$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ba814287-b53d-31fc-b52d-a3923ba8d46c.roa File: ba814287-b53d-31fc-b52d-a3923ba8d46c.roa (raw, json) Hash identifier: MURQar2A+Bj50yZdgAAwtqWAKLiIE9vnY4UhQ2+jtrw= Subject key identifier: 8A:2E:DB:30:07:24:BF:35:87:EE:1D:EE:37:62:A2:EB:65:DD:EC:DE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A89A61F9F123CE6CF0A511820 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ba814287-b53d-31fc-b52d-a3923ba8d46c.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 14618 IP address blocks: 172.111.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:1f:9f:12:3c:e6:cf:0a:51:18:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=9ed43257-e80c-4d2c-aa80-02cfb0d0c97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:95:d8:cc:23:a7:7d:96:9c:ce:72:21:45:ee: f8:38:06:69:6a:8f:6d:93:f9:6a:d8:25:f0:e8:00: bc:90:b0:e7:95:25:ab:19:8c:d3:1e:4a:b5:cf:ad: 02:c3:db:77:79:cc:02:85:1f:c1:a4:7c:f3:83:12: fd:e5:08:44:9f:f0:03:83:95:49:b1:32:56:aa:18: 1c:09:f9:71:81:8d:c7:31:1c:78:44:d5:e5:4b:d9: 07:fe:36:8e:ae:c1:3c:86:a4:75:7b:dc:a6:79:8c: 00:7d:e0:bc:e6:72:f8:18:e2:1d:2a:dd:f6:17:c8: 97:4e:17:8b:58:fe:6d:ef:0d:11:75:b5:33:e1:01: 3f:71:1e:fd:03:29:da:01:ab:08:65:ae:a2:bb:58: 09:e3:42:5f:70:ee:7c:f1:88:be:fa:62:fe:40:60: 01:58:c5:6b:85:be:c5:75:b2:2f:bf:76:be:c5:cc: dd:91:a5:22:b2:fd:d3:2e:b5:4a:6f:a8:fe:7b:43: a4:2e:01:be:ec:30:02:cb:53:72:72:97:dd:48:0d: 72:a1:87:26:23:94:ac:b9:c8:5e:d4:2b:d9:1e:af: ed:8a:b2:78:e8:0d:30:6e:e9:21:f6:60:57:07:77: e2:94:ab:9b:1f:b8:75:56:f3:f8:3f:30:d6:d4:4c: 53:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2E:DB:30:07:24:BF:35:87:EE:1D:EE:37:62:A2:EB:65:DD:EC:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ba814287-b53d-31fc-b52d-a3923ba8d46c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:7e:e9:77:c4:f8:a0:0e:f3:ba:aa:d2:a1:9e:16:52:19:dc: 4f:aa:d9:37:ad:17:4f:10:12:92:60:7f:8b:a8:3d:b0:a7:be: 66:9a:cf:95:89:76:e8:a9:c6:f0:9c:2d:4d:78:02:34:11:51: f9:41:63:52:13:43:bc:82:12:c4:8c:0d:5c:3b:e2:cb:36:60: b1:e5:9e:4b:d1:18:52:aa:de:98:84:78:34:d0:c0:54:9e:29: d7:6e:36:29:55:ae:62:be:c9:31:77:f6:fd:c0:31:32:24:56: 4e:73:19:1f:6c:63:a0:91:ab:ed:be:f5:1a:49:b4:82:f8:f0: e6:10:f8:81:00:a8:75:6d:9b:c7:df:5b:47:37:4d:4f:f3:65: 23:ef:a7:58:8f:1e:a0:8d:dc:25:e7:b6:48:b2:4a:83:2a:a2: ef:90:ba:c7:d1:db:e3:86:67:86:49:9b:69:cb:2c:c7:eb:23: e8:6d:20:00:69:3e:4e:7e:99:00:ca:43:d4:58:e7:7b:39:b0: 62:69:90:e4:f7:ec:28:e7:5e:a2:17:c0:97:b3:dd:0b:32:c8: f5:be:4d:6b:66:be:56:92:9b:6a:4e:ff:ff:7e:0b:9d:38:97: 91:75:aa:0b:f5:ad:23:bd:df:13:4b:68:29:ad:c4:f0:d1:8e: 35:e5:e3:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJph+fEjzmzwpRGCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk OWVkNDMyNTctZTgwYy00ZDJjLWFhODAtMDJjZmIwZDBjOTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpXYzCOnfZacznIhRe74OAZpao9tk/lq2CXw 6AC8kLDnlSWrGYzTHkq1z60Cw9t3ecwChR/BpHzzgxL95QhEn/ADg5VJsTJWqhgc CflxgY3HMRx4RNXlS9kH/jaOrsE8hqR1e9ymeYwAfeC85nL4GOIdKt32F8iXTheL WP5t7w0RdbUz4QE/cR79AynaAasIZa6iu1gJ40JfcO588Yi++mL+QGABWMVrhb7F dbIvv3a+xczdkaUisv3TLrVKb6j+e0OkLgG+7DACy1NycpfdSA1yoYcmI5Ssuche 1CvZHq/tirJ46A0wbukh9mBXB3filKubH7h1VvP4PzDW1ExTtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIou2zAHJL81h+4d7jdioutl3ezeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmE4MTQyODctYjUzZC0z MWZjLWI1MmQtYTM5MjNiYThkNDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5+6XfE+KAO87qq0qGeFlIZ3E+q2TetF08QEpJgf4uoPbCnvmaaz5WJ duipxvCcLU14AjQRUflBY1ITQ7yCEsSMDVw74ss2YLHlnkvRGFKq3piEeDTQwFSe KdduNilVrmK+yTF39v3AMTIkVk5zGR9sY6CRq+2+9RpJtIL48OYQ+IEAqHVtm8ff W0c3TU/zZSPvp1iPHqCN3CXntkiySoMqou+QusfR2+OGZ4ZJm2nLLMfrI+htIABp Pk5+mQDKQ9RY53s5sGJpkOT37CjnXqIXwJez3QsyyPW+TWtmvlaSm2pO//9+C504 l5F1qgv1rSO93xNLaCmtxPDRjjXl46Q= -----END CERTIFICATE-----Generated at Tue Jul 22 11:50:22 2025 by rpki-client