$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/865955ac-d856-324b-9aeb-ff7e8f71dadd.roa File: 865955ac-d856-324b-9aeb-ff7e8f71dadd.roa (raw, json) Hash identifier: u+spjzWPoKSUBZan0ZPbBGyoixhJELBUKczAHfCbMac= Subject key identifier: FD:8B:92:79:EB:B5:10:5D:80:39:62:87:70:2F:9B:74:C6:3C:05:25 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849E7BA825E10BC685B3A707C00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/865955ac-d856-324b-9aeb-ff7e8f71dadd.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 9009 IP address blocks: 172.111.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:82:5e:10:bc:68:5b:3a:70:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=1030bd7f-d909-42d7-aa7d-2b2bb34ec651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5c:ae:a5:38:34:07:c7:59:0b:fe:fa:58:a1: f2:39:70:ae:15:89:4a:d0:4f:0c:2a:e2:95:fa:82: b9:43:94:10:c4:a1:ee:3d:4d:30:b6:56:3d:a0:d5: 52:7e:98:35:90:3e:9c:bb:a1:81:ab:26:fe:6c:da: 70:fa:54:66:c6:c0:e7:77:e2:9c:e9:97:ec:9c:cd: be:be:13:1e:61:4c:5c:d4:25:f9:31:d1:ea:50:81: 91:1a:45:c7:4d:88:21:86:3b:18:84:bc:ba:a5:9b: ab:b4:71:fa:e5:cd:97:00:a0:ba:98:a2:0e:b1:fe: 8d:fc:f8:5b:c8:c3:45:12:49:5b:c6:68:39:87:07: f6:3a:e5:42:82:73:8f:ce:d0:0d:f5:8e:6e:41:ce: b2:33:74:02:6e:b5:00:dc:e3:fc:52:e6:14:8b:e7: e4:e0:c0:0c:2e:c4:88:bd:b9:0e:04:9f:d2:8f:b6: 5f:3b:d0:2f:d7:48:4a:94:ac:6b:f7:5a:46:d8:fb: 3b:83:21:1e:17:52:b0:54:e4:75:77:86:3c:41:34: 48:a9:a9:2b:70:25:13:a1:ed:f8:85:ad:6e:83:16: 19:da:4e:92:9f:8c:13:46:6c:50:c3:b7:07:70:be: d8:e1:58:4c:b0:42:ac:8f:50:af:f7:29:e2:98:9f: eb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8B:92:79:EB:B5:10:5D:80:39:62:87:70:2F:9B:74:C6:3C:05:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/865955ac-d856-324b-9aeb-ff7e8f71dadd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:2c:eb:5a:a2:cf:f1:bf:00:a3:4a:88:b3:56:38:78:86:bd: a0:b6:8a:d2:bb:d4:7a:dc:98:ca:fd:d4:bd:b9:cb:b4:c5:20: 54:ac:62:27:a9:b4:92:eb:54:e4:53:43:26:f8:be:19:04:6d: 6a:ea:3d:ef:20:c9:3d:d8:bc:b2:fc:7b:24:84:54:6c:61:48: dc:71:49:94:9b:20:e1:3f:ec:03:ff:d1:7f:b1:fb:36:08:be: 54:82:69:e2:03:db:b3:d8:ab:5b:a2:1b:e2:0e:bb:48:52:4f: 55:b6:13:80:c7:54:84:ae:71:66:60:94:21:89:16:51:f1:ab: 0d:c4:65:72:05:ac:c9:29:e2:ed:2d:b8:4c:91:9a:f6:dc:04: a7:c4:24:3a:3f:bf:a9:05:9b:ff:dd:17:a4:97:f6:3a:ae:9d: 31:bb:78:a6:57:98:b6:40:4f:d4:13:c3:aa:9b:47:25:45:09: a9:ea:d8:ac:6f:34:63:71:4a:d1:94:51:cd:81:36:ee:2d:23: bb:e8:cd:e1:16:f9:de:af:b4:14:8e:9d:46:70:6d:e9:5c:50: cc:8e:13:f2:2f:da:77:5b:95:e0:2d:98:6c:eb:3d:39:d6:2f: 09:79:fb:37:7b:f9:da:ea:d6:87:40:e3:5b:93:69:e0:fd:1d: 0e:9d:0f:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuoJeELxoWzpwfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk MTAzMGJkN2YtZDkwOS00MmQ3LWFhN2QtMmIyYmIzNGVjNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVyupTg0B8dZC/76WKHyOXCuFYlK0E8MKuKV +oK5Q5QQxKHuPU0wtlY9oNVSfpg1kD6cu6GBqyb+bNpw+lRmxsDnd+Kc6ZfsnM2+ vhMeYUxc1CX5MdHqUIGRGkXHTYghhjsYhLy6pZurtHH65c2XAKC6mKIOsf6N/Phb yMNFEklbxmg5hwf2OuVCgnOPztAN9Y5uQc6yM3QCbrUA3OP8UuYUi+fk4MAMLsSI vbkOBJ/Sj7ZfO9Av10hKlKxr91pG2Ps7gyEeF1KwVOR1d4Y8QTRIqakrcCUToe34 ha1ugxYZ2k6Sn4wTRmxQw7cHcL7Y4VhMsEKsj1Cv9ynimJ/rWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2LknnrtRBdgDlih3Avm3TGPAUlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODY1OTU1YWMtZDg1Ni0z MjRiLTlhZWItZmY3ZThmNzFkYWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEks61qiz/G/AKNKiLNWOHiGvaC2itK71HrcmMr91L25y7TFIFSsYiep tJLrVORTQyb4vhkEbWrqPe8gyT3YvLL8eySEVGxhSNxxSZSbIOE/7AP/0X+x+zYI vlSCaeID27PYq1uiG+IOu0hST1W2E4DHVISucWZglCGJFlHxqw3EZXIFrMkp4u0t uEyRmvbcBKfEJDo/v6kFm//dF6SX9jqunTG7eKZXmLZAT9QTw6qbRyVFCanq2Kxv NGNxStGUUc2BNu4tI7vozeEW+d6vtBSOnUZwbelcUMyOE/Iv2ndbleAtmGzrPTnW Lwl5+zd7+drq1odA41uTaeD9HQ6dD1I= -----END CERTIFICATE-----Generated at Tue Jun 3 10:22:21 2025 by rpki-client