$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/753b1cef-8f73-33af-bcd5-dc3f7c93b4c9.roa File: 753b1cef-8f73-33af-bcd5-dc3f7c93b4c9.roa (raw, json) Hash identifier: 86eabd93h5xl0azKel4JUkIQSIknUI+BV9UPh8AYu/U= Subject key identifier: B7:66:06:A4:A7:16:C5:1C:65:0A:FD:0F:4F:03:21:D1:34:07:1A:12 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849DC8FBC32C08C0E653D754B80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/753b1cef-8f73-33af-bcd5-dc3f7c93b4c9.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 9009 IP address blocks: 172.111.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:bc:32:c0:8c:0e:65:3d:75:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=adeb7ad3-9749-4788-aa98-c91eb3026f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b9:ab:76:e7:a2:47:8d:ea:4c:b3:71:05:1d: 7d:32:d3:b6:33:26:47:f7:4c:98:45:64:d5:27:72: ef:34:e3:97:52:41:53:76:d8:71:a7:57:39:46:db: ae:72:9b:52:f0:68:74:54:66:5b:8e:42:ce:e2:58: d5:b8:e7:28:e5:60:6a:dd:b9:90:0a:1c:d6:af:7c: cf:c4:a1:06:7e:ef:b4:81:21:f5:e8:43:4c:fb:7c: 6b:92:85:f5:42:2a:e2:73:72:8e:a6:ba:cc:04:ac: c4:c7:e3:87:99:71:23:2b:fe:72:51:47:ee:d1:e4: 6f:1a:82:9c:4e:3e:7a:22:46:ce:c2:b3:b4:66:1d: 2c:7e:15:7f:df:e2:49:88:40:14:b8:63:e7:99:ea: 92:70:c0:f3:e8:6d:40:7d:76:c4:0b:c3:8c:92:5e: c6:e6:f3:10:3c:83:b6:7c:39:32:33:85:29:35:ec: 81:7f:07:fe:f9:ca:17:22:07:e0:e8:f8:19:0f:68: f2:34:90:06:c0:bc:b0:17:b5:2e:fa:7e:43:8a:63: b0:fa:ff:7b:7e:14:58:f2:aa:26:f2:4e:c9:77:6b: fb:bb:76:53:24:e0:d9:ce:e9:48:52:0e:93:7f:80: 81:2d:16:b4:af:5b:83:b0:48:6f:f1:07:fe:d3:8c: 32:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:66:06:A4:A7:16:C5:1C:65:0A:FD:0F:4F:03:21:D1:34:07:1A:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/753b1cef-8f73-33af-bcd5-dc3f7c93b4c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ea:a3:c8:4a:5a:63:e8:18:44:a2:4d:3c:82:09:86:cd:bb: 23:7a:9d:2b:27:2f:ba:1f:1a:4f:2b:ea:ee:6f:0e:07:4f:df: 90:37:d0:18:97:6e:c6:f5:62:5a:92:b9:b6:73:67:da:1f:51: d9:cc:1b:05:e8:58:ef:b7:c0:5d:e0:de:23:4c:08:61:73:01: 50:95:aa:14:10:1c:f3:85:78:e3:2c:78:c2:83:fc:a4:85:2c: 12:81:a9:7d:7f:e4:29:a1:85:41:c8:9a:1b:db:e8:32:de:31: 4d:75:8f:c5:ef:d4:63:a4:a1:7b:f7:59:e6:55:c5:3a:13:71: 3f:37:ec:4d:35:49:74:3c:d3:9b:3f:c3:ca:30:09:f5:94:98: df:76:8a:06:83:1e:6d:9e:b2:19:e3:e3:e3:b0:63:ea:37:69: cb:66:73:03:40:a1:44:ca:bc:38:f1:3a:10:8c:ca:7c:5c:a2: 28:d0:be:b1:9e:72:33:b8:4f:3c:93:fb:9f:53:4d:12:ff:06: c2:8e:8a:93:97:aa:68:4d:ab:a2:c7:65:dc:f8:b7:90:e7:b8: 26:c7:57:70:6a:cf:7e:4c:f6:b7:ad:01:78:9d:72:56:bf:91: 42:9d:54:95:82:61:ac:74:06:ac:41:62:78:03:90:f9:c0:6f: 08:ba:eb:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj7wywIwOZT11S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk YWRlYjdhZDMtOTc0OS00Nzg4LWFhOTgtYzkxZWIzMDI2ZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirmrdueiR43qTLNxBR19MtO2MyZH90yYRWTV J3LvNOOXUkFTdthxp1c5RtuucptS8Gh0VGZbjkLO4ljVuOco5WBq3bmQChzWr3zP xKEGfu+0gSH16ENM+3xrkoX1Qiric3KOprrMBKzEx+OHmXEjK/5yUUfu0eRvGoKc Tj56IkbOwrO0Zh0sfhV/3+JJiEAUuGPnmeqScMDz6G1AfXbEC8OMkl7G5vMQPIO2 fDkyM4UpNeyBfwf++coXIgfg6PgZD2jyNJAGwLywF7Uu+n5DimOw+v97fhRY8qom 8k7Jd2v7u3ZTJODZzulIUg6Tf4CBLRa0r1uDsEhv8Qf+04wyGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdmBqSnFsUcZQr9D08DIdE0BxoSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzUzYjFjZWYtOGY3My0z M2FmLWJjZDUtZGMzZjdjOTNiNGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDqo8hKWmPoGESiTTyCCYbNuyN6nSsnL7ofGk8r6u5vDgdP35A30BiX bsb1YlqSubZzZ9ofUdnMGwXoWO+3wF3g3iNMCGFzAVCVqhQQHPOFeOMseMKD/KSF LBKBqX1/5CmhhUHImhvb6DLeMU11j8Xv1GOkoXv3WeZVxToTcT837E01SXQ805s/ w8owCfWUmN92igaDHm2eshnj4+OwY+o3actmcwNAoUTKvDjxOhCMynxcoijQvrGe cjO4TzyT+59TTRL/BsKOipOXqmhNq6LHZdz4t5DnuCbHV3Bqz35M9retAXidcla/ kUKdVJWCYax0BqxBYngDkPnAbwi66xQ= -----END CERTIFICATE-----Generated at Tue Jun 3 10:14:31 2025 by rpki-client