$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6481669a-bd89-3db9-a3c6-99662f7cfe4d.roa File: 6481669a-bd89-3db9-a3c6-99662f7cfe4d.roa (raw, json) Hash identifier: H5vxJ9LL9gO2OYX7hgyyWEfCL+A6sgPa4Rlp/u4E/hg= Subject key identifier: 0E:9F:90:40:69:AD:D5:65:31:FB:04:D6:B1:1C:4E:4D:1E:10:A0:51 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A0E430E89192914591D6382C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6481669a-bd89-3db9-a3c6-99662f7cfe4d.roa Signing time: Mon 02 Jun 2025 08:17:11 +0000 ROA not before: Mon 02 Jun 2025 08:17:11 +0000 ROA not after: Sun 31 Aug 2025 08:17:11 +0000 asID: 9009 IP address blocks: 172.111.147.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0e:43:0e:89:19:29:14:59:1d:63:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 2 08:17:11 2025 GMT Not After : Aug 31 08:17:11 2025 GMT Subject: CN=ed286ea4-02d9-492e-9e85-e6ae5b16317e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0c:ca:ad:af:4a:f4:2b:2b:3e:4c:43:f9:46: e0:13:25:62:53:dd:04:63:55:13:0b:f9:cb:51:78: c3:87:9f:c3:f7:43:43:dc:aa:ed:10:e5:10:ea:ff: 1c:5c:e8:78:e4:12:18:ab:c5:0d:64:8f:53:c0:64: 6b:5d:0b:23:1c:29:cf:33:a9:11:31:3f:d1:c3:c4: 4a:4e:8e:80:db:90:50:e5:bd:52:cd:74:87:e5:21: 48:73:b8:06:f3:d7:ad:6f:47:62:49:41:3a:1a:a0: 97:62:6e:a4:1b:1a:3b:6f:b4:23:e0:ef:c9:4b:af: 9d:5e:de:9d:d5:47:cd:a3:20:8b:93:f6:fd:0f:fb: 46:f6:2e:16:37:09:c1:bd:48:74:71:18:28:41:59: 9f:ad:e8:fc:8f:6a:ad:8d:10:48:b3:25:19:38:e2: 95:7c:01:14:1d:67:16:9b:dc:e7:f5:96:65:f0:af: 64:46:60:69:06:4e:ff:b6:e2:d4:05:56:e0:01:79: 0b:93:68:7c:10:d4:af:60:1f:ee:9d:54:df:ca:94: 57:0c:cf:81:6e:2a:f5:30:3f:9e:20:1e:5f:95:f6: 9e:0b:19:ce:6e:2f:02:9c:8f:4a:25:a0:1c:af:18: 7d:b8:36:bd:ba:3d:41:60:bd:ff:0c:c5:30:ca:db: 70:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9F:90:40:69:AD:D5:65:31:FB:04:D6:B1:1C:4E:4D:1E:10:A0:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6481669a-bd89-3db9-a3c6-99662f7cfe4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.147.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:8c:bc:63:ed:98:0e:7e:94:e6:eb:79:00:77:10:24:71:c2: 2a:e1:49:91:c0:c6:ca:6b:59:40:56:94:a8:6d:96:ca:28:d8: d4:14:d5:bc:54:80:a2:a2:b4:51:b1:d4:11:80:3d:45:5a:c7: 62:e5:9d:68:87:c4:cd:ed:e6:d4:17:92:a3:77:0e:3d:8f:70: fa:f5:e9:07:ef:79:86:0c:7d:e4:ec:58:70:70:75:ed:a2:3c: 60:25:33:14:d5:7e:7e:82:dc:e0:fa:8f:f7:2c:20:9d:6d:3c: 6d:29:1d:fa:4a:40:e2:4f:8d:ef:ee:8d:fb:34:b8:92:a7:24: e6:4f:2c:21:78:4f:61:40:f6:bb:bd:c1:fd:18:91:78:fa:d8: 50:14:4f:ba:dd:4a:89:e5:21:89:3d:74:43:40:b1:b7:a8:ab: 93:f9:5f:a5:d7:b4:ee:2d:40:f1:79:d3:53:51:39:bd:6a:1d: ac:7c:d4:a8:1b:e1:a1:51:6e:f8:24:3b:d9:7c:4e:cd:72:90: 9b:f8:8f:a8:26:fd:bc:4a:1a:04:12:27:6d:5e:b3:74:ab:e0: d2:a9:b9:b5:24:04:c7:36:f6:fe:98:91:bf:2d:32:01:8b:f4: 00:9c:3c:ea:77:f7:4e:81:22:8e:91:d9:85:33:78:aa:3c:39: 39:05:91:85 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoOQw6JGSkUWR1jgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYwMjA4MTcxMVoXDTI1MDgzMTA4MTcxMVowLzEtMCsGA1UEAxMk ZWQyODZlYTQtMDJkOS00OTJlLTllODUtZTZhZTViMTYzMTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAzKra9K9CsrPkxD+UbgEyViU90EY1UTC/nL UXjDh5/D90ND3KrtEOUQ6v8cXOh45BIYq8UNZI9TwGRrXQsjHCnPM6kRMT/Rw8RK To6A25BQ5b1SzXSH5SFIc7gG89etb0diSUE6GqCXYm6kGxo7b7Qj4O/JS6+dXt6d 1UfNoyCLk/b9D/tG9i4WNwnBvUh0cRgoQVmfrej8j2qtjRBIsyUZOOKVfAEUHWcW m9zn9ZZl8K9kRmBpBk7/tuLUBVbgAXkLk2h8ENSvYB/unVTfypRXDM+Bbir1MD+e IB5flfaeCxnObi8CnI9KJaAcrxh9uDa9uj1BYL3/DMUwyttwtwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA6fkEBprdVlMfsE1rEcTk0eEKBRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjQ4MTY2OWEtYmQ4OS0z ZGI5LWEzYzYtOTk2NjJmN2NmZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG+TgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBCjLxj7ZgOfpTm63kAdxAkccIq4UmRwMbKa1lAVpSobZbKKNjUFNW8 VICiorRRsdQRgD1FWsdi5Z1oh8TN7ebUF5Kjdw49j3D69ekH73mGDH3k7FhwcHXt ojxgJTMU1X5+gtzg+o/3LCCdbTxtKR36SkDiT43v7o37NLiSpyTmTywheE9hQPa7 vcH9GJF4+thQFE+63UqJ5SGJPXRDQLG3qKuT+V+l17TuLUDxedNTUTm9ah2sfNSo G+GhUW74JDvZfE7NcpCb+I+oJv28ShoEEidtXrN0q+DSqbm1JATHNvb+mJG/LTIB i/QAnDzqd/dOgSKOkdmFM3iqPDk5BZGF -----END CERTIFICATE-----Generated at Sat Jun 7 05:00:07 2025 by rpki-client