$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5938b922-fbd7-3252-8de4-f85dd5b529d0.roa File: 5938b922-fbd7-3252-8de4-f85dd5b529d0.roa (raw, json) Hash identifier: J66IWnwvNbJmLHp0BJTy3Atjsl4Auu1lIZsP6oN4eoA= Subject key identifier: 55:CB:70:7B:68:85:F7:A1:F8:7A:C3:92:3B:FD:FA:E9:AF:2B:90:48 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A093AA319E971E90994A58580 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5938b922-fbd7-3252-8de4-f85dd5b529d0.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 9009 IP address blocks: 172.111.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:a3:19:e9:71:e9:09:94:a5:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=aed22750-94d7-4539-94dd-23155e89b0f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:9a:03:e8:d1:9e:39:76:a6:97:31:f5:29: 8f:40:d3:f6:71:59:38:95:6e:ff:c7:95:5b:e1:39: fc:71:fb:12:b4:be:63:9d:8c:0c:f5:ae:52:85:fd: 74:b0:aa:17:d7:45:77:79:06:bb:5d:97:12:39:5b: 6f:e4:b7:a5:46:78:c8:1d:23:e6:84:bd:b9:e0:8b: f4:1e:89:30:65:e0:83:82:ba:dc:ee:aa:74:f5:80: 23:16:33:0e:0c:3c:75:5b:28:3d:cb:ea:5e:3c:51: 16:14:b2:d3:2c:52:fc:d5:6c:9f:63:5a:c3:3e:29: 2b:70:ad:55:b3:0d:4f:74:b6:1e:3a:f6:01:06:cc: 4d:50:10:4b:7b:03:16:e4:17:0b:f5:a1:8d:b6:1e: 60:ea:f2:cc:df:a4:54:71:a3:3e:24:6f:d0:d6:b1: d8:e8:06:df:87:75:dc:06:0e:b2:00:3b:a3:08:a6: 94:53:f0:3f:55:e6:60:a1:90:51:06:4e:85:61:81: 19:c9:be:33:19:af:90:8a:89:fb:64:dc:df:a0:46: f0:0a:aa:13:62:ae:41:40:a7:59:11:f5:2c:7c:cb: 67:56:66:06:af:ba:0e:f6:f1:c5:cb:39:dc:99:f6: 28:df:3c:ce:93:58:ab:83:19:35:d2:eb:7a:a5:d5: 56:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CB:70:7B:68:85:F7:A1:F8:7A:C3:92:3B:FD:FA:E9:AF:2B:90:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5938b922-fbd7-3252-8de4-f85dd5b529d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:a3:f0:77:26:d5:3e:bc:58:1e:13:d8:13:91:65:f6:1e:6b: ad:e3:ee:c4:05:83:2c:55:95:f5:42:1d:59:f9:68:4e:cf:7a: b8:6e:ac:f2:b5:ee:98:1f:7f:3c:e3:2a:61:2c:bc:3f:3f:a8: e5:d5:a3:5e:5f:69:8b:2a:85:f2:c9:9d:8e:58:24:68:73:25: 0c:c6:70:b6:6e:08:89:b8:16:16:44:84:57:61:20:38:05:b3: cd:91:bf:d6:d7:45:6d:53:b2:6d:5d:05:c6:cd:0b:70:c8:c0: ef:a5:47:5e:b0:3e:cc:5d:01:5f:5e:77:e7:42:82:24:b6:eb: 68:53:14:04:87:ab:2d:6e:68:62:2b:a7:be:de:a5:2e:19:f6: f1:d9:ab:1b:d3:64:53:7a:79:51:97:94:8b:2e:78:00:bf:ee: 8f:21:80:2b:16:0b:67:6a:41:6f:42:31:09:ca:76:1b:4d:90: 90:94:46:7d:5f:fc:f4:95:bc:70:33:ea:7f:48:77:3f:7e:dd: 75:1e:2a:44:6d:be:97:fd:ca:51:9b:60:e9:15:23:99:51:75: 41:14:76:e4:6b:9c:22:c1:ec:b3:73:11:8e:99:3d:42:b7:4d: 4d:af:8a:eb:07:b3:6a:37:b4:dc:0f:1e:81:c3:c9:b1:00:e6: 67:42:aa:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOqMZ6XHpCZSlhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk YWVkMjI3NTAtOTRkNy00NTM5LTk0ZGQtMjMxNTVlODliMGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOeaA+jRnjl2ppcx9SmPQNP2cVk4lW7/x5Vb 4Tn8cfsStL5jnYwM9a5Shf10sKoX10V3eQa7XZcSOVtv5LelRnjIHSPmhL254Iv0 HokwZeCDgrrc7qp09YAjFjMODDx1Wyg9y+pePFEWFLLTLFL81WyfY1rDPikrcK1V sw1PdLYeOvYBBsxNUBBLewMW5BcL9aGNth5g6vLM36RUcaM+JG/Q1rHY6Abfh3Xc Bg6yADujCKaUU/A/VeZgoZBRBk6FYYEZyb4zGa+Qion7ZNzfoEbwCqoTYq5BQKdZ EfUsfMtnVmYGr7oO9vHFyzncmfYo3zzOk1irgxk10ut6pdVWSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXLcHtohfeh+HrDkjv9+umvK5BIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTkzOGI5MjItZmJkNy0z MjUyLThkZTQtZjg1ZGQ1YjUyOWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWj8Hcm1T68WB4T2BORZfYea63j7sQFgyxVlfVCHVn5aE7PerhurPK1 7pgffzzjKmEsvD8/qOXVo15faYsqhfLJnY5YJGhzJQzGcLZuCIm4FhZEhFdhIDgF s82Rv9bXRW1Tsm1dBcbNC3DIwO+lR16wPsxdAV9ed+dCgiS262hTFASHqy1uaGIr p77epS4Z9vHZqxvTZFN6eVGXlIsueAC/7o8hgCsWC2dqQW9CMQnKdhtNkJCURn1f /PSVvHAz6n9Idz9+3XUeKkRtvpf9ylGbYOkVI5lRdUEUduRrnCLB7LNzEY6ZPUK3 TU2viusHs2o3tNwPHoHDybEA5mdCqvE= -----END CERTIFICATE-----Generated at Tue Jun 3 10:13:05 2025 by rpki-client