$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/81923095-bf2e-3f06-a900-58d9912230b4.roa File: 81923095-bf2e-3f06-a900-58d9912230b4.roa (raw, json) Hash identifier: KMajT8qaAh3JgdYhYz3UryXgJtEHKm5Q5/VhDrpp/io= Subject key identifier: B5:A4:E0:F2:01:94:19:F0:47:2B:73:AA:11:93:32:74:D7:D3:60:3E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849D85FA930C95E0EF29E0B6600 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/81923095-bf2e-3f06-a900-58d9912230b4.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 212238 IP address blocks: 172.111.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:a9:30:c9:5e:0e:f2:9e:0b:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=e4f6d102-299d-4e61-aa70-72b4ad30dde1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1d:7f:43:92:03:92:60:39:e6:1b:02:d6:72: 91:9d:bb:7f:50:06:32:53:93:05:a0:14:44:00:06: dd:62:e9:4c:25:30:99:a2:7d:9c:fb:70:7f:d8:a3: 22:99:e4:ae:9c:74:74:6d:4a:7f:4e:02:06:d9:14: 9b:87:d9:d7:c8:99:48:b8:e1:9b:dd:97:4c:59:28: b0:21:db:70:23:ec:a5:bb:9b:0d:8d:c0:1b:05:77: cd:4d:ee:e7:30:5b:82:21:44:d3:27:da:51:f8:03: b4:34:cd:98:95:36:df:dc:7d:97:f6:d5:72:39:02: 69:02:22:ed:45:e7:d4:fb:46:a9:eb:b6:b2:cc:50: aa:65:49:42:93:40:c2:de:ea:ff:58:b4:d6:89:58: 2e:34:04:35:1d:3d:29:9d:f4:af:b7:5f:dc:bd:d9: 7c:10:f4:fe:58:fd:7b:88:42:ac:2c:54:4c:24:a0: fc:bd:75:58:24:8b:2e:bd:b3:ec:55:20:99:d6:d8: 52:cd:ec:ec:9c:85:86:90:7e:90:38:8f:ce:cd:c7: 5e:5c:1c:8e:3d:e5:86:16:4a:f3:12:40:d2:1e:33: 7b:bc:8f:be:74:a3:ef:b8:24:dd:83:84:1a:75:2a: 70:87:cb:6a:06:9b:80:43:98:16:c1:e3:f0:4b:dc: 12:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A4:E0:F2:01:94:19:F0:47:2B:73:AA:11:93:32:74:D7:D3:60:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/81923095-bf2e-3f06-a900-58d9912230b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:0c:46:42:55:95:e0:c2:b5:b4:eb:6a:97:b9:d0:c0:6e:80: dc:a2:55:cc:c8:4e:26:a6:79:e8:17:0d:76:44:93:91:e0:40: 50:35:55:ae:c2:cd:87:5c:98:72:80:21:9b:86:19:08:9f:65: 41:ae:3b:c2:1d:29:f9:28:12:84:29:2c:5a:8b:0c:53:93:19: 9c:a4:ed:6b:c6:05:de:bc:46:2e:5b:39:46:dd:ea:28:d8:c8: b9:3a:5b:41:28:70:26:ff:a2:76:2c:a7:8a:a4:b1:68:6a:cb: bc:a3:1e:d7:cc:a5:75:f9:ab:9d:26:1e:1a:40:e9:7a:cc:f4: 2e:b4:11:7c:0b:55:b4:8c:51:ab:ae:7f:91:f9:05:e5:0f:82: 70:8a:e4:99:29:af:b6:5f:7e:e4:7e:03:8d:a0:fd:b1:b2:d0: 15:a5:7f:25:83:fa:e6:3c:8f:b0:a7:09:cc:4d:ba:84:72:bb: 3e:cd:15:c5:b8:18:44:73:4c:4d:31:31:7c:37:f1:b6:32:82: 89:f3:10:98:db:27:30:e0:6b:7e:16:fc:47:03:c3:f9:7e:1c: 07:4f:48:ef:a2:84:3b:57:56:ea:44:5d:f7:e2:8b:c7:a1:05: 2f:ae:92:6d:5a:d2:7a:ea:56:2c:92:de:6f:db:b0:ea:84:4f: 28:7f:13:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6kwyV4O8p4LZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZTRmNmQxMDItMjk5ZC00ZTYxLWFhNzAtNzJiNGFkMzBkZGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh1/Q5IDkmA55hsC1nKRnbt/UAYyU5MFoBRE AAbdYulMJTCZon2c+3B/2KMimeSunHR0bUp/TgIG2RSbh9nXyJlIuOGb3ZdMWSiw IdtwI+ylu5sNjcAbBXfNTe7nMFuCIUTTJ9pR+AO0NM2YlTbf3H2X9tVyOQJpAiLt RefU+0ap67ayzFCqZUlCk0DC3ur/WLTWiVguNAQ1HT0pnfSvt1/cvdl8EPT+WP17 iEKsLFRMJKD8vXVYJIsuvbPsVSCZ1thSzezsnIWGkH6QOI/OzcdeXByOPeWGFkrz EkDSHjN7vI++dKPvuCTdg4QadSpwh8tqBpuAQ5gWwePwS9wSrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWk4PIBlBnwRytzqhGTMnTX02A+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODE5MjMwOTUtYmYyZS0z ZjA2LWE5MDAtNThkOTkxMjIzMGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoMRkJVleDCtbTrape50MBugNyiVczITiameegXDXZEk5HgQFA1Va7C zYdcmHKAIZuGGQifZUGuO8IdKfkoEoQpLFqLDFOTGZyk7WvGBd68Ri5bOUbd6ijY yLk6W0EocCb/onYsp4qksWhqy7yjHtfMpXX5q50mHhpA6XrM9C60EXwLVbSMUauu f5H5BeUPgnCK5Jkpr7ZffuR+A42g/bGy0BWlfyWD+uY8j7CnCcxNuoRyuz7NFcW4 GERzTE0xMXw38bYygonzEJjbJzDga34W/EcDw/l+HAdPSO+ihDtXVupEXffii8eh BS+ukm1a0nrqViyS3m/bsOqETyh/E/Y= -----END CERTIFICATE-----Generated at Sat Jun 7 17:58:33 2025 by rpki-client