$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1079a8bb-60aa-346e-83e0-22a9ba34cf2b.roa File: 1079a8bb-60aa-346e-83e0-22a9ba34cf2b.roa (raw, json) Hash identifier: hjDJdssEPYYyQHS1CYJrLeW+rzVLYRGRSMe5TVb2oT8= Subject key identifier: 01:FB:A0:4D:8E:9D:62:3D:32:8F:EB:2C:C0:8E:DE:9E:1C:C2:2B:94 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849AA4F70C4C464C38F9FA50880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1079a8bb-60aa-346e-83e0-22a9ba34cf2b.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 172.111.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:70:c4:c4:64:c3:8f:9f:a5:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=0d015efa-661a-4896-8ff3-ea3206d94d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:01:04:48:5b:83:e9:46:02:0c:9c:99:1f:ae: 55:68:7b:61:43:de:bc:2c:1f:2f:ff:9c:ed:de:72: ec:ee:3e:29:49:fc:6e:55:15:21:c1:c3:5c:0c:2d: 7e:73:bf:66:56:a9:20:b6:48:79:e8:6d:e1:cd:99: 90:3d:b0:a8:15:26:03:65:a8:14:09:4f:08:9f:1e: a4:75:a9:e9:77:41:06:b6:53:e2:a8:41:8f:bc:5f: 44:28:d0:65:e1:a1:bf:d9:97:44:19:56:46:1a:8b: 01:85:cd:64:81:dd:e6:79:28:38:35:ce:0d:8a:27: c6:cd:7a:e0:e4:37:7b:f2:e4:ea:4b:e0:26:6b:2c: f4:8c:7f:37:c2:4a:c3:4d:bb:65:5f:1a:c8:70:54: cd:c8:ff:e3:0d:61:cb:7b:93:f1:8b:1c:f1:ed:1e: c5:bf:c8:36:28:49:c0:cb:54:a8:c9:f4:b5:a5:44: ad:65:2d:3e:8e:35:9b:a8:7b:3d:d0:2e:46:1f:bc: dc:5e:68:c3:98:69:c2:c7:ae:4d:20:79:9d:00:c2: f5:8e:1e:ba:09:36:7b:c1:bc:7c:0b:5a:27:11:24: b9:0c:f8:f6:5e:29:d9:9b:74:dd:d7:9f:ee:e7:6a: 46:c9:71:ad:a5:49:97:83:6a:ee:68:c6:f7:ca:34: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FB:A0:4D:8E:9D:62:3D:32:8F:EB:2C:C0:8E:DE:9E:1C:C2:2B:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1079a8bb-60aa-346e-83e0-22a9ba34cf2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:7b:29:51:fb:57:0a:ff:ca:c9:8e:c0:39:1d:bc:55:bd:c9: 60:18:45:74:6a:d5:7b:43:d5:7c:1b:c4:d0:09:49:b6:66:d3: 2b:f3:eb:c3:96:ff:f4:11:35:7a:d2:74:55:3b:74:70:42:08: 47:74:41:39:d4:58:a0:3e:1e:b8:a0:e2:34:83:60:c4:56:12: 67:86:6a:f5:22:e7:d4:37:e3:e0:19:83:42:5a:74:e9:00:81: da:c3:b9:a6:67:d0:01:d0:4f:2e:31:fc:1e:06:de:bd:eb:5f: 0b:31:21:f6:66:46:de:8c:2d:e7:e3:99:b1:d2:61:6c:2d:cb: 6f:3a:3a:69:bc:cc:1a:44:d0:78:3a:1f:ab:db:eb:d2:bc:7f: ed:1a:b7:8e:46:54:ad:70:7e:b9:6c:9e:81:57:ad:62:10:ed: 17:ec:bf:1f:e3:3d:50:47:ac:32:c9:a5:1a:d9:6d:b0:ec:52: 82:26:bc:e2:f4:a2:f3:04:04:a1:47:6a:9a:51:a7:11:64:fc: 51:bd:ed:15:e8:0d:4c:00:bc:72:07:11:a4:22:46:5a:a3:a9: b0:c3:f3:e4:c9:9f:77:54:9e:d4:3c:d4:27:bd:b7:95:ac:ce: 72:f4:c4:f6:6e:43:6d:8f:3a:fa:57:c4:28:2f:fc:7d:cc:c7: 9c:34:30:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3DExGTDj5+lCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk MGQwMTVlZmEtNjYxYS00ODk2LThmZjMtZWEzMjA2ZDk0ZDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAEESFuD6UYCDJyZH65VaHthQ968LB8v/5zt 3nLs7j4pSfxuVRUhwcNcDC1+c79mVqkgtkh56G3hzZmQPbCoFSYDZagUCU8Inx6k danpd0EGtlPiqEGPvF9EKNBl4aG/2ZdEGVZGGosBhc1kgd3meSg4Nc4NiifGzXrg 5Dd78uTqS+Amayz0jH83wkrDTbtlXxrIcFTNyP/jDWHLe5Pxixzx7R7Fv8g2KEnA y1SoyfS1pUStZS0+jjWbqHs90C5GH7zcXmjDmGnCx65NIHmdAML1jh66CTZ7wbx8 C1onESS5DPj2XinZm3Td15/u52pGyXGtpUmXg2ruaMb3yjT9KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAH7oE2OnWI9Mo/rLMCO3p4cwiuUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTA3OWE4YmItNjBhYS0z NDZlLTgzZTAtMjJhOWJhMzRjZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp7KVH7Vwr/ysmOwDkdvFW9yWAYRXRq1XtD1XwbxNAJSbZm0yvz68OW //QRNXrSdFU7dHBCCEd0QTnUWKA+Hrig4jSDYMRWEmeGavUi59Q34+AZg0JadOkA gdrDuaZn0AHQTy4x/B4G3r3rXwsxIfZmRt6MLefjmbHSYWwty286Omm8zBpE0Hg6 H6vb69K8f+0at45GVK1wfrlsnoFXrWIQ7Rfsvx/jPVBHrDLJpRrZbbDsUoImvOL0 ovMEBKFHappRpxFk/FG97RXoDUwAvHIHEaQiRlqjqbDD8+TJn3dUntQ81Ce9t5Ws znL0xPZuQ22POvpXxCgv/H3Mx5w0MBE= -----END CERTIFICATE-----Generated at Sat Jun 14 06:47:33 2025 by rpki-client