$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a5fadc25-0dd9-373b-93bb-8d41c0da47ba.roa File: a5fadc25-0dd9-373b-93bb-8d41c0da47ba.roa (raw, json) Hash identifier: 8bJ8WGxQTjp/H4XPMTCO6gxSTz1Iz5X+Bu4ckvaX/ss= Subject key identifier: 7B:69:E5:47:71:B5:53:F3:10:B4:B4:71:82:36:FD:79:89:1F:97:A1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849DF5A4A07D53E5E96FC9F6380 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a5fadc25-0dd9-373b-93bb-8d41c0da47ba.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 329007 IP address blocks: 172.111.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:4a:07:d5:3e:5e:96:fc:9f:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=177c85bc-cfe0-45c2-b719-41b493ab0a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d1:cb:13:8a:11:e0:62:8b:c1:78:f6:70:11: d3:3b:3c:4b:94:f5:20:ae:4c:ef:b5:c9:c4:bd:1a: e9:2f:08:fc:42:6a:28:93:2a:b6:82:40:78:40:8f: 9d:56:48:de:11:35:a2:67:49:56:cc:1b:38:38:35: 0c:d6:ae:1e:e1:7f:66:37:35:42:b4:1d:48:74:7c: a1:13:d2:d9:2c:3b:8e:49:1e:ab:ed:23:a3:01:89: 44:1a:b8:08:bd:45:b9:1e:ac:93:09:e5:75:b6:c6: 67:a5:af:00:4d:b0:9b:e0:b2:94:e5:dc:55:6b:bb: 1c:30:45:88:0f:30:c0:b7:fa:d6:6f:53:e0:01:ec: ab:4a:03:5b:ad:60:74:3a:f1:47:b0:e4:39:15:9e: 44:02:2c:9b:4f:83:9e:d2:f3:dc:b9:30:2b:03:e0: eb:96:63:f1:1c:34:fa:96:91:fd:25:45:c3:ac:36: 53:0b:8b:ef:7c:3e:d9:de:f6:7f:f4:9f:c5:75:b3: a9:d7:29:65:80:0c:5c:b3:12:6b:63:27:e3:ae:d9: ca:4e:f1:f1:99:37:7a:00:90:e3:f2:23:95:09:10: a5:7c:dc:ee:ad:13:0a:8a:eb:c3:27:e8:ff:c3:fe: ec:51:5c:5c:fe:bb:ea:28:76:50:07:66:cc:b4:71: 62:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:69:E5:47:71:B5:53:F3:10:B4:B4:71:82:36:FD:79:89:1F:97:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a5fadc25-0dd9-373b-93bb-8d41c0da47ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:a7:b2:b8:61:2f:29:d2:43:80:47:41:04:43:2c:7f:87:e0: 29:d3:f1:1c:8b:e6:b3:87:66:f4:71:43:c5:db:08:9f:7e:50: 3f:ec:bb:5b:a7:2f:42:ea:2c:35:06:13:09:4e:dd:a6:9e:d3: f4:6d:b0:4e:64:45:40:f3:6a:0b:99:07:04:f8:4b:7e:16:0d: b5:12:80:f9:cd:c3:8d:57:65:14:fd:6a:f6:08:cd:94:73:8b: 83:b3:0b:97:3b:fb:29:c6:fe:59:44:0b:c8:ba:5c:b7:eb:50: 90:d4:32:b5:2f:5f:d4:26:b1:fc:26:12:1f:be:e3:db:20:d9: cd:fa:a4:56:ef:63:42:66:20:5e:c1:0f:18:ca:1f:a5:af:10: 6b:bd:f0:be:1e:a7:22:c9:a1:31:4e:6d:ed:d8:f3:21:61:1f: 94:43:0e:44:85:a1:02:ca:69:ce:4c:7f:0a:b2:f8:c9:50:8d: be:00:bc:02:e2:c6:51:a5:9f:6a:87:a1:de:5c:26:b5:61:a3: e3:17:7b:8a:a9:89:63:df:84:d0:41:79:ee:d8:83:11:ac:20: 32:f6:7a:cd:88:f6:9e:19:9c:7f:c9:9a:20:96:5c:78:d1:26: d8:54:d6:f4:08:93:9c:99:5b:f8:42:23:fd:29:b0:d8:04:06: 85:4b:24:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWkoH1T5elvyfY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MTc3Yzg1YmMtY2ZlMC00NWMyLWI3MTktNDFiNDkzYWIwYTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdHLE4oR4GKLwXj2cBHTOzxLlPUgrkzvtcnE vRrpLwj8Qmookyq2gkB4QI+dVkjeETWiZ0lWzBs4ODUM1q4e4X9mNzVCtB1IdHyh E9LZLDuOSR6r7SOjAYlEGrgIvUW5HqyTCeV1tsZnpa8ATbCb4LKU5dxVa7scMEWI DzDAt/rWb1PgAeyrSgNbrWB0OvFHsOQ5FZ5EAiybT4Oe0vPcuTArA+DrlmPxHDT6 lpH9JUXDrDZTC4vvfD7Z3vZ/9J/FdbOp1yllgAxcsxJrYyfjrtnKTvHxmTd6AJDj 8iOVCRClfNzurRMKiuvDJ+j/w/7sUVxc/rvqKHZQB2bMtHFifQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtp5UdxtVPzELS0cYI2/XmJH5ehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTVmYWRjMjUtMGRkOS0z NzNiLTkzYmItOGQ0MWMwZGE0N2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGnsrhhLynSQ4BHQQRDLH+H4CnT8RyL5rOHZvRxQ8XbCJ9+UD/su1un L0LqLDUGEwlO3aae0/RtsE5kRUDzaguZBwT4S34WDbUSgPnNw41XZRT9avYIzZRz i4OzC5c7+ynG/llEC8i6XLfrUJDUMrUvX9QmsfwmEh++49sg2c36pFbvY0JmIF7B DxjKH6WvEGu98L4epyLJoTFObe3Y8yFhH5RDDkSFoQLKac5Mfwqy+MlQjb4AvALi xlGln2qHod5cJrVho+MXe4qpiWPfhNBBee7YgxGsIDL2es2I9p4ZnH/JmiCWXHjR JthU1vQIk5yZW/hCI/0psNgEBoVLJGg= -----END CERTIFICATE-----Generated at Sun Jun 8 06:24:27 2025 by rpki-client