$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa File: 2dd78db9-6d0c-3114-a64a-769cedc85549.roa (raw, json) Hash identifier: w1pONasSM8SWcaELRzJnKegZbzXhONzgy6TESiBRXAQ= Subject key identifier: 70:B4:24:3B:56:68:8A:F8:06:75:25:B9:A6:A0:0C:F8:F1:5F:31:8B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849D85F90477E2F75232784B800 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 9009 IP address blocks: 172.111.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:90:47:7e:2f:75:23:27:84:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=34df9c98-ad40-4df4-9b50-25d828ba24d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f9:5b:a6:db:11:63:f1:61:75:61:df:5c:9c: c7:5b:3a:3f:9e:a8:d3:ab:3d:1c:37:51:5e:4e:82: 12:3c:ce:aa:3b:7b:c4:ef:41:16:90:12:cb:ab:54: 19:2f:00:c6:28:54:ba:76:08:c4:59:19:4e:d2:f9: 81:47:06:6c:1e:17:d5:62:63:2d:31:46:4c:9b:0d: bd:04:2e:6b:f5:14:54:a1:d5:f4:5b:95:38:8c:61: 78:b9:e4:2b:f1:86:54:cf:2d:22:be:96:43:41:12: d3:89:5d:5b:40:88:49:73:e3:96:71:50:71:5e:bc: 8c:68:60:58:38:1c:2f:3e:a0:25:2d:fd:6d:39:4e: e8:8b:a4:8c:d4:03:93:21:19:f3:9e:9c:9b:83:31: ac:1c:92:9a:86:a5:fe:93:50:2a:4b:7a:1f:ed:53: 82:20:b6:4d:ea:1a:73:48:d7:cd:e5:1d:e7:60:e4: 94:c4:48:4a:1a:e0:d1:7b:51:1b:00:e5:ba:65:0d: 72:e4:9d:f4:82:6b:1c:66:cc:49:8e:d2:79:2b:35: c2:7f:8c:e6:7f:ab:2c:ce:a7:17:81:f7:9e:e5:27: 79:e9:3a:10:dc:5a:07:6b:ae:08:16:a0:37:65:e9: 8b:a2:87:26:9b:3c:de:76:6e:53:b4:4d:fc:68:12: ba:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B4:24:3B:56:68:8A:F8:06:75:25:B9:A6:A0:0C:F8:F1:5F:31:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:a9:99:ab:30:e8:6c:15:99:f9:d5:44:13:84:52:db:bb:5a: 84:63:63:ed:b3:37:d6:e3:29:a3:85:ea:02:c0:b5:ce:34:85: 45:54:d6:5f:e1:b3:6d:b9:c8:fe:ed:1d:e7:09:18:f6:ed:53: 98:ae:30:c7:b4:fb:d4:eb:4b:34:19:25:cc:6f:38:e1:05:34: 01:66:4f:40:b6:0a:2c:62:13:ac:3f:09:0f:59:92:0e:aa:61: cf:19:0b:d0:d8:ae:4a:a3:30:19:21:16:9b:42:7c:a8:56:95: a6:6f:a7:d7:f2:e9:31:e3:5f:ec:ae:5a:ba:0f:9d:bb:c4:33: 92:15:86:fa:f7:43:58:fe:e2:75:5d:d1:7a:5a:c4:a5:89:85: 49:ab:82:8b:96:a0:35:16:fd:5f:40:9d:48:cc:65:ea:2d:c1: cd:65:b9:11:37:33:69:7c:4e:80:e3:a6:08:98:e5:cc:cf:d6: 9a:4b:d1:01:ff:0b:31:22:31:5b:52:04:fe:5d:20:e7:44:e7: c4:cf:da:41:0f:aa:81:68:00:a1:2f:ff:15:49:d5:4f:59:2c: b9:02:39:89:2e:46:95:f6:37:e6:0d:46:37:55:30:24:9f:af: 94:37:a5:5c:6f:15:4d:70:91:9b:82:7a:53:b0:9f:72:32:0c: b6:74:67:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5BHfi91IyeEuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MzRkZjljOTgtYWQ0MC00ZGY0LTliNTAtMjVkODI4YmEyNGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhflbptsRY/FhdWHfXJzHWzo/nqjTqz0cN1Fe ToISPM6qO3vE70EWkBLLq1QZLwDGKFS6dgjEWRlO0vmBRwZsHhfVYmMtMUZMmw29 BC5r9RRUodX0W5U4jGF4ueQr8YZUzy0ivpZDQRLTiV1bQIhJc+OWcVBxXryMaGBY OBwvPqAlLf1tOU7oi6SM1AOTIRnznpybgzGsHJKahqX+k1AqS3of7VOCILZN6hpz SNfN5R3nYOSUxEhKGuDRe1EbAOW6ZQ1y5J30gmscZsxJjtJ5KzXCf4zmf6sszqcX gfee5Sd56ToQ3FoHa64IFqA3ZemLoocmmzzedm5TtE38aBK6rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHC0JDtWaIr4BnUluaagDPjxXzGLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmRkNzhkYjktNmQwYy0z MTE0LWE2NGEtNzY5Y2VkYzg1NTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKpmasw6GwVmfnVRBOEUtu7WoRjY+2zN9bjKaOF6gLAtc40hUVU1l/h s225yP7tHecJGPbtU5iuMMe0+9TrSzQZJcxvOOEFNAFmT0C2CixiE6w/CQ9Zkg6q Yc8ZC9DYrkqjMBkhFptCfKhWlaZvp9fy6THjX+yuWroPnbvEM5IVhvr3Q1j+4nVd 0XpaxKWJhUmrgouWoDUW/V9AnUjMZeotwc1luRE3M2l8ToDjpgiY5czP1ppL0QH/ CzEiMVtSBP5dIOdE58TP2kEPqoFoAKEv/xVJ1U9ZLLkCOYkuRpX2N+YNRjdVMCSf r5Q3pVxvFU1wkZuCelOwn3IyDLZ0Z+g= -----END CERTIFICATE-----Generated at Tue Jun 3 10:16:26 2025 by rpki-client