$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dbc13352-0512-3f7e-8b8e-0c65069d00e4.roa File: dbc13352-0512-3f7e-8b8e-0c65069d00e4.roa (raw, json) Hash identifier: cU7fH8lnxRYV9HOdgPUJqieHNNyzxH8U26DTsIdX5g0= Subject key identifier: 86:64:9A:5F:10:48:AA:35:33:A4:EC:EC:69:73:80:77:A1:BF:3C:3F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A066DF12F8191A88A34992E00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dbc13352-0512-3f7e-8b8e-0c65069d00e4.roa Signing time: Fri 30 May 2025 12:57:08 +0000 ROA not before: Fri 30 May 2025 12:57:08 +0000 ROA not after: Thu 28 Aug 2025 12:57:08 +0000 asID: 208485 IP address blocks: 172.111.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:06:6d:f1:2f:81:91:a8:8a:34:99:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 30 12:57:08 2025 GMT Not After : Aug 28 12:57:08 2025 GMT Subject: CN=5184c0cf-46b0-4c1b-b68e-154b24abd524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6b:8d:3d:b6:bb:06:5b:6c:32:fd:33:56:34: 98:18:9a:9c:c8:3f:ea:97:25:e6:72:6f:a4:6d:9c: a3:51:28:ca:28:6b:8b:37:f4:71:47:0a:d0:5b:6a: 7a:74:e5:5d:49:79:a3:cf:0e:2f:57:0e:34:75:ab: 26:f0:dd:8b:9a:ac:52:c1:ea:c2:72:c2:30:af:e6: c6:63:7a:07:2e:38:fb:82:55:e0:7a:39:62:fb:7c: ff:f5:ff:b8:67:2b:27:16:b3:7e:7e:ab:1e:bc:e1: fc:75:90:41:5b:58:8c:80:ac:d7:c0:8e:27:0a:84: 9e:1a:ac:b1:1e:64:b2:59:19:08:c6:cf:8c:8f:7e: b5:86:51:ce:50:37:13:b7:4d:e4:2b:8a:25:71:36: 6c:f7:7b:5c:6b:d1:2b:bb:52:8e:5d:9a:ac:41:b1: 2e:ed:6f:78:f2:d6:a4:c7:00:7e:1f:f6:b3:59:8e: d2:09:8f:61:0f:ca:e5:b1:4c:96:f0:71:ed:7a:e3: bb:89:75:ed:7a:65:f2:df:3c:56:59:3a:f8:a4:8d: f0:52:eb:76:43:46:63:0f:9d:fb:5a:bd:85:55:49: 69:b6:fd:c9:c9:b5:43:d6:30:61:61:35:51:07:88: b1:ab:3d:dc:25:4e:43:e5:91:22:c2:c9:8b:a9:8b: 29:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:64:9A:5F:10:48:AA:35:33:A4:EC:EC:69:73:80:77:A1:BF:3C:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dbc13352-0512-3f7e-8b8e-0c65069d00e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:1f:8c:70:e2:3b:ee:90:c3:1e:0c:68:3c:fb:37:c3:0e:70: c3:75:97:08:e9:f5:d8:fb:e6:2a:45:1b:fc:21:cb:9e:79:40: b3:4d:40:36:80:86:9e:15:19:d0:1f:dc:08:16:d9:f1:22:02: f7:f8:18:1b:9b:c1:b3:a3:2c:c2:15:5f:62:ea:ec:c1:ad:eb: 4f:1b:a4:59:b3:2f:e0:1e:05:94:ba:6f:0f:4e:7a:65:5a:aa: e9:f7:30:65:90:ff:fe:23:ea:35:96:9d:97:1f:5f:7a:a3:23: ac:26:5e:38:61:fd:91:e8:22:50:0f:eb:03:d9:43:ba:70:86: be:50:7c:5e:45:1c:52:ac:0d:13:ee:a1:33:53:e6:ff:ed:41: da:42:0c:0f:d2:87:0b:f2:cc:cd:4b:14:7b:a5:98:7c:e9:5a: f1:08:b2:a4:48:ee:91:9a:17:c6:53:5d:70:4b:69:bb:62:1a: 65:31:6f:24:51:0e:9d:7f:19:34:c2:ed:b6:b5:74:0e:5f:96: 00:18:b8:79:8b:1d:c2:16:01:7e:16:22:b0:6c:1f:4b:61:b1: 9f:68:37:79:9b:67:bc:16:16:08:0f:90:f3:73:b9:f3:e3:ff: cd:b1:6c:ff:33:b2:f0:93:62:99:ae:d4:02:f0:12:54:b8:ca: e7:67:da:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoGbfEvgZGoijSZLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUzMDEyNTcwOFoXDTI1MDgyODEyNTcwOFowLzEtMCsGA1UEAxMk NTE4NGMwY2YtNDZiMC00YzFiLWI2OGUtMTU0YjI0YWJkNTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWuNPba7BltsMv0zVjSYGJqcyD/qlyXmcm+k bZyjUSjKKGuLN/RxRwrQW2p6dOVdSXmjzw4vVw40dasm8N2LmqxSwerCcsIwr+bG Y3oHLjj7glXgejli+3z/9f+4ZysnFrN+fqsevOH8dZBBW1iMgKzXwI4nCoSeGqyx HmSyWRkIxs+Mj361hlHOUDcTt03kK4olcTZs93tca9Eru1KOXZqsQbEu7W948tak xwB+H/azWY7SCY9hD8rlsUyW8HHteuO7iXXtemXy3zxWWTr4pI3wUut2Q0ZjD537 Wr2FVUlptv3JybVD1jBhYTVRB4ixqz3cJU5D5ZEiwsmLqYspUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZkml8QSKo1M6Ts7GlzgHehvzw/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGJjMTMzNTItMDUxMi0z ZjdlLThiOGUtMGM2NTA2OWQwMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYfjHDiO+6Qwx4MaDz7N8MOcMN1lwjp9dj75ipFG/why555QLNNQDaA hp4VGdAf3AgW2fEiAvf4GBubwbOjLMIVX2Lq7MGt608bpFmzL+AeBZS6bw9OemVa qun3MGWQ//4j6jWWnZcfX3qjI6wmXjhh/ZHoIlAP6wPZQ7pwhr5QfF5FHFKsDRPu oTNT5v/tQdpCDA/ShwvyzM1LFHulmHzpWvEIsqRI7pGaF8ZTXXBLabtiGmUxbyRR Dp1/GTTC7ba1dA5flgAYuHmLHcIWAX4WIrBsH0thsZ9oN3mbZ7wWFggPkPNzufPj /82xbP8zsvCTYpmu1ALwElS4yudn2u4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:41:59 2025 by rpki-client