$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/af36deb6-6afd-3898-9b79-ac9bba3def43.roa File: af36deb6-6afd-3898-9b79-ac9bba3def43.roa (raw, json) Hash identifier: bOwUZaCVvTjTJkWNLh/vCZQxFG7fmwhC9g+SaZdyRbU= Subject key identifier: 4B:BB:A5:7F:F3:9C:30:9D:EA:2C:A9:8E:78:2D:C3:1B:85:3D:3B:EC Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A066EB121B79D5C4FF661EF80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/af36deb6-6afd-3898-9b79-ac9bba3def43.roa Signing time: Fri 30 May 2025 12:58:39 +0000 ROA not before: Fri 30 May 2025 12:58:39 +0000 ROA not after: Thu 28 Aug 2025 12:58:39 +0000 asID: 208485 IP address blocks: 172.111.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:06:6e:b1:21:b7:9d:5c:4f:f6:61:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 30 12:58:39 2025 GMT Not After : Aug 28 12:58:39 2025 GMT Subject: CN=5f72c1e6-56ac-4948-987b-25ea222ecfec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fd:0d:e5:f6:0d:2b:71:0b:f6:41:99:ad:63: 6a:ec:78:69:e2:a0:bd:27:15:85:44:a9:82:d8:c0: df:a7:69:76:a4:78:35:c0:db:8a:0f:c8:2c:43:57: 11:fe:45:6a:bd:90:86:89:df:63:69:c3:23:e1:54: b2:4a:49:ce:13:e4:e0:6f:ab:ec:53:bd:4a:95:c1: bf:74:af:98:86:1d:d0:91:46:b0:84:e2:ed:af:9d: 4f:d3:16:ea:72:34:2e:a7:a4:fe:40:ca:07:4d:c9: 39:6d:bf:a6:f0:19:aa:55:50:06:e0:b1:d6:ee:ca: 5b:19:5b:5a:91:fc:3f:86:fa:d2:ef:c5:d4:b9:07: e3:60:d7:ab:5a:9e:df:24:62:f5:27:fc:77:cf:1d: 73:4e:5d:31:4f:82:8b:3e:e0:9d:65:92:a5:b5:d0: 83:b9:14:79:2d:67:19:44:8b:8f:1d:e8:2d:c3:61: 0a:d4:ac:a7:52:93:90:95:1d:14:63:3f:47:68:96: a7:34:d9:b1:3a:1e:05:dc:b2:f5:2a:8f:7a:63:44: 16:38:68:d5:22:1a:ed:81:81:4e:c5:3b:c0:0b:44: 1e:bd:67:b5:82:37:b7:5f:c8:ac:cc:bc:a2:53:d2: 2b:0f:e2:d8:a9:8b:24:c1:a2:fa:d6:ef:52:09:03: 3d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BB:A5:7F:F3:9C:30:9D:EA:2C:A9:8E:78:2D:C3:1B:85:3D:3B:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/af36deb6-6afd-3898-9b79-ac9bba3def43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:20:9d:ac:85:b9:7b:66:13:a8:94:b3:bf:a8:66:21:d3:61: 47:27:cb:85:9f:2d:8e:0d:06:df:b3:0d:7f:0a:15:0c:00:20: 97:4b:e5:99:6b:c8:4b:79:a8:e9:2c:2a:d9:9d:fc:01:da:26: ab:63:4a:b4:24:2f:3c:51:d3:fc:e5:e7:e0:de:cb:8c:a7:b6: 9a:da:84:23:95:58:d7:3a:f3:92:9d:63:8c:5e:61:25:4c:13: 83:35:b4:92:b8:19:1f:42:a4:0a:5c:8a:75:2c:a7:32:29:54: 22:e0:8d:91:df:98:b1:10:b3:58:80:e6:83:b0:92:2e:73:ca: 47:91:ea:f4:1b:f2:8c:48:87:bc:20:8c:69:cb:cf:2f:fa:65: 9c:6a:f2:7f:cf:da:95:99:ae:05:57:04:30:ad:28:f8:dc:43: 0d:c7:e5:84:cb:e0:fd:67:22:47:95:02:8f:50:1e:5f:f4:d7: 6a:38:3c:c1:db:03:c0:f8:a2:e4:82:c8:bf:ac:78:8b:a1:10: 71:98:70:9f:0e:4b:6f:a8:09:af:1b:2a:aa:02:f7:32:7f:61: aa:e4:4f:02:e8:1b:e2:9a:a4:46:3c:5f:2b:0f:30:e0:c1:d1: 0a:73:71:e2:06:b8:17:87:90:67:b6:c3:5d:e0:18:44:63:00: c0:26:0d:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoGbrEht51cT/Zh74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUzMDEyNTgzOVoXDTI1MDgyODEyNTgzOVowLzEtMCsGA1UEAxMk NWY3MmMxZTYtNTZhYy00OTQ4LTk4N2ItMjVlYTIyMmVjZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf0N5fYNK3EL9kGZrWNq7Hhp4qC9JxWFRKmC 2MDfp2l2pHg1wNuKD8gsQ1cR/kVqvZCGid9jacMj4VSySknOE+Tgb6vsU71KlcG/ dK+Yhh3QkUawhOLtr51P0xbqcjQup6T+QMoHTck5bb+m8BmqVVAG4LHW7spbGVta kfw/hvrS78XUuQfjYNerWp7fJGL1J/x3zx1zTl0xT4KLPuCdZZKltdCDuRR5LWcZ RIuPHegtw2EK1KynUpOQlR0UYz9HaJanNNmxOh4F3LL1Ko96Y0QWOGjVIhrtgYFO xTvAC0QevWe1gje3X8iszLyiU9IrD+LYqYskwaL61u9SCQM9nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEu7pX/znDCd6iypjngtwxuFPTvsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWYzNmRlYjYtNmFmZC0z ODk4LTliNzktYWM5YmJhM2RlZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0gnayFuXtmE6iUs7+oZiHTYUcny4WfLY4NBt+zDX8KFQwAIJdL5Zlr yEt5qOksKtmd/AHaJqtjSrQkLzxR0/zl5+Dey4yntprahCOVWNc685KdY4xeYSVM E4M1tJK4GR9CpApcinUspzIpVCLgjZHfmLEQs1iA5oOwki5zykeR6vQb8oxIh7wg jGnLzy/6ZZxq8n/P2pWZrgVXBDCtKPjcQw3H5YTL4P1nIkeVAo9QHl/012o4PMHb A8D4ouSCyL+seIuhEHGYcJ8OS2+oCa8bKqoC9zJ/YarkTwLoG+KapEY8XysPMODB 0QpzceIGuBeHkGe2w13gGERjAMAmDfo= -----END CERTIFICATE-----Generated at Sat Jun 7 19:51:12 2025 by rpki-client