$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d44ec8a-b582-344c-8805-a64b89c845f0.roa File: 3d44ec8a-b582-344c-8805-a64b89c845f0.roa (raw, json) Hash identifier: V34KkMh90b3l1dezz2f4tre01G/ReHayTACfF/jXIz8= Subject key identifier: 5A:C0:13:EA:A5:AC:BE:C2:0C:D6:F1:A3:00:D6:DA:4A:B9:DE:B5:4D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849E225320944FE85F0EBAB3A80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d44ec8a-b582-344c-8805-a64b89c845f0.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 9009 IP address blocks: 172.111.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:32:09:44:fe:85:f0:eb:ab:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=6afeb12f-fcbf-40a7-8696-82f7c1fb3a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c0:42:79:a6:b5:3d:93:6d:21:85:2c:55:db: a9:de:cc:d7:7f:77:5d:70:40:47:85:92:87:f4:34: 33:2c:93:7d:ee:47:aa:f9:54:2e:15:b0:a7:41:0d: 19:18:b0:5f:e6:d8:cf:35:b0:77:2f:39:e5:a5:df: aa:23:6d:c3:6c:52:07:29:cc:94:80:f4:fd:55:2d: d6:a0:5b:87:88:fb:43:8a:36:71:bb:35:33:39:82: be:83:bf:5c:f5:23:51:85:97:14:11:64:87:5e:4b: 08:7c:6f:96:94:f3:25:86:51:d5:22:ab:3a:aa:bf: dc:00:4f:23:e9:f7:2e:e4:89:0c:ac:49:49:e2:fc: 77:52:0b:3a:39:b2:ab:11:23:76:b9:0f:53:a0:71: 43:89:24:15:cb:36:4a:78:39:5d:51:6e:e3:78:54: 13:e4:dc:d7:28:f8:10:0d:c6:94:58:67:9a:7d:b2: c9:1e:38:e3:94:64:c5:1f:47:13:2c:0e:fd:0a:79: f6:21:79:c6:b8:c7:9d:fb:da:5d:ee:f8:79:25:e1: c2:7d:a8:96:e9:bd:ba:c7:df:59:a9:e2:b4:88:3c: c0:85:e9:e6:65:c7:e0:8e:0d:1d:43:f5:f9:5d:da: ef:96:29:2a:27:02:ed:6b:ac:c5:a3:82:e1:5f:fd: 14:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C0:13:EA:A5:AC:BE:C2:0C:D6:F1:A3:00:D6:DA:4A:B9:DE:B5:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d44ec8a-b582-344c-8805-a64b89c845f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:e3:a3:53:50:b9:2b:7f:7a:b6:0c:2c:a6:a8:3b:73:42:5a: 06:8b:a1:dd:49:ae:12:31:1f:8e:11:d4:8b:75:c1:fe:ae:a2: 87:36:b8:8b:7a:31:97:67:22:e8:ac:d6:4e:5e:4f:29:c5:fb: 6d:25:82:9f:a6:8d:70:2b:47:3c:e3:9a:ed:bf:f7:ce:0f:38: 31:13:5c:33:0a:94:ad:af:61:bb:31:e2:30:80:2a:36:68:19: 27:8a:2a:18:7e:65:4d:66:ef:d6:ff:6d:ae:da:55:6f:fe:e9: 85:e7:92:b8:4d:5f:60:31:ec:81:82:9e:a8:de:ee:37:6f:e9: 73:0a:19:58:a3:ce:54:a4:46:ad:4a:6d:0b:47:f7:2b:8f:99: 8e:a0:36:2f:39:69:77:ca:29:a3:d4:d4:88:5f:db:0e:28:84: 56:e5:e5:05:33:72:b2:58:15:be:1e:b7:f2:2c:70:e3:1f:84: 43:0a:08:6a:44:6d:94:b6:e1:64:80:ca:03:44:ba:bf:fb:e8: fe:f0:dc:59:9f:d0:6f:56:aa:f7:e8:16:0a:7f:61:b7:6f:a0: d4:52:11:7e:f5:96:52:80:49:f5:2a:66:b6:9b:62:64:73:00: 43:72:2e:de:06:5a:11:50:48:81:92:52:96:00:87:9a:3b:a1: 53:a8:57:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJTIJRP6F8OurOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk NmFmZWIxMmYtZmNiZi00MGE3LTg2OTYtODJmN2MxZmIzYTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcBCeaa1PZNtIYUsVdup3szXf3ddcEBHhZKH 9DQzLJN97keq+VQuFbCnQQ0ZGLBf5tjPNbB3Lznlpd+qI23DbFIHKcyUgPT9VS3W oFuHiPtDijZxuzUzOYK+g79c9SNRhZcUEWSHXksIfG+WlPMlhlHVIqs6qr/cAE8j 6fcu5IkMrElJ4vx3Ugs6ObKrESN2uQ9ToHFDiSQVyzZKeDldUW7jeFQT5NzXKPgQ DcaUWGeafbLJHjjjlGTFH0cTLA79Cnn2IXnGuMed+9pd7vh5JeHCfaiW6b26x99Z qeK0iDzAhenmZcfgjg0dQ/X5XdrvlikqJwLta6zFo4LhX/0ULwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrAE+qlrL7CDNbxowDW2kq53rVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2Q0NGVjOGEtYjU4Mi0z NDRjLTg4MDUtYTY0Yjg5Yzg0NWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPjo1NQuSt/erYMLKaoO3NCWgaLod1JrhIxH44R1It1wf6uooc2uIt6 MZdnIuis1k5eTynF+20lgp+mjXArRzzjmu2/984PODETXDMKlK2vYbsx4jCAKjZo GSeKKhh+ZU1m79b/ba7aVW/+6YXnkrhNX2Ax7IGCnqje7jdv6XMKGVijzlSkRq1K bQtH9yuPmY6gNi85aXfKKaPU1Ihf2w4ohFbl5QUzcrJYFb4et/IscOMfhEMKCGpE bZS24WSAygNEur/76P7w3Fmf0G9WqvfoFgp/YbdvoNRSEX71llKASfUqZrabYmRz AENyLt4GWhFQSIGSUpYAh5o7oVOoV0E= -----END CERTIFICATE-----Generated at Tue Jun 3 10:16:22 2025 by rpki-client