXLs= -----END CERTIFICATE-----Generated at Thu Jul 24 04:54:59 2025 by rpki-client