$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5619dad0-adc5-36da-98cd-88670a8851eb.roa File: 5619dad0-adc5-36da-98cd-88670a8851eb.roa (raw, json) Hash identifier: vWnJxKkHSKXldeovVshzO0rkMN7v1G+WIA+4DWfLETw= Subject key identifier: 35:03:98:BB:8D:5C:52:F4:B7:C0:EC:04:17:FA:F0:0D:05:D4:58:7F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AA160DEF06208B5727CC093C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5619dad0-adc5-36da-98cd-88670a8851eb.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 9009 IP address blocks: 172.111.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:de:f0:62:08:b5:72:7c:c0:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=ec03d9d9-2642-4136-9119-de1a2ed45ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a2:c3:fb:21:86:36:e4:65:6a:76:4a:86:6e: a3:ce:1c:1f:6b:e1:97:ba:d8:44:9c:b1:c6:bf:81: 2c:a7:eb:01:75:89:88:e1:4b:aa:67:8d:5d:a9:34: 67:b9:aa:e8:fd:38:19:22:89:69:31:cb:93:7c:b2: 1a:b5:99:c1:70:1c:1a:6d:90:69:63:51:a5:86:f9: 29:36:b1:83:13:7a:87:e2:0a:f6:8d:3e:36:e3:30: f1:8f:64:1a:30:b8:9c:c2:9a:bf:97:75:bc:c7:a7: cb:57:1b:92:39:5b:73:5f:09:4a:6b:86:a8:1b:0c: ff:18:2f:74:f0:17:72:75:e0:df:db:d1:9c:5a:4c: c1:da:6f:9b:9b:1a:c9:c8:5e:ef:0a:b4:a8:a9:3a: 96:f2:31:4b:26:96:8a:78:38:63:20:3d:99:96:a8: bb:e9:05:68:77:08:bf:ee:a9:c1:ee:01:7f:b4:1c: 15:c1:97:d6:f3:22:09:46:4d:dd:89:ff:9b:86:78: db:53:19:45:2b:0b:55:1e:6a:e2:6b:51:b8:df:3e: 1d:7f:01:42:55:80:49:cc:b3:08:49:8f:48:a6:42: e5:65:b4:7d:9b:43:cb:f0:a0:7e:97:4a:48:68:7e: d0:a7:47:7f:c6:f5:03:e8:95:9d:65:23:02:67:88: 78:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:03:98:BB:8D:5C:52:F4:B7:C0:EC:04:17:FA:F0:0D:05:D4:58:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5619dad0-adc5-36da-98cd-88670a8851eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:6d:a8:44:d4:55:de:29:cf:21:52:48:48:be:51:27:ce:c0: 81:33:80:da:d5:67:d1:74:2a:a3:2e:fe:a4:ab:31:9e:98:a9: ab:0f:e2:88:3a:bf:2a:4a:0e:ec:d5:31:34:07:e1:f5:47:8f: cd:40:f5:67:63:e1:9a:ca:46:73:09:bb:9c:93:69:c6:e8:d4: 2f:7f:02:9a:b8:68:78:e5:88:3a:da:2d:b1:3c:8e:22:14:82: fe:d9:b9:23:dd:6f:f1:86:31:44:a2:83:58:eb:ce:23:a5:38: 36:41:3c:73:71:b9:a9:c9:1e:a4:94:88:e3:a6:25:e7:45:f7: 0e:9d:6c:6d:05:60:4a:a2:7d:a7:e3:99:4a:61:d5:f8:d4:7c: 30:11:3c:b1:14:46:f7:0e:12:a5:29:3f:76:3e:4f:83:e6:86: 40:28:e2:be:a9:70:4e:79:36:1a:dd:eb:44:4f:a4:1c:05:c6: 38:8c:2d:e4:36:3e:9c:73:ea:59:fb:18:63:18:67:fe:1c:1d: 98:68:00:fe:bf:3b:23:91:4f:38:22:c7:ab:a5:72:22:d3:02: 90:88:fa:d8:f3:4f:32:aa:f2:a8:ed:64:4e:80:96:05:71:b5: 99:28:e8:5b:45:75:ee:46:8e:83:51:02:e8:37:4d:57:b7:6b: 13:99:44:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYN7wYgi1cnzAk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk ZWMwM2Q5ZDktMjY0Mi00MTM2LTkxMTktZGUxYTJlZDQ1ZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKLD+yGGNuRlanZKhm6jzhwfa+GXuthEnLHG v4Esp+sBdYmI4UuqZ41dqTRnuaro/TgZIolpMcuTfLIatZnBcBwabZBpY1Glhvkp NrGDE3qH4gr2jT424zDxj2QaMLicwpq/l3W8x6fLVxuSOVtzXwlKa4aoGwz/GC90 8BdydeDf29GcWkzB2m+bmxrJyF7vCrSoqTqW8jFLJpaKeDhjID2Zlqi76QVodwi/ 7qnB7gF/tBwVwZfW8yIJRk3dif+bhnjbUxlFKwtVHmria1G43z4dfwFCVYBJzLMI SY9IpkLlZbR9m0PL8KB+l0pIaH7Qp0d/xvUD6JWdZSMCZ4h4IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUDmLuNXFL0t8DsBBf68A0F1Fh/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTYxOWRhZDAtYWRjNS0z NmRhLTk4Y2QtODg2NzBhODg1MWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFltqETUVd4pzyFSSEi+USfOwIEzgNrVZ9F0KqMu/qSrMZ6YqasP4og6 vypKDuzVMTQH4fVHj81A9Wdj4ZrKRnMJu5yTacbo1C9/Apq4aHjliDraLbE8jiIU gv7ZuSPdb/GGMUSig1jrziOlODZBPHNxuanJHqSUiOOmJedF9w6dbG0FYEqifafj mUph1fjUfDARPLEURvcOEqUpP3Y+T4PmhkAo4r6pcE55Nhrd60RPpBwFxjiMLeQ2 Ppxz6ln7GGMYZ/4cHZhoAP6/OyORTzgix6ulciLTApCI+tjzTzKq8qjtZE6AlgVx tZko6FtFde5GjoNRAug3TVe3axOZRCA= -----END CERTIFICATE-----Generated at Wed Aug 6 13:05:47 2025 by rpki-client