$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ef79e838-59d8-3228-8050-1413d2bdbb7c.roa File: ef79e838-59d8-3228-8050-1413d2bdbb7c.roa (raw, json) Hash identifier: JtOYmZuZbNpBV5+9XIITAgxu6EZglpUKd/kupG27ozk= Subject key identifier: 1D:B4:FB:6B:CD:30:30:97:20:7C:E5:DB:5C:53:F3:88:D9:3E:18:C1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A8146533D2E4446BB38069680 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ef79e838-59d8-3228-8050-1413d2bdbb7c.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 202656 IP address blocks: 172.111.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:53:3d:2e:44:46:bb:38:06:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=989f6188-c51c-44fa-908f-7429ccfe4c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ab:3b:ff:9a:27:56:9b:9b:c2:5a:db:9a:8d: 37:d6:28:c7:83:19:f6:cf:1e:0d:fc:79:f8:70:bc: ea:3d:73:1f:4c:34:1d:35:40:ff:72:e8:60:88:2a: a4:9f:8c:22:e1:82:6a:95:0a:d8:29:9b:cd:20:07: 89:00:73:7f:98:04:08:51:4f:d7:da:93:0c:68:3a: 72:25:7e:71:49:68:c6:e6:74:7c:90:48:1c:e8:e1: 33:16:40:b3:dd:c3:e5:f9:eb:53:55:7e:86:c7:b4: 72:a9:3c:c3:71:a0:8a:ff:62:a5:81:7e:70:19:de: 2d:2d:03:04:6f:9a:2f:72:94:51:b5:88:d5:f8:15: e5:56:31:30:9b:7c:1a:de:4f:e7:ee:19:c2:e0:f3: df:17:1c:04:1d:9a:bb:65:6a:af:d2:4c:d1:58:37: 8b:07:10:6b:6e:8e:02:7e:07:6c:03:1e:0e:a5:99: fc:43:2e:e9:31:dc:21:ff:e0:27:43:3a:3d:8c:c7: 0f:a2:6d:69:36:45:43:87:e3:ff:19:21:0e:15:f8: b5:78:f3:f5:fb:ba:05:4e:a3:cb:70:0d:81:47:d5: bd:8c:75:7e:42:4a:1d:75:a6:4c:17:f4:e0:06:10: b6:a2:07:0e:e1:60:7a:bc:16:2a:72:c3:fc:44:3e: 91:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B4:FB:6B:CD:30:30:97:20:7C:E5:DB:5C:53:F3:88:D9:3E:18:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ef79e838-59d8-3228-8050-1413d2bdbb7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:01:2e:7d:23:9d:5e:1f:85:b7:29:c5:ff:8a:44:ae:f9:8d: 08:86:d9:12:0e:0e:c7:c7:aa:11:8d:cf:e5:7b:41:d7:ee:8f: dc:5a:69:64:ca:45:58:71:91:bc:bb:6c:dd:19:63:ec:ea:9d: 8a:08:d1:d1:26:9e:b9:bd:87:a2:f6:a9:e1:43:57:73:65:5e: 49:61:90:c4:11:0e:6d:7d:4e:93:95:14:35:16:ba:24:78:c6: 02:5c:8f:d3:51:00:00:b9:73:ec:64:99:d2:f6:ad:ec:d6:e1: d4:ae:be:e9:3b:1b:91:f4:ae:77:ed:8a:42:bc:21:db:cc:8b: 59:79:61:8f:21:61:eb:28:3b:3d:41:a9:82:a5:50:ad:de:7f: 71:3a:eb:0a:25:a0:2d:5e:45:88:9c:bc:47:7f:46:1b:94:a8: bc:20:df:68:94:c1:3b:00:91:ef:47:5e:2f:2c:1e:5d:66:64: dd:c6:39:b1:3b:38:0d:d6:0a:9d:fb:34:34:d2:9d:5c:93:73: b8:e1:df:0a:e2:54:e8:ec:a3:a2:94:08:19:f7:6e:39:76:e0: 0e:64:49:c4:69:cc:aa:c0:52:0e:b7:26:2b:c5:92:e5:d3:a7: b7:47:0d:86:7f:b6:28:03:52:04:cc:74:8f:d9:21:52:6a:65: a9:c3:d9:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRlM9LkRGuzgGloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk OTg5ZjYxODgtYzUxYy00NGZhLTkwOGYtNzQyOWNjZmU0Yzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qs7/5onVpubwlrbmo031ijHgxn2zx4N/Hn4 cLzqPXMfTDQdNUD/cuhgiCqkn4wi4YJqlQrYKZvNIAeJAHN/mAQIUU/X2pMMaDpy JX5xSWjG5nR8kEgc6OEzFkCz3cPl+etTVX6Gx7RyqTzDcaCK/2KlgX5wGd4tLQME b5ovcpRRtYjV+BXlVjEwm3wa3k/n7hnC4PPfFxwEHZq7ZWqv0kzRWDeLBxBrbo4C fgdsAx4OpZn8Qy7pMdwh/+AnQzo9jMcPom1pNkVDh+P/GSEOFfi1ePP1+7oFTqPL cA2BR9W9jHV+QkoddaZMF/TgBhC2ogcO4WB6vBYqcsP8RD6R2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB20+2vNMDCXIHzl21xT84jZPhjBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZWY3OWU4MzgtNTlkOC0z MjI4LTgwNTAtMTQxM2QyYmRiYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8BLn0jnV4fhbcpxf+KRK75jQiG2RIODsfHqhGNz+V7Qdfuj9xaaWTK RVhxkby7bN0ZY+zqnYoI0dEmnrm9h6L2qeFDV3NlXklhkMQRDm19TpOVFDUWuiR4 xgJcj9NRAAC5c+xkmdL2rezW4dSuvuk7G5H0rnftikK8IdvMi1l5YY8hYesoOz1B qYKlUK3ef3E66woloC1eRYicvEd/RhuUqLwg32iUwTsAke9HXi8sHl1mZN3GObE7 OA3WCp37NDTSnVyTc7jh3wriVOjso6KUCBn3bjl24A5kScRpzKrAUg63JivFkuXT p7dHDYZ/tigDUgTMdI/ZIVJqZanD2S0= -----END CERTIFICATE-----Generated at Thu Jul 24 04:55:00 2025 by rpki-client