$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f135a6c0-f413-3403-8690-6cddb169d2cb.roa File: f135a6c0-f413-3403-8690-6cddb169d2cb.roa (raw, json) Hash identifier: ZIdhsbCNdCLMQ09kB73aqQmspzHTFDybM/J+ynyjtpE= Subject key identifier: E1:BF:BB:CD:94:ED:76:6B:A8:DF:40:97:19:37:2B:09:C3:54:2C:0F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849E22531D0594B1B40B12DB000 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f135a6c0-f413-3403-8690-6cddb169d2cb.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 3223 IP address blocks: 172.111.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:31:d0:59:4b:1b:40:b1:2d:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=e89eda7b-4693-4db8-b0b5-130263af9718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5a:94:af:ad:91:24:d2:a2:8f:16:81:00:57: f2:da:d0:d7:b8:5e:73:28:b5:81:49:40:b0:f5:7f: 20:e1:3e:21:8f:37:2f:42:c0:fc:63:14:91:d7:1d: f9:a7:71:fe:4a:0f:ea:3c:c8:fe:9b:a8:5b:89:93: 54:e4:e7:4d:2b:05:68:13:da:8b:72:22:0c:43:c3: 33:ef:87:19:b9:9d:51:50:de:f5:0a:e3:03:c0:88: e9:cf:a9:d4:61:67:3f:52:40:af:02:6d:8a:8d:d1: 50:40:a5:38:25:ad:9b:df:35:51:73:2d:0d:bd:42: 56:c6:ce:bc:79:9b:77:cf:3a:fb:17:95:73:99:25: a2:0b:b9:04:8e:22:bc:4e:be:b1:80:91:4c:2a:9d: 60:30:e6:08:00:3c:3f:b9:1b:a5:cf:b1:cf:a0:72: b5:91:fa:a8:c8:95:16:9b:bc:b6:8f:d2:85:4c:f0: 32:d5:0a:ed:ea:0b:a1:32:c4:3b:c1:52:c7:7f:6b: f0:62:7e:af:c7:52:16:c8:18:3d:a3:80:03:8b:0b: 26:b1:dd:63:4d:94:f7:a5:fb:2a:8e:82:78:2d:d9: 4d:ab:f8:ec:fa:7a:79:d5:86:3d:98:e9:d4:e5:9f: cd:ac:33:c4:68:6b:dc:86:0b:39:a6:6c:eb:87:37: c4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BF:BB:CD:94:ED:76:6B:A8:DF:40:97:19:37:2B:09:C3:54:2C:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f135a6c0-f413-3403-8690-6cddb169d2cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:cd:aa:f7:43:0c:c3:73:9d:9b:13:99:8f:46:36:52:ed:21: 8d:38:ab:59:b8:f9:eb:57:e0:76:c6:e3:fa:ee:75:b0:b5:16: 28:44:f3:f2:13:a4:18:26:f6:a9:f0:6b:97:29:d5:ee:68:48: c3:8b:1b:8a:64:dd:c3:5c:29:2a:18:67:63:08:d3:cc:bd:7f: 40:ec:ef:65:7b:ae:2d:6e:d1:3c:a2:35:20:05:a5:54:c3:4d: 8f:08:40:e2:48:1e:8c:04:d6:39:26:cc:b2:d4:6f:af:b3:47: 83:bd:63:63:63:34:1d:72:8d:bb:d6:c6:49:4c:ae:58:f7:16: 48:e1:c7:6b:a1:d0:ef:be:46:2d:81:92:22:34:6c:ce:9b:88: 4d:28:bb:f9:13:13:30:16:0c:d2:a5:ae:f3:72:a7:87:6e:3c: ca:ea:4a:b9:a1:21:29:02:4a:21:e6:a8:47:22:94:4b:0e:2a: 1f:10:97:05:af:be:ec:81:67:af:df:2b:bf:19:da:bf:73:e9: b2:12:62:e2:c7:2c:d9:3c:8e:dd:14:0f:a7:64:90:11:18:cd: a9:59:4a:1a:eb:ad:59:5d:21:cc:b9:9f:cd:13:9c:61:cd:7c: 61:17:57:2c:18:95:bb:42:b4:63:34:51:41:52:5a:1e:26:80: 6b:13:d1:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJTHQWUsbQLEtsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk ZTg5ZWRhN2ItNDY5My00ZGI4LWIwYjUtMTMwMjYzYWY5NzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVqUr62RJNKijxaBAFfy2tDXuF5zKLWBSUCw 9X8g4T4hjzcvQsD8YxSR1x35p3H+Sg/qPMj+m6hbiZNU5OdNKwVoE9qLciIMQ8Mz 74cZuZ1RUN71CuMDwIjpz6nUYWc/UkCvAm2KjdFQQKU4Ja2b3zVRcy0NvUJWxs68 eZt3zzr7F5VzmSWiC7kEjiK8Tr6xgJFMKp1gMOYIADw/uRulz7HPoHK1kfqoyJUW m7y2j9KFTPAy1Qrt6guhMsQ7wVLHf2vwYn6vx1IWyBg9o4ADiwsmsd1jTZT3pfsq joJ4LdlNq/js+np51YY9mOnU5Z/NrDPEaGvchgs5pmzrhzfEIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOG/u82U7XZrqN9Alxk3KwnDVCwPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjEzNWE2YzAtZjQxMy0z NDAzLTg2OTAtNmNkZGIxNjlkMmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfNqvdDDMNznZsTmY9GNlLtIY04q1m4+etX4HbG4/rudbC1FihE8/IT pBgm9qnwa5cp1e5oSMOLG4pk3cNcKSoYZ2MI08y9f0Ds72V7ri1u0TyiNSAFpVTD TY8IQOJIHowE1jkmzLLUb6+zR4O9Y2NjNB1yjbvWxklMrlj3Fkjhx2uh0O++Ri2B kiI0bM6biE0ou/kTEzAWDNKlrvNyp4duPMrqSrmhISkCSiHmqEcilEsOKh8QlwWv vuyBZ6/fK78Z2r9z6bISYuLHLNk8jt0UD6dkkBEYzalZShrrrVldIcy5n80TnGHN fGEXVywYlbtCtGM0UUFSWh4mgGsT0Us= -----END CERTIFICATE-----Generated at Sun Jul 20 14:58:13 2025 by rpki-client