$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bb4edb34-accc-3256-ab88-19664342a074.roa File: bb4edb34-accc-3256-ab88-19664342a074.roa (raw, json) Hash identifier: GNP+n51A1Wp7PxABqXXwnHIYStkAf14CgET5Zfd3DDM= Subject key identifier: FD:2E:22:F4:52:A3:88:3F:B8:1C:BB:86:CC:41:5B:F2:59:14:9B:70 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A066EEAB1A79112E14AB68900 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bb4edb34-accc-3256-ab88-19664342a074.roa Signing time: Fri 30 May 2025 12:59:06 +0000 ROA not before: Fri 30 May 2025 12:59:06 +0000 ROA not after: Thu 28 Aug 2025 12:59:06 +0000 asID: 208485 IP address blocks: 172.111.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:06:6e:ea:b1:a7:91:12:e1:4a:b6:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 30 12:59:06 2025 GMT Not After : Aug 28 12:59:06 2025 GMT Subject: CN=ab669436-0e00-475e-86d2-31d3f43b29d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0a:f6:f2:39:3f:fc:b5:2a:68:dd:05:0e:25: 6f:fd:a3:8f:df:17:25:21:41:3d:3a:b5:4c:24:5e: b0:28:bf:90:80:b7:c5:ec:42:e8:4e:d5:d0:3c:b7: f6:cf:fa:4d:78:39:92:2b:c1:4d:96:01:78:6c:b1: f8:65:c3:a7:9d:a2:1f:f4:2a:13:e3:45:aa:07:ab: ab:55:13:8b:f6:ae:6f:60:d7:7b:e5:d1:38:32:2e: 27:f7:ff:54:08:d0:41:22:f6:7f:f9:85:9b:a6:a4: 5f:47:a3:a1:22:36:43:a0:05:c6:fe:94:ce:2d:47: f8:d4:d2:df:03:59:1f:ab:23:ee:13:51:5c:51:4d: 72:23:8a:ab:0d:ae:1d:e9:0b:da:f3:5b:00:02:e2: 7e:6f:41:08:e7:78:dc:f3:d8:33:b2:b2:10:ae:5e: 79:79:81:a5:0f:bf:82:ec:59:e7:2e:ca:23:da:50: 58:0e:91:cb:fd:9c:b5:cc:31:de:46:56:49:71:61: b0:0e:f7:35:6f:1c:d0:3a:a4:13:4c:3d:1c:88:67: 0e:98:bf:d8:4b:2f:13:c5:9f:69:5a:67:23:21:82: 06:9d:36:e6:0e:08:c0:6c:bc:e9:1e:e4:6e:86:43: bf:0d:df:17:89:e5:cb:a6:2f:de:e2:75:55:27:82: 2f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2E:22:F4:52:A3:88:3F:B8:1C:BB:86:CC:41:5B:F2:59:14:9B:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bb4edb34-accc-3256-ab88-19664342a074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:13:91:97:89:47:19:12:ba:75:a8:6e:da:ab:f9:3b:02:b0: 73:0a:f4:d6:8b:1e:11:85:5f:06:61:a8:55:03:44:1d:8a:25: 92:ba:ab:6e:76:25:d9:45:25:04:38:a9:dd:04:2d:31:6d:91: 74:1f:4b:53:c7:f5:8d:cb:39:7e:73:50:ad:cb:96:59:d5:3e: 0f:50:9c:c3:67:75:1b:4a:97:96:b0:b2:b7:13:13:cc:cd:0f: fc:db:8e:af:d4:0a:8f:63:8d:28:f4:30:8d:0d:ac:53:7d:cf: 94:4b:23:87:17:1a:bc:77:b6:cb:d0:f3:96:68:2a:66:5e:89: 72:97:6a:36:20:28:2e:f4:09:f4:c5:f8:73:23:bf:28:d6:3a: 3b:15:c1:84:38:47:f2:67:e7:d6:9f:c2:c3:c8:09:f6:e9:56: 0c:06:d6:ef:01:f2:21:8b:fd:45:81:13:90:33:90:c8:bf:60: b4:cf:7e:58:60:18:d5:52:fe:82:14:1a:9a:1d:a4:64:45:6e: 7c:82:36:09:17:16:79:c0:f9:62:02:b7:2b:c0:d3:a1:c5:df: f6:ee:59:36:38:7c:8d:13:55:c7:e3:e2:da:8c:6c:16:ed:3d: fa:7e:ea:a2:b0:cf:5e:fb:fe:96:f4:aa:f1:86:32:81:2c:bd: 65:e4:c8:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoGbuqxp5ES4Uq2iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUzMDEyNTkwNloXDTI1MDgyODEyNTkwNlowLzEtMCsGA1UEAxMk YWI2Njk0MzYtMGUwMC00NzVlLTg2ZDItMzFkM2Y0M2IyOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywr28jk//LUqaN0FDiVv/aOP3xclIUE9OrVM JF6wKL+QgLfF7ELoTtXQPLf2z/pNeDmSK8FNlgF4bLH4ZcOnnaIf9CoT40WqB6ur VROL9q5vYNd75dE4Mi4n9/9UCNBBIvZ/+YWbpqRfR6OhIjZDoAXG/pTOLUf41NLf A1kfqyPuE1FcUU1yI4qrDa4d6Qva81sAAuJ+b0EI53jc89gzsrIQrl55eYGlD7+C 7FnnLsoj2lBYDpHL/Zy1zDHeRlZJcWGwDvc1bxzQOqQTTD0ciGcOmL/YSy8TxZ9p WmcjIYIGnTbmDgjAbLzpHuRuhkO/Dd8XieXLpi/e4nVVJ4IvHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0uIvRSo4g/uBy7hsxBW/JZFJtwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmI0ZWRiMzQtYWNjYy0z MjU2LWFiODgtMTk2NjQzNDJhMDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGATkZeJRxkSunWobtqr+TsCsHMK9NaLHhGFXwZhqFUDRB2KJZK6q252 JdlFJQQ4qd0ELTFtkXQfS1PH9Y3LOX5zUK3LllnVPg9QnMNndRtKl5awsrcTE8zN D/zbjq/UCo9jjSj0MI0NrFN9z5RLI4cXGrx3tsvQ85ZoKmZeiXKXajYgKC70CfTF +HMjvyjWOjsVwYQ4R/Jn59afwsPICfbpVgwG1u8B8iGL/UWBE5AzkMi/YLTPflhg GNVS/oIUGpodpGRFbnyCNgkXFnnA+WICtyvA06HF3/buWTY4fI0TVcfj4tqMbBbt Pfp+6qKwz177/pb0qvGGMoEsvWXkyKQ= -----END CERTIFICATE-----Generated at Thu Jun 5 19:08:34 2025 by rpki-client