$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4bb37a6c-860d-3b0e-84c6-51847d2cc0e0.roa File: 4bb37a6c-860d-3b0e-84c6-51847d2cc0e0.roa (raw, json) Hash identifier: A9TB+vqtQq7RtKppcYVaoGIxujWxWNpsHTl/rfrJauY= Subject key identifier: 76:26:50:6E:7A:F9:1A:6E:E4:AC:F6:47:C4:67:F0:9A:08:4F:17:4A Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A0E433AE7BA66A723ACB0F300 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4bb37a6c-860d-3b0e-84c6-51847d2cc0e0.roa Signing time: Mon 02 Jun 2025 08:17:32 +0000 ROA not before: Mon 02 Jun 2025 08:17:32 +0000 ROA not after: Sun 31 Aug 2025 08:17:32 +0000 asID: 9009 IP address blocks: 172.111.211.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0e:43:3a:e7:ba:66:a7:23:ac:b0:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 2 08:17:32 2025 GMT Not After : Aug 31 08:17:32 2025 GMT Subject: CN=58da633c-2da6-49ed-9d1a-501e24cff8cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:f7:95:a3:2c:ff:bf:b7:40:42:30:a7:b4: b7:29:b5:2f:81:83:18:b5:85:8e:e5:a2:e5:b3:24: 5d:5b:b8:ee:bc:75:97:2e:e7:0f:b6:2f:49:5f:65: e7:35:f2:b5:fc:b3:68:c6:17:7d:71:cb:ec:ab:e2: 43:00:e7:ca:3b:62:ec:64:d3:36:95:96:e5:65:62: eb:cb:33:95:62:c5:74:ce:06:63:8d:7f:47:60:11: ae:d0:86:df:f4:d6:9a:82:58:06:d9:5b:36:11:d5: 00:d7:54:c9:07:7c:aa:8e:23:ab:f0:92:82:f3:58: d3:ad:ec:60:76:e7:f6:9f:37:06:d7:28:48:45:1f: 0d:3a:87:c9:c8:d2:f6:c4:85:01:6f:94:fb:17:01: ab:92:cd:eb:a1:e6:53:03:cb:2e:5c:ae:26:1c:12: 12:dd:45:c3:31:87:d3:77:99:e3:48:00:fd:1b:ab: ff:05:dd:89:62:97:d2:6f:6b:ea:16:80:a6:4d:2d: c6:af:13:e5:2c:a6:c8:27:96:b0:09:19:45:ea:70: 24:81:11:91:9e:a1:85:f3:fd:9f:35:22:02:dc:20: ba:b9:62:27:00:38:e0:2f:0a:00:b7:4e:54:bc:9a: 88:01:9e:90:ca:b5:e8:4f:09:12:d6:b7:6a:d8:06: dd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:26:50:6E:7A:F9:1A:6E:E4:AC:F6:47:C4:67:F0:9A:08:4F:17:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4bb37a6c-860d-3b0e-84c6-51847d2cc0e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.211.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:c0:ce:0a:12:4f:65:b1:c3:4e:a2:5f:8b:08:9a:8f:80:34: 5d:90:e0:de:e5:ec:8c:ff:03:95:fa:05:06:2e:c3:c4:9f:66: 2b:79:12:64:8e:f6:a2:36:81:fe:7f:e0:fa:a6:ab:8f:57:0f: bf:63:40:b2:49:d9:85:1d:1d:48:74:d6:dd:1c:2d:67:01:df: a0:29:aa:1d:03:73:df:9f:59:6a:15:50:bd:53:ca:6c:8e:07: 97:87:59:0d:08:95:80:d0:13:cd:79:aa:cc:19:75:73:71:36: 8b:7f:5d:5e:d7:b1:e0:a1:c6:99:dc:89:86:3c:1d:d4:6c:ef: 96:c4:dd:ab:9d:4f:81:cd:5f:92:05:f1:de:91:17:d7:b7:46: e7:06:eb:0b:4f:0c:a2:eb:eb:ca:04:42:77:8f:30:7b:b1:54: dd:24:d3:51:e9:23:ee:d5:ed:87:7f:f9:97:41:c3:f0:3d:8a: 3d:b2:c8:aa:50:e3:3e:7b:48:11:48:d2:06:80:1d:78:ab:83: 69:c2:f8:fb:b3:fc:17:a6:f0:42:e0:55:eb:be:dd:e6:b6:b5: 83:76:7f:c0:f9:2b:c9:fd:97:fc:e7:1c:b8:c8:c2:19:32:5c: 0a:ba:54:19:7c:b4:53:26:88:6d:a4:df:fb:ad:45:b8:44:be: 79:9e:80:66 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoOQzrnumanI6yw8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYwMjA4MTczMloXDTI1MDgzMTA4MTczMlowLzEtMCsGA1UEAxMk NThkYTYzM2MtMmRhNi00OWVkLTlkMWEtNTAxZTI0Y2ZmOGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorf3laMs/7+3QEIwp7S3KbUvgYMYtYWO5aLl syRdW7juvHWXLucPti9JX2XnNfK1/LNoxhd9ccvsq+JDAOfKO2LsZNM2lZblZWLr yzOVYsV0zgZjjX9HYBGu0Ibf9NaaglgG2Vs2EdUA11TJB3yqjiOr8JKC81jTrexg duf2nzcG1yhIRR8NOofJyNL2xIUBb5T7FwGrks3roeZTA8suXK4mHBIS3UXDMYfT d5njSAD9G6v/Bd2JYpfSb2vqFoCmTS3GrxPlLKbIJ5awCRlF6nAkgRGRnqGF8/2f NSIC3CC6uWInADjgLwoAt05UvJqIAZ6QyrXoTwkS1rdq2AbdvwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHYmUG56+Rpu5Kz2R8Rn8JoITxdKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGJiMzdhNmMtODYwZC0z YjBlLTg0YzYtNTE4NDdkMmNjMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG/TADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCHwM4KEk9lscNOol+LCJqPgDRdkODe5eyM/wOV+gUGLsPEn2YreRJk jvaiNoH+f+D6pquPVw+/Y0CySdmFHR1IdNbdHC1nAd+gKaodA3Pfn1lqFVC9U8ps jgeXh1kNCJWA0BPNearMGXVzcTaLf11e17HgocaZ3ImGPB3UbO+WxN2rnU+BzV+S BfHekRfXt0bnBusLTwyi6+vKBEJ3jzB7sVTdJNNR6SPu1e2Hf/mXQcPwPYo9ssiq UOM+e0gRSNIGgB14q4Npwvj7s/wXpvBC4FXrvt3mtrWDdn/A+SvJ/Zf85xy4yMIZ MlwKulQZfLRTJohtpN/7rUW4RL55noBm -----END CERTIFICATE-----Generated at Sat Jun 7 11:52:04 2025 by rpki-client