$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ff09bc2e-8e85-3523-af4c-a0972f58a926.roa File: ff09bc2e-8e85-3523-af4c-a0972f58a926.roa (raw, json) Hash identifier: gBwGlP+bFEm4cE7DluZDYNsPw5P+/kXOZGQIMWNoSMU= Subject key identifier: 50:4E:B4:38:88:9F:38:AE:3A:7B:D2:D8:85:B0:B4:CD:EA:A4:D0:33 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A8EED90E3F7925D18C87B3580 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ff09bc2e-8e85-3523-af4c-a0972f58a926.roa Signing time: Fri 18 Jul 2025 10:24:13 +0000 ROA not before: Fri 18 Jul 2025 10:24:13 +0000 ROA not after: Thu 16 Oct 2025 10:24:13 +0000 asID: 55154 IP address blocks: 172.111.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8e:ed:90:e3:f7:92:5d:18:c8:7b:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 18 10:24:13 2025 GMT Not After : Oct 16 10:24:13 2025 GMT Subject: CN=314751b7-505b-472d-b101-cf3a06e46b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:89:eb:ab:98:0f:99:18:5d:25:9b:a4:50:ea: b1:eb:fb:b2:8e:b8:da:06:26:be:ef:31:7d:2b:14: de:d2:70:f0:cf:b8:55:28:93:1d:3d:92:b0:d0:b8: bb:6b:89:15:10:13:90:e6:8a:f3:7f:7e:6c:62:31: 0b:03:16:c9:0d:8e:1a:1b:36:41:8e:74:22:75:9b: 05:ad:b1:12:f2:83:00:08:9d:8a:c9:be:44:02:bc: 16:3e:b2:cb:60:6b:45:34:b1:df:8b:14:31:cb:28: 99:fb:08:2e:d3:24:f1:d5:4e:8c:21:be:16:85:79: cc:8d:2c:41:9d:45:ad:0b:f4:16:98:cd:f0:04:c6: ad:1a:39:5b:47:19:0b:48:33:f0:9a:09:95:7d:81: 6f:66:42:68:0b:b5:2f:06:32:a4:e5:aa:4e:aa:8f: 17:85:c4:1a:8f:d5:68:3d:e2:be:8b:b2:ec:7d:95: 71:38:66:63:8f:67:9b:24:17:f1:c2:44:db:ce:a2: bb:39:fb:30:d3:54:12:ba:e2:67:1e:94:08:01:78: 3c:e7:4c:e1:10:66:45:5e:3f:0b:23:eb:e2:4a:40: 70:ae:f8:65:2a:2d:0f:75:83:9e:dc:53:d0:29:88: c1:82:74:2d:05:a9:17:ad:a0:9a:9d:72:f5:a9:ec: 4c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4E:B4:38:88:9F:38:AE:3A:7B:D2:D8:85:B0:B4:CD:EA:A4:D0:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ff09bc2e-8e85-3523-af4c-a0972f58a926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:61:02:49:f7:ef:4a:a6:e4:4d:c4:a8:0c:af:f1:19:3d:a0: 7b:26:62:fe:3b:37:0f:54:89:fb:8a:bb:83:df:14:be:4f:aa: bd:d6:8b:cb:f5:9b:70:70:0c:16:85:88:97:74:f9:10:63:21: c6:76:15:91:ca:13:5c:35:d2:ed:59:4d:f8:67:04:54:8f:ab: 0a:96:1e:c0:65:86:4c:26:9d:56:07:c6:13:5f:8e:21:89:5e: 40:06:d6:72:e0:ad:fa:3f:11:60:5c:d7:2d:ef:31:f8:70:47: ad:50:8f:c6:64:a7:92:33:56:46:64:7f:54:ad:25:3f:4a:e5: 7a:ec:12:c6:fc:6f:4d:cd:62:8f:d8:a5:e9:d2:1a:31:8e:0d: 8f:e4:af:82:90:b7:59:1a:a4:24:a1:fd:93:6f:21:9c:10:da: 70:fd:18:6c:59:b1:70:80:58:e1:d2:38:12:e4:39:e3:07:ff: 4f:c9:4e:6e:72:c0:07:fc:68:8c:10:73:59:6d:09:ff:e2:de: 93:84:fb:48:2a:43:41:12:72:fc:ae:b3:87:55:09:e7:b6:28: 98:6d:be:f3:a0:cc:c4:ba:b3:65:b7:65:21:66:f5:c0:65:15: fd:98:27:16:61:bf:70:7e:49:f0:d0:71:02:59:61:84:2c:03: b5:dd:bd:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqO7ZDj95JdGMh7NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxODEwMjQxM1oXDTI1MTAxNjEwMjQxM1owLzEtMCsGA1UEAxMk MzE0NzUxYjctNTA1Yi00NzJkLWIxMDEtY2YzYTA2ZTQ2YjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24nrq5gPmRhdJZukUOqx6/uyjrjaBia+7zF9 KxTe0nDwz7hVKJMdPZKw0Li7a4kVEBOQ5orzf35sYjELAxbJDY4aGzZBjnQidZsF rbES8oMACJ2Kyb5EArwWPrLLYGtFNLHfixQxyyiZ+wgu0yTx1U6MIb4WhXnMjSxB nUWtC/QWmM3wBMatGjlbRxkLSDPwmgmVfYFvZkJoC7UvBjKk5apOqo8XhcQaj9Vo PeK+i7LsfZVxOGZjj2ebJBfxwkTbzqK7Ofsw01QSuuJnHpQIAXg850zhEGZFXj8L I+viSkBwrvhlKi0PdYOe3FPQKYjBgnQtBakXraCanXL1qexMyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBOtDiInziuOnvS2IWwtM3qpNAzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmYwOWJjMmUtOGU4NS0z NTIzLWFmNGMtYTA5NzJmNThhOTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJhAkn370qm5E3EqAyv8Rk9oHsmYv47Nw9UifuKu4PfFL5Pqr3Wi8v1 m3BwDBaFiJd0+RBjIcZ2FZHKE1w10u1ZTfhnBFSPqwqWHsBlhkwmnVYHxhNfjiGJ XkAG1nLgrfo/EWBc1y3vMfhwR61Qj8Zkp5IzVkZkf1StJT9K5XrsEsb8b03NYo/Y penSGjGODY/kr4KQt1kapCSh/ZNvIZwQ2nD9GGxZsXCAWOHSOBLkOeMH/0/JTm5y wAf8aIwQc1ltCf/i3pOE+0gqQ0EScvyus4dVCee2KJhtvvOgzMS6s2W3ZSFm9cBl Ff2YJxZhv3B+SfDQcQJZYYQsA7XdveA= -----END CERTIFICATE-----Generated at Sun Jul 20 06:11:20 2025 by rpki-client