$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1693deb8-1531-33fd-925a-247e8cd7c80d.roa File: 1693deb8-1531-33fd-925a-247e8cd7c80d.roa (raw, json) Hash identifier: ljQ8KejTjba0tflqu1Oy+X96b/y62pKeDx18Jko3cv4= Subject key identifier: F0:8D:9A:2F:B4:12:D3:E4:24:4D:B9:15:49:E9:AA:DC:BD:D3:DB:D3 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A103544B1FC5925FCA4322400 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1693deb8-1531-33fd-925a-247e8cd7c80d.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 212238 IP address blocks: 172.111.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:44:b1:fc:59:25:fc:a4:32:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=f675d82e-4611-42f6-840a-0a0d29454062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:21:b3:70:75:e8:e2:1b:55:7c:06:2c:5d: e7:52:91:b1:2a:df:b2:1f:be:38:7f:43:2e:53:12: c7:a8:03:34:4f:df:5c:d8:34:07:f4:6c:b1:b6:c8: dd:c3:8f:96:29:52:5d:9c:7e:54:4f:aa:cd:c6:9c: 89:bc:19:1b:03:d7:c5:39:1b:41:e2:9e:f9:7d:74: ce:1a:ee:be:b6:6e:cd:c7:98:c2:90:72:ee:c9:fa: a5:db:d6:df:da:8f:7b:38:77:ce:02:61:53:ea:c4: 4e:00:93:ef:db:5e:d7:f5:a8:ab:b2:5f:9e:57:1a: ef:c8:18:9f:1a:b1:6d:a7:f3:bc:9f:c9:94:29:fb: a0:f2:39:64:af:62:3f:ef:ef:02:ea:66:e4:8c:91: 88:34:3c:d5:ad:00:d7:56:8c:78:24:d1:df:f7:71: 6b:cd:65:03:48:05:03:af:de:b8:49:b0:32:8e:26: f1:22:58:53:55:44:48:24:78:91:d3:5f:ca:3f:bc: 66:17:49:85:2c:fc:77:fe:7f:eb:b1:02:b0:86:25: 58:a2:79:8c:73:32:e4:82:11:40:11:8d:03:49:4a: 96:b9:81:4e:40:4c:fb:4c:24:42:43:24:55:93:ea: 31:a5:e7:2f:38:49:c8:09:41:e3:e7:a3:21:d4:7b: 46:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8D:9A:2F:B4:12:D3:E4:24:4D:B9:15:49:E9:AA:DC:BD:D3:DB:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1693deb8-1531-33fd-925a-247e8cd7c80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:47:53:81:f7:65:4a:51:9c:7d:9d:a4:8c:e4:c6:9a:c7:4e: 58:3d:b3:cd:bf:f8:15:a2:44:cd:e1:ae:6d:95:31:cd:cf:94: 89:69:04:c3:1e:f4:c3:38:c7:c9:8e:41:b1:98:1b:f3:4c:ba: 53:3c:7f:d5:91:c4:5c:92:07:75:40:5b:be:46:12:5f:0d:15: ee:4d:58:ef:64:4f:74:9a:dd:bb:60:8b:b1:ea:09:47:27:85: f6:40:5c:c7:2e:07:64:ed:45:fe:fa:a1:7a:39:27:b8:3f:84: f4:6f:5d:77:cf:9d:15:9b:b7:d0:68:d3:7b:cb:1e:95:4d:4f: 0f:d9:b5:ff:d3:dd:68:11:58:9a:1f:b9:02:bd:37:1b:f8:68: 43:63:1f:ec:5f:f7:47:85:64:2c:87:f1:b6:93:b0:5d:39:25: c9:95:f2:79:bc:3c:fd:64:8a:fd:b1:e5:e0:30:9d:74:15:d1: 54:a0:5e:0f:b8:35:cf:58:79:0d:a0:62:8a:c9:6f:eb:d0:68: 6f:0b:3c:8d:a8:f0:38:2c:0a:51:d4:5d:32:3a:7c:1a:dc:6c: e3:01:61:7d:4b:7f:fb:76:55:aa:77:62:f9:e0:29:dc:b4:c4: c7:af:d4:a2:d7:7b:c3:a7:fd:d5:7f:4b:10:54:df:87:74:95: 39:12:e5:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUSx/Fkl/KQyJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk ZjY3NWQ4MmUtNDYxMS00MmY2LTg0MGEtMGEwZDI5NDU0MDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwIhs3B16OIbVXwGLF3nUpGxKt+yH744f0Mu UxLHqAM0T99c2DQH9Gyxtsjdw4+WKVJdnH5UT6rNxpyJvBkbA9fFORtB4p75fXTO Gu6+tm7Nx5jCkHLuyfql29bf2o97OHfOAmFT6sROAJPv217X9airsl+eVxrvyBif GrFtp/O8n8mUKfug8jlkr2I/7+8C6mbkjJGINDzVrQDXVox4JNHf93FrzWUDSAUD r964SbAyjibxIlhTVURIJHiR01/KP7xmF0mFLPx3/n/rsQKwhiVYonmMczLkghFA EY0DSUqWuYFOQEz7TCRCQyRVk+oxpecvOEnICUHj56Mh1HtGhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCNmi+0EtPkJE25FUnpqty909vTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTY5M2RlYjgtMTUzMS0z M2ZkLTkyNWEtMjQ3ZThjZDdjODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENHU4H3ZUpRnH2dpIzkxprHTlg9s82/+BWiRM3hrm2VMc3PlIlpBMMe 9MM4x8mOQbGYG/NMulM8f9WRxFySB3VAW75GEl8NFe5NWO9kT3Sa3btgi7HqCUcn hfZAXMcuB2TtRf76oXo5J7g/hPRvXXfPnRWbt9Bo03vLHpVNTw/Ztf/T3WgRWJof uQK9Nxv4aENjH+xf90eFZCyH8baTsF05JcmV8nm8PP1kiv2x5eAwnXQV0VSgXg+4 Nc9YeQ2gYorJb+vQaG8LPI2o8DgsClHUXTI6fBrcbOMBYX1Lf/t2Vap3YvngKdy0 xMev1KLXe8On/dV/SxBU34d0lTkS5ag= -----END CERTIFICATE-----Generated at Sat Jun 7 12:31:47 2025 by rpki-client