$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d44ec8a-b582-344c-8805-a64b89c845f0.roa File: 3d44ec8a-b582-344c-8805-a64b89c845f0.roa (raw, json) Hash identifier: 5OEGUUaxr8hUhmPZbRX1YjamS1tJaZPN/2G0C0fBpWw= Subject key identifier: A7:56:CB:B0:AA:87:1E:1C:AA:1D:AF:FE:4B:91:E8:31:6D:CC:A8:37 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AC2E0FEB13C34CE20215AC500 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d44ec8a-b582-344c-8805-a64b89c845f0.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 9009 IP address blocks: 172.111.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:fe:b1:3c:34:ce:20:21:5a:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=e1ecdd91-cc0e-4ea2-be16-25279aff5a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:59:2a:af:6f:c3:c5:97:7b:0e:02:53:f7:98: a3:69:a1:2b:bd:ad:7a:c9:56:01:33:f3:de:ca:1e: 18:1e:1e:e4:5a:f4:87:f6:29:4a:06:ec:b5:04:42: 4d:de:92:08:83:0d:37:00:bc:44:b3:33:ae:6e:20: 4d:d4:b7:b4:b9:db:56:88:0e:fd:2f:5a:d6:1e:9e: 9a:85:86:9f:b3:47:9f:49:74:ee:cd:f9:e1:16:90: 0b:b3:80:17:c9:13:08:ec:5a:a2:82:aa:bc:bc:d5: 26:50:c3:ec:cb:08:22:21:69:00:13:d9:c8:dc:24: b1:f2:1d:e8:d7:b5:16:2e:35:b1:8f:b1:73:d5:70: c2:66:92:23:07:3b:6e:97:87:ed:2a:3d:5c:36:0a: 3b:24:cb:04:26:7c:4c:40:46:f4:9f:59:f4:6c:4d: f6:57:d5:6e:3f:05:e8:13:fb:58:de:e2:25:25:f8: 05:43:46:e8:00:9b:b8:9f:c1:85:38:d3:5b:aa:aa: b0:11:81:cf:1d:50:35:c0:ac:d5:ff:74:46:02:2b: 09:e6:a5:31:f0:5c:b1:92:fd:bf:96:2a:92:5a:4b: 36:00:6d:49:6a:ac:84:e5:71:16:bb:70:f5:81:72: 30:1a:2b:2f:f7:79:8a:88:9d:e8:be:cf:0f:72:51: cb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:56:CB:B0:AA:87:1E:1C:AA:1D:AF:FE:4B:91:E8:31:6D:CC:A8:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d44ec8a-b582-344c-8805-a64b89c845f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:83:05:b3:69:2d:06:92:8b:24:71:6a:27:2c:c4:32:42:b2: a4:ba:be:a6:1b:c5:ee:85:1e:cc:b0:97:d8:71:87:dc:5c:95: 19:16:9d:59:a1:a2:6c:f5:8b:e4:dc:71:82:60:a4:8f:59:5c: 3c:70:62:57:fd:86:59:38:33:51:cb:ad:e5:ff:49:7c:28:e1: 0f:a0:89:dd:3a:b1:50:80:05:60:57:e5:ff:00:72:1b:76:f7: 65:31:7d:b4:34:de:05:07:21:89:35:33:92:9a:dd:80:3d:b2: 23:d1:40:d6:20:de:c4:9d:9f:03:92:d7:18:c9:5c:0b:77:25: 4c:88:64:de:d4:f6:cf:46:1f:51:a4:58:60:fb:70:af:21:03: ba:cb:b8:af:be:f9:f6:a0:6b:ec:a6:4a:e0:e3:50:7f:16:ed: 65:d9:eb:3a:32:65:5a:93:ee:42:75:0d:94:b3:6e:8e:36:89: 76:33:38:2e:69:d2:c7:8c:93:7a:a4:16:16:c1:aa:32:86:84: be:a3:b0:db:60:d7:1a:23:59:61:7a:f3:5b:1c:03:98:40:86: fb:e9:66:20:4c:b7:49:ea:33:9c:b5:35:a0:52:bd:0b:9a:ed: 13:96:44:88:86:73:16:e4:c8:22:84:3b:f6:32:db:93:f2:0e: 8e:48:a3:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4P6xPDTOICFaxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZTFlY2RkOTEtY2MwZS00ZWEyLWJlMTYtMjUyNzlhZmY1YTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlkqr2/DxZd7DgJT95ijaaErva16yVYBM/Pe yh4YHh7kWvSH9ilKBuy1BEJN3pIIgw03ALxEszOubiBN1Le0udtWiA79L1rWHp6a hYafs0efSXTuzfnhFpALs4AXyRMI7Fqigqq8vNUmUMPsywgiIWkAE9nI3CSx8h3o 17UWLjWxj7Fz1XDCZpIjBztul4ftKj1cNgo7JMsEJnxMQEb0n1n0bE32V9VuPwXo E/tY3uIlJfgFQ0boAJu4n8GFONNbqqqwEYHPHVA1wKzV/3RGAisJ5qUx8Fyxkv2/ liqSWks2AG1JaqyE5XEWu3D1gXIwGisv93mKiJ3ovs8PclHLgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdWy7Cqhx4cqh2v/kuR6DFtzKg3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2Q0NGVjOGEtYjU4Mi0z NDRjLTg4MDUtYTY0Yjg5Yzg0NWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWDBbNpLQaSiyRxaicsxDJCsqS6vqYbxe6FHsywl9hxh9xclRkWnVmh omz1i+TccYJgpI9ZXDxwYlf9hlk4M1HLreX/SXwo4Q+gid06sVCABWBX5f8Acht2 92UxfbQ03gUHIYk1M5Ka3YA9siPRQNYg3sSdnwOS1xjJXAt3JUyIZN7U9s9GH1Gk WGD7cK8hA7rLuK+++faga+ymSuDjUH8W7WXZ6zoyZVqT7kJ1DZSzbo42iXYzOC5p 0seMk3qkFhbBqjKGhL6jsNtg1xojWWF681scA5hAhvvpZiBMt0nqM5y1NaBSvQua 7ROWRIiGcxbkyCKEO/Yy25PyDo5Io0s= -----END CERTIFICATE-----Generated at Wed Aug 6 05:54:53 2025 by rpki-client