$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa File: a2b1e817-581b-3613-bff0-519b62d2c6f2.roa (raw, json) Hash identifier: vU4nLoliW/8wMY0K41cQRyANbQF/J1PQZr09OH8cYJU= Subject key identifier: AA:F0:81:31:7F:87:AF:65:76:5F:79:59:C6:93:A7:05:B5:06:6B:C4 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A103544E1B497231965362B80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 9009 IP address blocks: 172.111.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:44:e1:b4:97:23:19:65:36:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=3745e8bb-c7f5-4043-bbf8-d18dc8584e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:02:43:ec:03:65:02:ef:58:06:55:91:c7: 6e:b0:61:f3:21:af:9e:c8:14:df:dd:93:84:85:6a: 56:dd:27:b7:f1:a0:9d:5f:12:1a:37:f8:5a:1b:c7: 12:a9:98:99:c7:d8:01:c9:94:a8:75:05:9d:75:69: 8c:b1:9d:fb:29:e5:59:32:93:1a:1f:36:5e:ad:75: 56:62:01:74:49:7b:bb:83:91:0a:d6:d5:9c:e4:ba: 4c:0b:18:75:e5:25:19:f5:1a:18:0f:7e:bb:68:a7: 89:5a:e1:16:a6:f6:3c:2d:dc:82:2f:76:2e:bf:f8: 10:aa:b6:f4:22:c4:26:a4:27:50:02:f6:7d:cc:3b: 84:f2:d9:92:d8:f5:4b:0e:93:62:1a:20:97:dc:da: 9e:73:d8:f9:32:e7:b9:ce:49:9b:a1:aa:42:ec:9b: 39:09:11:fd:f6:36:c8:1e:9f:bd:b5:24:fd:08:ac: f7:4a:c1:3e:c5:a8:18:a2:23:01:d1:65:be:9f:76: 53:c7:96:9f:e4:14:27:f7:9c:23:8a:ac:57:f6:03: 98:b0:d2:2f:36:09:08:b1:d4:55:36:58:75:f6:e5: 58:bf:97:c9:1e:9c:58:20:a9:d7:33:c8:2a:8c:cc: 6f:2f:6f:32:a6:71:ef:4a:00:bd:0d:57:61:91:95: 65:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F0:81:31:7F:87:AF:65:76:5F:79:59:C6:93:A7:05:B5:06:6B:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a3:18:51:1b:18:fb:5d:bd:49:b0:06:33:e2:71:a6:99:65: 1f:2f:8e:a4:99:32:bd:05:04:2c:a1:55:bd:99:b4:37:29:d5: 38:e9:80:c4:23:c0:34:95:03:1d:d8:a9:86:04:11:5e:dc:3d: c5:e9:d6:69:0c:94:6b:99:c3:bc:cb:d2:4e:43:c7:e4:26:50: 6b:75:8f:d5:6e:1e:c8:7f:85:00:ff:a8:e7:7f:c7:7e:95:91: e3:03:75:3a:da:70:0c:07:38:44:f8:63:25:1f:2f:1b:8c:14: 8b:81:5b:71:6b:30:23:c8:7d:47:ca:8c:f8:4c:f4:23:89:24: 6b:65:31:81:3b:b2:cd:8e:c2:a7:89:8a:1d:0f:78:85:2b:83: 95:95:0f:a1:2e:82:f8:ad:a4:0b:4a:03:0f:54:72:b8:e1:4b: f8:c2:4c:c2:07:8c:dc:45:d9:af:01:cd:21:37:de:be:58:13: e1:2d:d1:5e:b3:1c:0f:b0:09:4b:cf:87:18:a8:7c:65:11:9c: 91:25:41:e0:e8:ec:43:fc:f8:ab:32:19:31:83:7c:bb:aa:81: cf:26:8c:0c:90:74:54:71:ae:05:96:22:1a:a0:0a:48:28:9a: cd:7a:01:56:e7:96:8b:6c:c1:39:c7:8c:b0:09:12:c7:de:55: e2:6d:6d:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUThtJcjGWU2K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk Mzc0NWU4YmItYzdmNS00MDQzLWJiZjgtZDE4ZGM4NTg0ZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXkCQ+wDZQLvWAZVkcdusGHzIa+eyBTf3ZOE hWpW3Se38aCdXxIaN/haG8cSqZiZx9gByZSodQWddWmMsZ37KeVZMpMaHzZerXVW YgF0SXu7g5EK1tWc5LpMCxh15SUZ9RoYD367aKeJWuEWpvY8LdyCL3Yuv/gQqrb0 IsQmpCdQAvZ9zDuE8tmS2PVLDpNiGiCX3Nqec9j5Mue5zkmboapC7Js5CRH99jbI Hp+9tST9CKz3SsE+xagYoiMB0WW+n3ZTx5af5BQn95wjiqxX9gOYsNIvNgkIsdRV Nlh19uVYv5fJHpxYIKnXM8gqjMxvL28ypnHvSgC9DVdhkZVlewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrwgTF/h69ldl95WcaTpwW1BmvEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTJiMWU4MTctNTgxYi0z NjEzLWJmZjAtNTE5YjYyZDJjNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGjGFEbGPtdvUmwBjPicaaZZR8vjqSZMr0FBCyhVb2ZtDcp1TjpgMQj wDSVAx3YqYYEEV7cPcXp1mkMlGuZw7zL0k5Dx+QmUGt1j9VuHsh/hQD/qOd/x36V keMDdTracAwHOET4YyUfLxuMFIuBW3FrMCPIfUfKjPhM9COJJGtlMYE7ss2OwqeJ ih0PeIUrg5WVD6EugvitpAtKAw9UcrjhS/jCTMIHjNxF2a8BzSE33r5YE+Et0V6z HA+wCUvPhxiofGURnJElQeDo7EP8+KsyGTGDfLuqgc8mjAyQdFRxrgWWIhqgCkgo ms16AVbnlotswTnHjLAJEsfeVeJtbZA= -----END CERTIFICATE-----Generated at Tue Jun 3 10:14:34 2025 by rpki-client