$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/39ea8c12-f591-38bb-b8bd-e76b9f0f7021.roa File: 39ea8c12-f591-38bb-b8bd-e76b9f0f7021.roa (raw, json) Hash identifier: QApGypHD5qSrNPuH5B7VpvIHYz9y2E7qWXhQfcK0K68= Subject key identifier: 9E:49:AD:E1:45:70:90:74:DD:6D:BE:3B:85:4D:82:97:2D:10:9F:7B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A066F12A1A29BDA377D1ED720 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/39ea8c12-f591-38bb-b8bd-e76b9f0f7021.roa Signing time: Fri 30 May 2025 12:59:25 +0000 ROA not before: Fri 30 May 2025 12:59:25 +0000 ROA not after: Thu 28 Aug 2025 12:59:25 +0000 asID: 208485 IP address blocks: 172.111.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:06:6f:12:a1:a2:9b:da:37:7d:1e:d7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 30 12:59:25 2025 GMT Not After : Aug 28 12:59:25 2025 GMT Subject: CN=8081fbe4-64de-406c-8d05-45ab01667298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:8c:66:ba:0a:15:3a:54:c1:2c:f1:be:20: 6c:16:1d:45:df:15:40:79:e0:1e:7a:38:69:96:5b: 81:a9:25:f8:d3:99:a3:55:1d:05:90:a1:02:a5:d1: 45:d2:68:29:f5:fd:8c:1c:da:31:d3:da:ce:bf:da: fb:99:45:03:fb:4b:48:bd:29:01:df:05:d4:5c:62: ac:ee:83:12:f5:2f:ef:9b:d1:70:86:6a:59:dc:c7: 8a:14:29:04:a7:1c:06:fc:f7:a7:ef:43:8e:f3:b6: 0c:f5:0d:ac:bd:81:8b:0f:4e:a1:cc:6a:ba:2e:0c: 8b:d8:c1:2f:d3:62:a6:0c:43:c6:8f:7d:27:ab:52: a4:1c:83:1a:f5:c5:e4:b2:16:62:f6:8b:94:a0:67: f7:de:e5:8c:3e:aa:1b:bc:b5:7b:0d:bc:4c:75:ff: e2:15:42:fc:09:90:89:09:b2:6a:2f:4e:03:01:ce: 9b:c9:da:0f:37:d0:91:bd:66:55:67:9d:9c:a2:23: 7c:88:c6:eb:14:c9:ee:99:84:67:ca:0c:b5:ef:e6: e2:b5:07:5c:a7:59:4f:91:5b:03:59:df:c3:c4:39: 38:92:0b:1f:09:33:79:52:90:fd:b1:fd:d1:b2:03: b3:64:f9:5c:28:b9:d3:50:4c:28:38:9d:cf:07:30: 74:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:49:AD:E1:45:70:90:74:DD:6D:BE:3B:85:4D:82:97:2D:10:9F:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/39ea8c12-f591-38bb-b8bd-e76b9f0f7021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:18:dc:a6:c9:d7:c9:cb:00:11:52:bd:99:f6:d3:ec:57:ed: 59:a7:7b:ac:d3:6f:2f:6b:78:bb:57:5f:38:85:4c:df:31:22: 52:7d:6e:ea:28:72:6f:98:05:97:07:5b:b9:94:68:52:d8:c2: 23:5c:6f:c2:72:40:06:aa:63:c7:22:f9:e9:44:9c:09:ab:3d: bf:fa:cf:b0:1d:1f:1e:8c:5e:e4:1c:43:6a:2b:be:22:84:66: cb:60:73:eb:44:48:8c:25:f9:99:85:d7:4a:7b:1b:17:8b:d6: 29:ed:54:56:62:83:7b:b9:1f:3c:d6:f9:11:11:32:a2:bc:44: 6a:2a:b0:7b:1b:93:a9:2f:85:93:ef:93:3b:a2:09:4a:84:0d: 36:38:82:cd:02:02:11:85:d1:15:9e:2b:0c:b1:d7:24:ef:05: b1:f7:c7:7f:0f:19:81:74:83:29:25:dd:a0:b4:11:ae:aa:cb: 06:80:51:e4:2f:bc:44:22:0c:da:27:ff:34:29:a4:71:f5:19: b2:82:26:a2:78:e3:ae:66:a1:c4:c6:5e:de:a9:9d:26:2e:2e: 76:77:cf:72:cc:c1:37:02:b6:87:9d:ae:c5:7b:62:40:b1:c2: b7:74:5c:72:79:66:f5:e4:1d:b7:cb:f1:d3:db:c0:a7:67:42: a2:fd:9b:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoGbxKhopvaN30e1yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUzMDEyNTkyNVoXDTI1MDgyODEyNTkyNVowLzEtMCsGA1UEAxMk ODA4MWZiZTQtNjRkZS00MDZjLThkMDUtNDVhYjAxNjY3Mjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6mMZroKFTpUwSzxviBsFh1F3xVAeeAeejhp lluBqSX405mjVR0FkKECpdFF0mgp9f2MHNox09rOv9r7mUUD+0tIvSkB3wXUXGKs 7oMS9S/vm9FwhmpZ3MeKFCkEpxwG/Pen70OO87YM9Q2svYGLD06hzGq6LgyL2MEv 02KmDEPGj30nq1KkHIMa9cXkshZi9ouUoGf33uWMPqobvLV7DbxMdf/iFUL8CZCJ CbJqL04DAc6bydoPN9CRvWZVZ52coiN8iMbrFMnumYRnygy17+bitQdcp1lPkVsD Wd/DxDk4kgsfCTN5UpD9sf3RsgOzZPlcKLnTUEwoOJ3PBzB0+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5JreFFcJB03W2+O4VNgpctEJ97MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzllYThjMTItZjU5MS0z OGJiLWI4YmQtZTc2YjlmMGY3MDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAY3KbJ18nLABFSvZn20+xX7Vmne6zTby9reLtXXziFTN8xIlJ9buoo cm+YBZcHW7mUaFLYwiNcb8JyQAaqY8ci+elEnAmrPb/6z7AdHx6MXuQcQ2orviKE Zstgc+tESIwl+ZmF10p7GxeL1intVFZig3u5HzzW+RERMqK8RGoqsHsbk6kvhZPv kzuiCUqEDTY4gs0CAhGF0RWeKwyx1yTvBbH3x38PGYF0gykl3aC0Ea6qywaAUeQv vEQiDNon/zQppHH1GbKCJqJ4465mocTGXt6pnSYuLnZ3z3LMwTcCtoedrsV7YkCx wrd0XHJ5ZvXkHbfL8dPbwKdnQqL9m+M= -----END CERTIFICATE-----Generated at Thu Jun 5 18:50:09 2025 by rpki-client