$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/531069aa-fc87-328c-84eb-4940ce8d82da.roa File: 531069aa-fc87-328c-84eb-4940ce8d82da.roa (raw, json) Hash identifier: TaD5qCLUK/XG6XwHLmW68Z31vUyWAYyElUfB3VYuUHk= Subject key identifier: D2:B9:05:1D:E7:B4:94:15:17:B6:3C:93:DC:EE:94:74:8D:60:4C:C0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849AA4F70A6643F03C3BB9D11C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/531069aa-fc87-328c-84eb-4940ce8d82da.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 14618 IP address blocks: 172.111.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:70:a6:64:3f:03:c3:bb:9d:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=fef49ac6-f9b0-4391-8cf3-517319e81b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1b:f2:8f:9d:13:99:8f:de:ae:5e:f5:a7:47: 62:a2:71:02:f3:9e:4e:92:66:b4:ba:27:44:85:97: bf:2f:0c:a1:52:79:d8:e4:82:88:07:ce:dd:32:8d: c4:18:9b:7b:59:f1:f4:d4:01:52:66:24:e9:7c:bc: 7a:79:74:b2:07:0c:21:73:82:0e:b6:f7:57:27:dc: f6:db:1f:59:8f:46:15:f9:60:04:7c:5a:2b:63:c2: 78:11:c7:ed:26:c6:42:74:9f:22:18:0c:39:79:93: cc:42:bd:4a:df:e0:20:24:47:b2:26:c1:71:c3:31: 02:06:d3:96:88:b2:e4:69:dc:b5:00:3c:14:60:58: 75:af:30:0c:3e:75:3b:c6:0d:91:4e:04:79:6c:5c: 4a:2d:30:09:69:53:8e:98:67:f2:f5:1b:1d:05:1e: de:ac:e4:b9:69:f3:1c:d0:74:f2:1f:70:16:3f:6e: 77:ca:e9:f4:76:2e:7a:ee:48:3b:12:ef:25:eb:94: bc:6a:1f:29:6d:d9:7b:b0:cb:14:74:6d:3f:0d:6c: fa:06:dc:a4:85:e2:9c:16:7d:4c:f5:be:ee:a7:18: 51:97:dc:5d:f6:2f:9d:9f:47:db:3c:8e:b4:71:3b: ed:ca:6d:68:45:c1:3b:d1:51:46:d4:b6:92:4e:21: 9a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B9:05:1D:E7:B4:94:15:17:B6:3C:93:DC:EE:94:74:8D:60:4C:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/531069aa-fc87-328c-84eb-4940ce8d82da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:32:e8:a1:8b:01:1a:91:c3:60:dd:5a:6d:00:67:f1:8a:ff: cb:4f:81:7b:76:9c:5a:1c:be:4a:91:88:44:44:1f:ac:df:0c: 9c:5a:c5:86:fa:ae:96:d2:e0:ab:cf:43:fe:20:c7:de:16:52: 64:6c:85:52:92:fa:9e:82:5f:f0:16:5d:7d:78:6c:d1:8d:74: fd:e9:22:d2:2c:37:eb:d3:00:42:82:fc:45:8b:ac:db:94:c6: cf:10:15:4a:9f:77:09:5a:89:0f:05:e7:1a:77:fb:af:f5:1e: 99:30:52:bc:df:1b:eb:52:f1:fd:6a:66:f0:07:40:3e:bd:9c: fc:9b:24:ac:ce:b7:0a:ba:51:60:31:e2:d5:65:0f:d5:e5:df: 19:df:2b:5b:5f:15:99:f9:52:05:b1:0b:e1:37:7f:0f:06:26: 49:80:ce:1b:2a:89:db:84:e9:90:66:35:9f:89:80:b0:e3:f6: d2:6f:a8:1d:42:2d:09:5c:68:65:4c:73:f5:c8:83:cb:3f:22: 96:55:8e:53:90:23:7e:5c:e2:e2:1b:18:4c:dc:04:bd:ec:13: 02:2d:fc:27:c6:89:56:02:4c:f2:49:d7:4f:90:98:35:46:55: 15:04:9b:dc:de:a1:4a:70:1c:87:c3:ae:27:b5:30:ca:0f:44: 70:df:e0:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3CmZD8Dw7udEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk ZmVmNDlhYzYtZjliMC00MzkxLThjZjMtNTE3MzE5ZTgxYjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxvyj50TmY/erl71p0dionEC855Okma0uidE hZe/LwyhUnnY5IKIB87dMo3EGJt7WfH01AFSZiTpfLx6eXSyBwwhc4IOtvdXJ9z2 2x9Zj0YV+WAEfForY8J4EcftJsZCdJ8iGAw5eZPMQr1K3+AgJEeyJsFxwzECBtOW iLLkady1ADwUYFh1rzAMPnU7xg2RTgR5bFxKLTAJaVOOmGfy9RsdBR7erOS5afMc 0HTyH3AWP253yun0di567kg7Eu8l65S8ah8pbdl7sMsUdG0/DWz6BtykheKcFn1M 9b7upxhRl9xd9i+dn0fbPI60cTvtym1oRcE70VFG1LaSTiGaAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNK5BR3ntJQVF7Y8k9zulHSNYEzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTMxMDY5YWEtZmM4Ny0z MjhjLTg0ZWItNDk0MGNlOGQ4MmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIy6KGLARqRw2DdWm0AZ/GK/8tPgXt2nFocvkqRiEREH6zfDJxaxYb6 rpbS4KvPQ/4gx94WUmRshVKS+p6CX/AWXX14bNGNdP3pItIsN+vTAEKC/EWLrNuU xs8QFUqfdwlaiQ8F5xp3+6/1HpkwUrzfG+tS8f1qZvAHQD69nPybJKzOtwq6UWAx 4tVlD9Xl3xnfK1tfFZn5UgWxC+E3fw8GJkmAzhsqiduE6ZBmNZ+JgLDj9tJvqB1C LQlcaGVMc/XIg8s/IpZVjlOQI35c4uIbGEzcBL3sEwIt/CfGiVYCTPJJ10+QmDVG VRUEm9zeoUpwHIfDrie1MMoPRHDf4GU= -----END CERTIFICATE-----Generated at Wed Jun 18 13:05:50 2025 by rpki-client