$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/23c8e251-9d76-3bdc-8881-5ad34ec99239.roa File: 23c8e251-9d76-3bdc-8881-5ad34ec99239.roa (raw, json) Hash identifier: pEY+wVlyCZHCxI41eLZkEZnef38wPje0UEGQtKagOi4= Subject key identifier: AE:0F:2B:27:94:76:9B:6D:5F:A8:74:5F:91:1A:EC:59:32:48:EB:26 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584A5FA7A00057FCABEFD7BE8900 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/23c8e251-9d76-3bdc-8881-5ad34ec99239.roa Signing time: Tue 01 Jul 2025 12:00:18 +0000 ROA not before: Tue 01 Jul 2025 12:00:18 +0000 ROA not after: Mon 29 Sep 2025 12:00:18 +0000 asID: 54113 IP address blocks: 172.111.113.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:a7:a0:00:57:fc:ab:ef:d7:be:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Jul 1 12:00:18 2025 GMT Not After : Sep 29 12:00:18 2025 GMT Subject: CN=249d81ed-00fe-4943-862a-eeb81f9466e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2a:e8:e0:6b:a0:93:e7:2d:6a:14:28:21:d1: f5:28:5a:15:46:21:d3:58:6b:f9:3c:4f:0e:cf:c1: 20:f0:79:2e:78:25:68:d9:04:a6:3d:5d:c3:16:ff: d2:3c:f2:5a:01:ca:69:fc:26:be:71:05:a4:df:f6: 3b:87:05:9a:d9:c8:92:97:92:5f:2c:20:55:dd:64: 7e:94:87:b3:48:e8:ff:01:77:45:31:a0:be:fa:b5: e0:42:af:cf:76:bd:79:77:a0:b6:7a:91:c2:d5:41: 8a:7e:6f:ad:8f:2e:46:0a:f9:df:e1:93:ed:e3:e3: 1e:36:b7:a7:9b:f4:d0:7e:dc:c7:22:62:c8:5e:2a: 02:b0:0d:88:ce:8f:8f:78:9b:a1:ef:53:c0:7a:7b: 35:d4:fe:c9:2c:57:6f:ff:ad:86:36:68:6c:6f:8c: 8c:42:9b:02:12:f6:c0:27:0e:6e:64:ae:0e:5d:0c: b8:e6:a5:dd:c5:97:04:ac:be:6d:82:c4:64:21:fc: 95:65:a4:bd:e7:56:93:97:e0:b0:1d:cd:f6:1e:29: 1c:02:ea:9a:01:3f:5a:22:5b:14:d1:b3:67:97:9e: db:04:32:28:ba:a8:7a:66:5b:81:3a:3d:88:05:70: c9:7e:c4:35:27:b5:c0:18:d1:a7:9c:58:24:16:e5: 29:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0F:2B:27:94:76:9B:6D:5F:A8:74:5F:91:1A:EC:59:32:48:EB:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/23c8e251-9d76-3bdc-8881-5ad34ec99239.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.113.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:80:ae:69:f5:38:dd:b4:e7:80:c9:6d:5d:c3:af:cc:61:f0: 34:00:60:21:e0:23:1c:55:f7:19:50:60:de:7e:da:a2:0b:99: c5:95:3a:48:9a:ab:01:9f:35:05:ff:80:11:b5:78:90:47:60: 95:a5:67:8e:aa:51:ea:23:b6:51:1f:c1:f1:ba:af:ba:81:31: 03:98:5d:79:67:0c:0b:32:bb:72:c0:89:50:6c:40:40:57:9d: ed:9d:d7:b4:a1:81:5a:bc:2d:33:bf:d4:17:de:76:e9:ed:83: 39:8f:1b:53:8c:2d:74:f7:a2:f3:f9:ff:dc:d2:c2:72:dd:ea: c9:c2:75:a0:e2:c2:45:9c:2e:02:1c:fd:13:7c:e3:86:3b:b6: 16:b9:8b:eb:af:81:29:55:be:1d:ab:04:16:b3:59:fd:f4:d0: 90:fa:99:14:40:09:66:11:36:be:d6:81:e0:f4:ea:67:61:3f: ae:91:49:df:3c:78:43:a4:e4:48:c5:71:fd:3b:e4:24:28:64: 4d:80:17:8b:df:20:7a:0d:75:e3:69:f8:4d:a7:13:26:42:f2: 4d:3f:dc:15:03:e4:04:54:7e:47:3c:37:7a:ed:ed:c2:3b:5c: f4:93:86:b1:fc:9c:9a:40:42:68:4f:11:4f:8a:00:8b:e1:a3: 92:73:b8:6a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpfp6AAV/yr79e+iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDcwMTEyMDAxOFoXDTI1MDkyOTEyMDAxOFowLzEtMCsGA1UEAxMk MjQ5ZDgxZWQtMDBmZS00OTQzLTg2MmEtZWViODFmOTQ2NmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSro4Gugk+ctahQoIdH1KFoVRiHTWGv5PE8O z8Eg8HkueCVo2QSmPV3DFv/SPPJaAcpp/Ca+cQWk3/Y7hwWa2ciSl5JfLCBV3WR+ lIezSOj/AXdFMaC++rXgQq/Pdr15d6C2epHC1UGKfm+tjy5GCvnf4ZPt4+MeNren m/TQftzHImLIXioCsA2Izo+PeJuh71PAens11P7JLFdv/62GNmhsb4yMQpsCEvbA Jw5uZK4OXQy45qXdxZcErL5tgsRkIfyVZaS951aTl+CwHc32HikcAuqaAT9aIlsU 0bNnl57bBDIouqh6ZluBOj2IBXDJfsQ1J7XAGNGnnFgkFuUp+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK4PKyeUdpttX6h0X5Ea7FkySOsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMjNjOGUyNTEtOWQ3Ni0z YmRjLTg4ODEtNWFkMzRlYzk5MjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG9xADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCogK5p9TjdtOeAyW1dw6/MYfA0AGAh4CMcVfcZUGDeftqiC5nFlTpI mqsBnzUF/4ARtXiQR2CVpWeOqlHqI7ZRH8Hxuq+6gTEDmF15ZwwLMrtywIlQbEBA V53tnde0oYFavC0zv9QX3nbp7YM5jxtTjC1096Lz+f/c0sJy3erJwnWg4sJFnC4C HP0TfOOGO7YWuYvrr4EpVb4dqwQWs1n99NCQ+pkUQAlmETa+1oHg9OpnYT+ukUnf PHhDpORIxXH9O+QkKGRNgBeL3yB6DXXjafhNpxMmQvJNP9wVA+QEVH5HPDd67e3C O1z0k4ax/JyaQEJoTxFPigCL4aOSc7hq -----END CERTIFICATE-----Generated at Tue Jul 1 21:45:06 2025 by rpki-client