$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dec679c0-474a-3c4a-ab18-0d95d3eda7e7.roa File: dec679c0-474a-3c4a-ab18-0d95d3eda7e7.roa (raw, json) Hash identifier: Ro1zX9kBX20VL+z7idxAoi2z7j2pAi/9kJSr2lt+cp8= Subject key identifier: B7:61:0C:62:5A:4A:4E:E7:BB:6E:BE:05:38:A4:94:18:69:DA:F4:F8 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A8EEB925C463B2A1B24C01F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dec679c0-474a-3c4a-ab18-0d95d3eda7e7.roa Signing time: Fri 18 Jul 2025 10:20:12 +0000 ROA not before: Fri 18 Jul 2025 10:20:12 +0000 ROA not after: Thu 16 Oct 2025 10:20:12 +0000 asID: 55154 IP address blocks: 172.111.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8e:eb:92:5c:46:3b:2a:1b:24:c0:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 18 10:20:12 2025 GMT Not After : Oct 16 10:20:12 2025 GMT Subject: CN=3c474d5a-47e2-4111-881b-1a9e289c5f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:42:fc:e9:c1:aa:9c:1d:20:cf:63:b3:44:54: 19:10:50:42:bd:f0:c5:d2:30:d9:4a:ea:7b:b6:9d: ab:c8:8f:d3:a8:c1:53:13:99:eb:7f:36:02:c2:6e: 96:60:2c:86:f1:22:09:a2:78:15:24:b2:d9:06:fe: 42:bc:ee:88:61:24:12:fb:6a:8a:dd:7c:9f:fc:a5: 4b:f8:94:2d:73:28:2b:89:41:9f:83:c5:0b:44:5b: 72:80:f4:28:a0:b9:bb:36:39:3a:b1:60:e2:6e:cf: 98:1f:b7:47:29:4f:ae:e0:fc:a5:ed:25:f5:46:94: 9a:67:4c:c1:ac:22:3e:d6:e3:df:a6:d5:a4:a5:3a: 6f:f9:56:59:97:d2:02:aa:3c:f7:b7:85:7d:7b:ef: a0:da:8d:49:7c:3f:39:c0:63:b9:89:ab:04:df:51: 0c:c3:a5:76:13:e2:98:4f:73:93:89:cf:88:13:4a: c1:9f:2b:85:4e:77:81:e8:ce:b7:dd:b2:6a:1f:c1: 40:6d:96:c0:06:ac:f7:42:0c:af:6d:24:e5:45:dc: 32:c9:29:1c:e7:7f:eb:f9:ba:9f:59:a1:19:eb:5f: d9:4f:e9:36:c1:21:6e:b6:52:3c:1d:7f:5b:1e:f9: a5:36:4e:a9:52:8f:3f:24:31:ef:9a:9b:2b:85:2e: 54:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:61:0C:62:5A:4A:4E:E7:BB:6E:BE:05:38:A4:94:18:69:DA:F4:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dec679c0-474a-3c4a-ab18-0d95d3eda7e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:03:37:78:12:e1:4b:90:00:49:b1:cd:1d:78:23:4c:a4:08: 0f:9b:ac:f6:2b:15:75:7e:ba:e0:9b:b5:0c:be:09:17:87:4a: fe:9f:06:d3:77:61:29:24:7e:9c:c8:de:0d:0d:05:75:9b:fb: 32:01:52:0d:20:a7:85:d6:7d:bd:5c:d6:dd:ae:9a:ec:32:2d: 30:f8:26:24:e4:c8:3a:ad:5b:8e:c9:ef:95:6a:6b:68:48:13: 91:7d:11:8c:7b:58:33:20:f6:cb:44:e2:be:a3:7f:10:e6:a2: 9c:34:ee:b9:b5:0a:1e:11:e8:31:e2:62:4a:20:34:65:e3:af: af:e4:70:ee:54:43:27:3b:8e:f7:5b:49:32:cc:63:e4:66:da: 90:53:14:55:2f:5e:3f:6d:73:a7:71:3c:e8:7e:fb:25:7a:be: 5c:0f:f3:c2:30:78:6e:f1:7a:a6:0e:de:fd:7e:34:2b:01:5e: cd:bf:6b:a3:c2:54:72:73:b4:a0:b7:63:df:49:b2:a0:df:ee: 9b:bb:29:1c:db:4a:1d:04:c4:15:aa:30:5d:9e:fd:97:f5:dc: 7a:a4:5d:00:0d:13:70:03:db:d8:cf:1a:06:83:ef:50:35:74: 76:36:18:74:c1:8e:2e:3f:26:54:a7:e8:9d:b9:63:17:31:44: 67:e9:e2:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqO65JcRjsqGyTAH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxODEwMjAxMloXDTI1MTAxNjEwMjAxMlowLzEtMCsGA1UEAxMk M2M0NzRkNWEtNDdlMi00MTExLTg4MWItMWE5ZTI4OWM1Zjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0L86cGqnB0gz2OzRFQZEFBCvfDF0jDZSup7 tp2ryI/TqMFTE5nrfzYCwm6WYCyG8SIJongVJLLZBv5CvO6IYSQS+2qK3Xyf/KVL +JQtcygriUGfg8ULRFtygPQooLm7Njk6sWDibs+YH7dHKU+u4Pyl7SX1RpSaZ0zB rCI+1uPfptWkpTpv+VZZl9ICqjz3t4V9e++g2o1JfD85wGO5iasE31EMw6V2E+KY T3OTic+IE0rBnyuFTneB6M633bJqH8FAbZbABqz3QgyvbSTlRdwyySkc53/r+bqf WaEZ61/ZT+k2wSFutlI8HX9bHvmlNk6pUo8/JDHvmpsrhS5UVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdhDGJaSk7nu26+BTiklBhp2vT4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGVjNjc5YzAtNDc0YS0z YzRhLWFiMTgtMGQ5NWQzZWRhN2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYDN3gS4UuQAEmxzR14I0ykCA+brPYrFXV+uuCbtQy+CReHSv6fBtN3 YSkkfpzI3g0NBXWb+zIBUg0gp4XWfb1c1t2umuwyLTD4JiTkyDqtW47J75Vqa2hI E5F9EYx7WDMg9stE4r6jfxDmopw07rm1Ch4R6DHiYkogNGXjr6/kcO5UQyc7jvdb STLMY+Rm2pBTFFUvXj9tc6dxPOh++yV6vlwP88IweG7xeqYO3v1+NCsBXs2/a6PC VHJztKC3Y99JsqDf7pu7KRzbSh0ExBWqMF2e/Zf13HqkXQANE3AD29jPGgaD71A1 dHY2GHTBji4/JlSn6J25YxcxRGfp4i8= -----END CERTIFICATE-----Generated at Sun Jul 20 06:11:18 2025 by rpki-client