$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d1280ea6-ec74-3943-8f1e-00f8cba03538.roa File: d1280ea6-ec74-3943-8f1e-00f8cba03538.roa (raw, json) Hash identifier: 6wIw9+RmJpCuvO2V4PXXgrswn3JD1J+/0Pdz0L3xwOU= Subject key identifier: 67:D5:49:A1:1E:59:6A:22:28:B1:CC:49:1D:74:A1:A3:4C:BC:42:0D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A8EED5B71503B83568CA317C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d1280ea6-ec74-3943-8f1e-00f8cba03538.roa Signing time: Fri 18 Jul 2025 10:23:48 +0000 ROA not before: Fri 18 Jul 2025 10:23:48 +0000 ROA not after: Thu 16 Oct 2025 10:23:48 +0000 asID: 55154 IP address blocks: 172.111.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8e:ed:5b:71:50:3b:83:56:8c:a3:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 18 10:23:48 2025 GMT Not After : Oct 16 10:23:48 2025 GMT Subject: CN=a995a143-fe9f-40b7-8334-e954d1f411d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dd:12:9d:7f:4f:e6:f4:cb:eb:50:df:99:94: 5c:8c:c2:46:5b:47:41:3f:8f:c4:4b:d0:01:0a:fc: 06:9a:b2:97:ba:ab:48:02:54:60:a1:1f:9a:62:f2: fc:61:7d:69:08:5a:ab:83:d7:dd:a5:9d:ef:1c:89: 42:8d:2f:9a:a6:b8:5a:88:e5:af:a5:1a:8e:f7:99: 53:00:46:84:96:da:d5:ea:7f:3e:45:2c:bf:f1:a3: d8:d5:af:78:09:66:30:7a:49:7d:53:e7:31:2c:7c: d2:9f:96:65:c6:32:40:9c:6a:44:87:9f:26:d7:14: fb:8a:08:21:d7:83:af:85:98:68:5a:53:6e:97:a4: b0:81:67:a4:3c:9b:e8:6c:ad:d5:39:dc:a2:dc:29: ff:3d:12:1f:56:01:1f:f6:7c:5d:4e:00:50:1d:15: e1:8a:0d:79:64:21:92:94:d7:9a:45:f6:e1:da:c1: 35:58:c4:c1:99:20:b7:89:39:dd:d5:38:32:83:84: 7d:cd:d6:d0:21:96:01:de:3f:13:72:11:24:6c:cf: 8e:37:7c:96:6e:a9:b7:61:ae:5f:85:73:c3:08:6f: 28:fb:23:17:0b:1a:0c:33:62:a4:3e:23:a7:ec:86: de:a6:51:52:f6:e4:ca:63:ea:65:5e:62:60:62:ee: 88:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D5:49:A1:1E:59:6A:22:28:B1:CC:49:1D:74:A1:A3:4C:BC:42:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d1280ea6-ec74-3943-8f1e-00f8cba03538.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a3:4b:f5:20:0c:e8:fe:07:c8:4c:9c:5a:f7:cc:7b:be:8c: e7:7a:6f:8b:4b:63:86:4a:03:11:31:f5:2b:2d:5a:f8:c8:6c: 33:2a:98:ff:2e:90:83:ab:bc:ee:75:e7:00:18:54:dc:4d:28: 4f:15:db:a4:b6:16:88:5c:55:c7:8c:b7:64:3d:bb:68:90:81: f0:ed:32:04:8a:bf:b1:9d:7d:a9:33:e3:f9:7f:25:c8:65:25: 32:ca:87:35:72:5c:d4:a5:69:6d:9c:ad:5a:22:12:c8:40:65: 38:65:49:a0:a6:69:af:0e:b5:a1:4a:90:36:f7:b0:b8:29:34: 27:21:10:e7:b7:b9:27:02:b5:dc:51:d5:a9:37:46:9b:2d:35: f7:03:64:9a:c4:a3:72:d9:f0:ce:a0:99:75:0c:dc:d5:02:a5: af:8b:c4:07:11:7a:80:ef:5f:b1:02:2b:c1:64:81:85:90:f3: 3f:b0:d5:be:74:d7:9e:c9:48:d9:48:f9:06:57:ba:ed:3c:73: 57:ff:8a:c0:01:74:68:87:83:83:58:18:b7:6c:97:2e:6d:70: a3:47:eb:99:7f:a6:76:28:c0:6f:f5:68:35:61:df:8a:bf:07: 7e:50:38:f2:47:8f:5b:f0:d4:2a:ec:e5:0d:1a:b1:5f:41:1e: 33:3e:8e:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqO7VtxUDuDVoyjF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxODEwMjM0OFoXDTI1MTAxNjEwMjM0OFowLzEtMCsGA1UEAxMk YTk5NWExNDMtZmU5Zi00MGI3LTgzMzQtZTk1NGQxZjQxMWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN0SnX9P5vTL61DfmZRcjMJGW0dBP4/ES9AB CvwGmrKXuqtIAlRgoR+aYvL8YX1pCFqrg9fdpZ3vHIlCjS+aprhaiOWvpRqO95lT AEaEltrV6n8+RSy/8aPY1a94CWYwekl9U+cxLHzSn5ZlxjJAnGpEh58m1xT7iggh 14OvhZhoWlNul6SwgWekPJvobK3VOdyi3Cn/PRIfVgEf9nxdTgBQHRXhig15ZCGS lNeaRfbh2sE1WMTBmSC3iTnd1Tgyg4R9zdbQIZYB3j8TchEkbM+ON3yWbqm3Ya5f hXPDCG8o+yMXCxoMM2KkPiOn7IbeplFS9uTKY+plXmJgYu6IWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfVSaEeWWoiKLHMSR10oaNMvEINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDEyODBlYTYtZWM3NC0z OTQzLThmMWUtMDBmOGNiYTAzNTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKjS/UgDOj+B8hMnFr3zHu+jOd6b4tLY4ZKAxEx9SstWvjIbDMqmP8u kIOrvO515wAYVNxNKE8V26S2FohcVceMt2Q9u2iQgfDtMgSKv7Gdfakz4/l/Jchl JTLKhzVyXNSlaW2crVoiEshAZThlSaCmaa8OtaFKkDb3sLgpNCchEOe3uScCtdxR 1ak3RpstNfcDZJrEo3LZ8M6gmXUM3NUCpa+LxAcReoDvX7ECK8FkgYWQ8z+w1b50 157JSNlI+QZXuu08c1f/isABdGiHg4NYGLdsly5tcKNH65l/pnYowG/1aDVh34q/ B35QOPJHj1vw1Crs5Q0asV9BHjM+joE= -----END CERTIFICATE-----Generated at Sun Jul 20 06:12:29 2025 by rpki-client