$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d718e811-5d3b-3e92-94a4-9ad6d104b712.roa File: d718e811-5d3b-3e92-94a4-9ad6d104b712.roa (raw, json) Hash identifier: Tq+t/KljS4hahBl9pKeHzCKha+bVZAxcL7OiUvZwq/w= Subject key identifier: 5C:14:52:1A:B2:FE:9B:A2:F5:4E:23:FA:76:35:06:55:2E:E8:07:C8 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A9206351BEF895568AE8AF140 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d718e811-5d3b-3e92-94a4-9ad6d104b712.roa Signing time: Sat 19 Jul 2025 13:01:04 +0000 ROA not before: Sat 19 Jul 2025 13:01:04 +0000 ROA not after: Fri 17 Oct 2025 13:01:04 +0000 asID: 6939 IP address blocks: 172.111.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:92:06:35:1b:ef:89:55:68:ae:8a:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 19 13:01:04 2025 GMT Not After : Oct 17 13:01:04 2025 GMT Subject: CN=0b26ee25-0404-4ad8-ab5d-ad168c7e8dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7a:e4:5d:c7:ba:65:52:e3:a2:6c:dc:9d:6a: ca:a8:ca:c0:62:f2:b2:d5:05:ba:bb:9c:aa:da:b5: 53:fd:de:25:d1:a5:80:61:9e:23:06:05:db:98:7c: c8:90:63:98:17:43:35:58:68:e7:1a:5d:c0:d0:83: 2c:45:49:5a:7e:e6:c7:17:8e:06:29:ce:28:4a:dd: ca:32:a5:d1:a8:fc:bd:13:44:98:c7:45:d5:08:94: b7:ce:6f:2b:53:33:d4:13:d4:97:9e:bf:bd:f3:62: 94:ee:4d:27:ec:76:11:32:67:7b:ac:1a:06:b0:82: 1c:13:d3:f9:98:28:93:af:83:9f:41:48:1d:32:8d: 58:72:67:2e:d5:f3:e4:78:82:0c:40:c8:88:24:28: a8:0f:8f:51:eb:86:aa:43:7d:a3:40:85:77:b0:4b: e9:f2:39:14:33:aa:b9:82:49:a6:f9:2a:67:0d:8c: 64:d1:18:59:7f:d6:cc:1d:65:fb:e4:48:44:86:cd: bf:49:e8:62:b6:af:d9:31:11:22:91:5b:c2:3b:25: 6d:08:d0:54:4c:15:0c:8e:40:af:a3:b9:9a:2a:d4: 07:76:37:b8:a8:74:dd:a9:55:1b:90:68:bb:dd:97: 7d:df:f0:f3:a0:87:7d:38:b6:fb:41:04:4f:68:56: 13:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:14:52:1A:B2:FE:9B:A2:F5:4E:23:FA:76:35:06:55:2E:E8:07:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d718e811-5d3b-3e92-94a4-9ad6d104b712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5e:48:15:21:0c:9e:1b:06:3b:93:bd:de:9f:1b:40:5a:2e: b8:7c:e4:43:ff:fc:71:7b:9d:0c:45:33:7c:f6:60:1f:91:e9: a1:3a:35:8c:ed:99:f2:bc:10:03:31:d6:77:d1:8d:20:fb:9e: 98:29:41:eb:ba:b5:8e:33:ac:74:93:14:64:e4:3f:41:ab:23: 0a:f0:0d:98:da:ea:38:d8:1d:71:3b:b7:d5:27:08:17:c4:3c: a4:d1:7b:71:da:30:ec:e6:57:a2:3f:c9:7f:cc:af:fb:f6:72: 59:c5:b9:02:cc:23:d1:46:2c:54:66:4d:52:58:fe:4f:44:4e: 76:79:41:de:a4:d2:8d:5f:c0:19:34:a6:1a:e3:32:77:56:3b: 0d:e7:75:c6:80:fb:75:ec:08:fc:be:97:7e:40:35:82:43:5b: 33:b5:36:79:02:95:85:cd:9f:aa:a1:13:5d:9d:cd:84:a8:a2: 2f:ff:ae:d1:93:1c:83:5c:dc:27:74:81:d3:b3:27:98:ed:08: 34:7e:6f:25:d8:b6:e2:c2:ab:6f:14:e9:78:8c:5d:f9:04:82: 30:72:24:18:4b:77:f3:f4:6b:e2:5d:30:7b:11:d5:dd:0f:56: 1c:98:95:66:35:40:08:15:0a:33:c5:9f:41:c8:e8:90:95:d3: 00:b0:5d:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqSBjUb74lVaK6K8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxOTEzMDEwNFoXDTI1MTAxNzEzMDEwNFowLzEtMCsGA1UEAxMk MGIyNmVlMjUtMDQwNC00YWQ4LWFiNWQtYWQxNjhjN2U4ZGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHrkXce6ZVLjomzcnWrKqMrAYvKy1QW6u5yq 2rVT/d4l0aWAYZ4jBgXbmHzIkGOYF0M1WGjnGl3A0IMsRUlafubHF44GKc4oSt3K MqXRqPy9E0SYx0XVCJS3zm8rUzPUE9SXnr+982KU7k0n7HYRMmd7rBoGsIIcE9P5 mCiTr4OfQUgdMo1Ycmcu1fPkeIIMQMiIJCioD49R64aqQ32jQIV3sEvp8jkUM6q5 gkmm+SpnDYxk0RhZf9bMHWX75EhEhs2/Sehitq/ZMREikVvCOyVtCNBUTBUMjkCv o7maKtQHdje4qHTdqVUbkGi73Zd93/DzoId9OLb7QQRPaFYTTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwUUhqy/pui9U4j+nY1BlUu6AfIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDcxOGU4MTEtNWQzYi0z ZTkyLTk0YTQtOWFkNmQxMDRiNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdeSBUhDJ4bBjuTvd6fG0BaLrh85EP//HF7nQxFM3z2YB+R6aE6NYzt mfK8EAMx1nfRjSD7npgpQeu6tY4zrHSTFGTkP0GrIwrwDZja6jjYHXE7t9UnCBfE PKTRe3HaMOzmV6I/yX/Mr/v2clnFuQLMI9FGLFRmTVJY/k9ETnZ5Qd6k0o1fwBk0 phrjMndWOw3ndcaA+3XsCPy+l35ANYJDWzO1NnkClYXNn6qhE12dzYSooi//rtGT HINc3Cd0gdOzJ5jtCDR+byXYtuLCq28U6XiMXfkEgjByJBhLd/P0a+JdMHsR1d0P VhyYlWY1QAgVCjPFn0HI6JCV0wCwXUM= -----END CERTIFICATE-----Generated at Tue Jul 22 11:52:08 2025 by rpki-client