$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa File: e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa (raw, json) Hash identifier: H9rfRqh8VDE4UVhKd09klbP2HtJOj+KlvamDGeF9d3M= Subject key identifier: BE:19:57:59:12:B0:D5:DA:57:47:CF:42:15:FE:A0:DA:9C:EB:62:B7 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A103544FF8371FCEB9AC55300 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 212238 IP address blocks: 172.111.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:44:ff:83:71:fc:eb:9a:c5:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=7ef2a686-f4d5-4967-8380-eec20ef00dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9f:ac:c3:3f:79:5c:a9:71:66:c5:1d:57:bb: 6e:e5:df:2b:45:b7:0f:95:21:f4:60:d1:99:58:04: cf:d3:12:42:db:1c:32:6f:30:e7:a3:fa:be:53:7d: 45:ea:a9:b8:49:89:dd:26:6d:08:e2:d8:ed:2c:21: 1a:ee:aa:c8:96:43:5d:d7:86:44:5d:d9:d8:20:2c: 69:39:09:af:60:6f:4b:c2:c8:96:89:a0:b3:ac:12: 35:a3:89:09:f5:6c:91:32:f1:e8:2b:28:6b:d2:fb: 87:ee:5e:fb:18:b3:a1:de:c6:24:92:15:9e:99:85: f8:51:33:95:f3:c5:38:2b:ce:95:67:e5:45:59:32: ca:73:cf:58:bf:cb:75:60:86:9a:60:5e:67:20:3d: 3d:09:68:09:28:c6:3c:ae:e3:c7:f3:b5:ab:17:c8: 11:8d:df:ce:67:c6:f3:5d:66:08:cf:05:95:85:5e: d7:3e:2c:f6:d1:6a:17:2a:33:a2:ed:d7:a6:31:98: 43:1b:de:ac:57:b3:b1:9b:ee:60:cb:a0:ba:1f:3f: fd:d3:3a:2a:2e:57:95:5f:d6:13:50:2e:83:14:d2: 75:ab:a8:29:b1:8d:fe:7b:1e:84:72:0a:ab:dd:d4: 94:ee:ae:4e:d8:25:79:6b:64:6b:23:8e:b1:09:86: cf:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:19:57:59:12:B0:D5:DA:57:47:CF:42:15:FE:A0:DA:9C:EB:62:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e9:1b:8b:f0:0f:e2:34:d5:5c:48:49:72:f8:0c:ac:27:b0: 4f:70:7f:4d:e8:3c:aa:d1:03:08:6c:44:98:5a:b4:5d:52:0c: c1:3a:be:b3:8f:8e:ab:12:df:77:8f:53:1d:8f:0f:dd:9b:24: c8:06:14:49:1d:65:b1:88:d1:7e:52:94:bd:01:ad:41:a1:d0: a0:ac:a5:bf:33:6b:c5:01:aa:db:03:2d:76:06:e8:ae:06:7b: b2:bb:ca:89:02:97:fa:fc:8c:4a:79:09:68:35:5c:a0:da:48: a8:8e:cf:cd:bf:bb:0d:1b:2c:9b:ad:32:37:d9:ca:a9:b5:78: 71:46:10:6e:47:b1:38:e3:4f:46:fa:d1:7c:42:82:6a:ff:5f: 06:93:98:69:20:e6:eb:d8:36:8c:f7:ea:99:f6:9f:09:36:81: b6:62:16:ff:24:07:b3:48:92:9e:8b:66:c7:9f:ad:2d:cd:33: 19:70:97:62:01:f7:e1:d2:07:1f:34:73:5e:1a:08:57:e4:39: c9:a3:d7:13:21:0f:5d:da:ed:92:f6:47:68:bc:72:0c:68:6b: 26:c6:4b:30:a7:87:de:18:1b:a0:54:a4:bd:63:11:03:6c:75: 1a:d7:d8:ec:49:71:7e:a6:10:40:8a:5e:af:28:1e:46:fc:9c: 9e:92:f4:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUT/g3H865rFUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk N2VmMmE2ODYtZjRkNS00OTY3LTgzODAtZWVjMjBlZjAwZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ+swz95XKlxZsUdV7tu5d8rRbcPlSH0YNGZ WATP0xJC2xwybzDno/q+U31F6qm4SYndJm0I4tjtLCEa7qrIlkNd14ZEXdnYICxp OQmvYG9LwsiWiaCzrBI1o4kJ9WyRMvHoKyhr0vuH7l77GLOh3sYkkhWemYX4UTOV 88U4K86VZ+VFWTLKc89Yv8t1YIaaYF5nID09CWgJKMY8ruPH87WrF8gRjd/OZ8bz XWYIzwWVhV7XPiz20WoXKjOi7demMZhDG96sV7Oxm+5gy6C6Hz/90zoqLleVX9YT UC6DFNJ1q6gpsY3+ex6Ecgqr3dSU7q5O2CV5a2RrI46xCYbPBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4ZV1kSsNXaV0fPQhX+oNqc62K3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTg5NmIyYTUtMjljZC0z NDJmLWIxMmEtOGYxZmY3NmQwYTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbpG4vwD+I01VxISXL4DKwnsE9wf03oPKrRAwhsRJhatF1SDME6vrOP jqsS33ePUx2PD92bJMgGFEkdZbGI0X5SlL0BrUGh0KCspb8za8UBqtsDLXYG6K4G e7K7yokCl/r8jEp5CWg1XKDaSKiOz82/uw0bLJutMjfZyqm1eHFGEG5HsTjjT0b6 0XxCgmr/XwaTmGkg5uvYNoz36pn2nwk2gbZiFv8kB7NIkp6LZsefrS3NMxlwl2IB 9+HSBx80c14aCFfkOcmj1xMhD13a7ZL2R2i8cgxoaybGSzCnh94YG6BUpL1jEQNs dRrX2OxJcX6mEECKXq8oHkb8nJ6S9IA= -----END CERTIFICATE-----Generated at Sat Jun 7 21:50:36 2025 by rpki-client