$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/26c66945-3c85-39bc-8825-104007c68c58.roa File: 26c66945-3c85-39bc-8825-104007c68c58.roa (raw, json) Hash identifier: N74nl+zp9SprLzmwSUn6TvMZeds82/3iYtLTfv9oj9w= Subject key identifier: F1:1D:CB:AD:C9:C6:07:A0:57:F9:C1:3C:A8:46:4C:1B:65:28:51:DA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A093AA0CC15D6EE83C2092CC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/26c66945-3c85-39bc-8825-104007c68c58.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 9009 IP address blocks: 172.111.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:a0:cc:15:d6:ee:83:c2:09:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=cc671e61-55b5-47e2-9b48-275225428ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:17:3e:cb:a9:ea:f6:c8:45:1e:d6:73:d6:54: f3:52:c6:a0:33:67:91:cf:72:8e:20:05:53:a5:8e: 48:fc:0a:96:24:d2:d0:70:1d:96:b7:14:dd:ce:1f: bf:db:36:b8:5e:c0:1c:c6:8e:d1:d3:3c:a9:ef:ca: d8:58:6d:c7:d1:18:1e:f1:a6:3a:b9:f3:b7:21:51: 52:30:97:95:76:54:0d:9f:43:96:07:24:eb:21:6d: 02:c7:fb:65:30:9a:a8:a9:cb:b0:72:5c:ba:e3:61: df:7c:9d:a0:c2:2a:75:f8:53:e7:a7:45:33:74:93: e3:ea:ee:07:c1:4a:4f:f7:74:69:4c:3b:17:c5:fe: aa:13:14:71:bd:df:9a:70:71:91:91:b0:0f:33:d9: 28:c4:be:b4:77:a1:e2:a6:f9:4a:69:e6:a9:6f:92: de:ed:1e:50:a7:7e:df:f7:66:f5:ab:5e:42:55:72: c0:01:04:65:44:29:25:c9:72:5c:c9:96:4b:7b:44: 8d:44:60:b9:9e:53:a3:e3:16:f1:43:a2:ee:70:f5: be:80:4a:0d:28:d7:16:af:e4:d2:16:fb:48:15:2d: 50:65:2b:18:a8:1d:e7:86:7f:c5:f2:95:7e:bd:26: e9:ee:45:9e:fa:ae:d2:69:93:79:e3:de:cd:af:47: 9f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1D:CB:AD:C9:C6:07:A0:57:F9:C1:3C:A8:46:4C:1B:65:28:51:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/26c66945-3c85-39bc-8825-104007c68c58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:7d:a3:2b:9e:87:2a:a8:6a:47:74:8b:f8:8d:90:ce:86:88: 2e:bc:e4:97:94:c4:2b:31:09:f5:c3:02:31:23:f5:40:ca:c1: 7d:8f:25:98:02:84:f7:f5:ee:35:7a:d8:ed:96:2d:45:8c:e2: 69:62:96:22:3b:c5:64:5b:5f:45:9f:7c:76:d6:7e:34:cd:60: 8f:54:35:85:a0:5a:23:6e:84:40:95:82:fa:6e:41:fe:64:22: a7:3c:03:44:15:cc:28:f2:99:77:7d:af:6e:22:24:c5:d0:2d: f9:ff:14:11:fd:05:7f:c6:42:dd:04:16:d0:09:92:67:75:c9: 44:14:94:35:44:47:08:71:f6:11:20:85:93:16:c4:f5:c8:d0: a8:ed:c7:95:9e:f2:07:3f:48:b0:32:c2:bd:8f:a9:b0:ef:cf: 12:4b:58:cd:34:cc:16:a9:24:36:b0:d9:26:10:22:71:d4:52: f7:36:ec:64:8e:b8:76:92:5c:93:17:8f:94:3e:27:f5:32:2b: 0b:ee:0e:dc:e7:fd:49:cf:e3:11:2e:09:80:c2:6d:d7:32:c1: 03:af:16:23:4c:5b:c5:3d:bf:a4:84:37:0c:94:79:d1:c2:ca: 63:0b:14:8f:45:54:36:12:f2:fb:44:90:2a:fc:c8:0b:c5:89: 47:26:86:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOqDMFdbug8IJLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk Y2M2NzFlNjEtNTViNS00N2UyLTliNDgtMjc1MjI1NDI4ZWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRc+y6nq9shFHtZz1lTzUsagM2eRz3KOIAVT pY5I/AqWJNLQcB2WtxTdzh+/2za4XsAcxo7R0zyp78rYWG3H0Rge8aY6ufO3IVFS MJeVdlQNn0OWByTrIW0Cx/tlMJqoqcuwcly642HffJ2gwip1+FPnp0UzdJPj6u4H wUpP93RpTDsXxf6qExRxvd+acHGRkbAPM9koxL60d6HipvlKaeapb5Le7R5Qp37f 92b1q15CVXLAAQRlRCklyXJcyZZLe0SNRGC5nlOj4xbxQ6LucPW+gEoNKNcWr+TS FvtIFS1QZSsYqB3nhn/F8pV+vSbp7kWe+q7SaZN5497Nr0ef/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEdy63JxgegV/nBPKhGTBtlKFHaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjZjNjY5NDUtM2M4NS0z OWJjLTg4MjUtMTA0MDA3YzY4YzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADF9oyuehyqoakd0i/iNkM6GiC685JeUxCsxCfXDAjEj9UDKwX2PJZgC hPf17jV62O2WLUWM4mliliI7xWRbX0WffHbWfjTNYI9UNYWgWiNuhECVgvpuQf5k Iqc8A0QVzCjymXd9r24iJMXQLfn/FBH9BX/GQt0EFtAJkmd1yUQUlDVERwhx9hEg hZMWxPXI0Kjtx5We8gc/SLAywr2PqbDvzxJLWM00zBapJDaw2SYQInHUUvc27GSO uHaSXJMXj5Q+J/UyKwvuDtzn/UnP4xEuCYDCbdcywQOvFiNMW8U9v6SENwyUedHC ymMLFI9FVDYS8vtEkCr8yAvFiUcmhnI= -----END CERTIFICATE-----Generated at Tue Jun 3 10:22:14 2025 by rpki-client