$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa File: 33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa (raw, json) Hash identifier: gHk2qKFO230Knc6/7plwRUwWs9jOrBEZ7gQ6n+kRv1I= Subject key identifier: 38:2B:A8:B1:9F:3E:78:B5:C5:DC:62:44:83:39:06:F5:82:01:55:4D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A093AA062F1A2E2865D4B0380 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 9009 IP address blocks: 172.111.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:a0:62:f1:a2:e2:86:5d:4b:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=7713a552-23b2-4c2d-ae28-f9267417cac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e4:a8:b0:98:7d:e8:99:05:54:e5:8c:89:96: e0:90:4e:ac:72:11:e4:44:39:2b:ff:5d:54:aa:56: dd:99:75:88:f4:80:20:9b:9b:0d:3a:28:0b:d4:22: 96:bd:1c:cf:c2:9d:3f:ec:51:00:08:a4:6c:5b:a3: cc:5c:0a:35:d0:a5:dc:59:87:ed:81:f9:35:2c:34: e7:b0:a3:f9:12:b2:09:0f:6a:dc:87:15:7f:b4:47: 0a:bb:95:a8:39:97:3e:16:42:15:d1:f2:d4:44:c3: 63:d6:17:e3:02:7c:2f:37:b3:de:7f:98:7f:cf:20: ce:57:ad:dc:13:9a:6c:da:27:4e:3d:c9:68:29:00: fe:dd:74:f4:c1:fd:a9:2a:a9:6a:2b:39:15:48:7c: c6:c8:63:5e:ad:91:18:31:b2:2f:2a:8b:a6:4f:f3: 0e:5f:7d:48:a3:13:ea:95:57:ae:ee:57:dd:ba:eb: ff:b2:25:cf:5e:62:a8:8c:db:a3:b3:0a:0c:b8:ae: e2:9a:5b:ff:c2:e5:04:0b:d7:ba:5d:03:83:40:b2: 47:f3:75:7a:9a:21:3d:07:ac:0d:38:5e:e4:68:e1: 89:02:3a:a9:24:37:c9:d2:ac:76:73:21:d8:a6:a4: 6d:2a:7d:c4:98:52:d2:20:1b:9a:29:db:80:2d:2a: c8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2B:A8:B1:9F:3E:78:B5:C5:DC:62:44:83:39:06:F5:82:01:55:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d2:8a:e1:ed:31:a5:e3:a2:be:99:d9:a1:6b:9f:a7:78:ba: bf:78:88:9c:f5:2d:f7:97:cd:28:36:5c:a4:a7:44:e7:25:bf: 03:3c:d2:f4:0f:71:04:e8:fa:85:cd:3c:6c:5b:56:35:8d:e9: aa:e1:8e:b8:b4:ea:61:b5:85:98:34:1f:c2:b8:1d:c0:f0:42: 5a:f5:95:e7:02:de:6d:7e:e4:97:85:b4:d7:aa:34:2f:71:c1: 2a:71:87:c9:5c:e7:fd:44:df:3d:79:88:13:45:71:ba:cd:ae: 6b:76:b5:e0:26:89:59:8f:2f:97:c2:3f:3b:67:d5:b3:a3:8d: 7c:07:b2:59:e1:c6:80:1f:8b:64:44:30:ce:b0:a6:59:c8:8c: c0:fa:da:87:4b:0d:2b:b9:3f:71:9a:28:46:9f:8d:2b:14:a5: 57:91:aa:23:a7:33:d2:5d:bd:aa:b7:b2:08:43:4c:34:69:bf: c5:ac:dd:f3:0d:20:cb:4d:5a:73:8e:db:62:7e:12:b6:4c:a1: 98:0a:5e:68:64:cb:35:3d:bb:65:55:fa:7d:4f:e0:e7:15:d9: c2:bb:43:8b:25:fc:00:fc:1d:0c:43:1d:ad:43:64:f4:9f:e0: 1f:c4:95:48:f6:7b:b9:7f:b5:41:2f:a2:7b:12:89:11:52:c1: 69:40:c9:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOqBi8aLihl1LA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk NzcxM2E1NTItMjNiMi00YzJkLWFlMjgtZjkyNjc0MTdjYWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOSosJh96JkFVOWMiZbgkE6schHkRDkr/11U qlbdmXWI9IAgm5sNOigL1CKWvRzPwp0/7FEACKRsW6PMXAo10KXcWYftgfk1LDTn sKP5ErIJD2rchxV/tEcKu5WoOZc+FkIV0fLURMNj1hfjAnwvN7Pef5h/zyDOV63c E5ps2idOPcloKQD+3XT0wf2pKqlqKzkVSHzGyGNerZEYMbIvKoumT/MOX31IoxPq lVeu7lfduuv/siXPXmKojNujswoMuK7imlv/wuUEC9e6XQODQLJH83V6miE9B6wN OF7kaOGJAjqpJDfJ0qx2cyHYpqRtKn3EmFLSIBuaKduALSrI+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgrqLGfPni1xdxiRIM5BvWCAVVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzNhMGZmMzItYmFiZS0z YmRmLTg0NDEtYmIxZTgxYjBhOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7SiuHtMaXjor6Z2aFrn6d4ur94iJz1LfeXzSg2XKSnROclvwM80vQP cQTo+oXNPGxbVjWN6arhjri06mG1hZg0H8K4HcDwQlr1lecC3m1+5JeFtNeqNC9x wSpxh8lc5/1E3z15iBNFcbrNrmt2teAmiVmPL5fCPztn1bOjjXwHslnhxoAfi2RE MM6wplnIjMD62odLDSu5P3GaKEafjSsUpVeRqiOnM9Jdvaq3sghDTDRpv8Ws3fMN IMtNWnOO22J+ErZMoZgKXmhkyzU9u2VV+n1P4OcV2cK7Q4sl/AD8HQxDHa1DZPSf 4B/ElUj2e7l/tUEvonsSiRFSwWlAyTM= -----END CERTIFICATE-----Generated at Tue Jun 3 10:20:19 2025 by rpki-client