$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/753b1cef-8f73-33af-bcd5-dc3f7c93b4c9.roa File: 753b1cef-8f73-33af-bcd5-dc3f7c93b4c9.roa (raw, json) Hash identifier: 7h4M+2gPGxxEZo7z0NZsWjeDKHZhsOlUhlrC5c5t25Y= Subject key identifier: 36:32:9F:90:BA:D8:92:4E:74:4C:BD:7A:79:EA:2C:9D:AF:10:2F:03 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584ABD4B8E704169E30E89BBCF40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/753b1cef-8f73-33af-bcd5-dc3f7c93b4c9.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 9009 IP address blocks: 172.111.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:8e:70:41:69:e3:0e:89:bb:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=e5b7c9fa-15c2-4151-9bcb-29de0b1e2f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:26:38:c8:4b:b2:fd:66:e8:a3:53:a4:a3:31: 01:55:4c:21:3b:3f:43:32:52:4a:12:07:ce:e8:18: ad:b3:29:11:7a:da:39:7d:4f:82:37:dc:3d:26:55: b0:8e:30:99:41:01:2b:8e:40:fd:59:68:7d:4b:2c: 68:36:5c:79:ac:fd:79:d1:88:bb:11:78:8d:88:89: 2f:5b:29:27:5a:4c:e2:2e:a3:a4:e5:f6:5a:f2:b4: 80:3c:79:9d:cc:41:3f:91:e0:d2:36:92:6b:cb:35: 22:ef:ef:ce:68:f7:7f:45:ff:62:5b:aa:da:f9:7e: 7e:c2:13:ec:ea:c1:75:40:e0:77:e9:df:11:5a:74: 3a:25:bc:15:29:d8:f6:e9:b1:db:8e:4f:da:0c:0d: a8:9c:42:88:9b:80:f0:af:f6:0c:4c:65:4a:3c:d9: b0:46:12:fe:e4:48:43:aa:71:a1:31:b0:87:f4:57: 0f:d5:7e:e1:66:70:62:11:38:a6:17:04:50:34:be: 37:2a:97:f3:1f:9b:96:dd:30:5f:1c:54:48:de:1a: 29:b7:6c:fe:a9:99:88:67:ee:a2:b4:bc:93:31:43: 23:cc:ab:0f:a6:4f:47:e8:2c:7e:5d:c9:44:f4:93: 19:37:ac:4c:65:c0:39:fb:0c:67:d1:ad:2f:11:be: b8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:32:9F:90:BA:D8:92:4E:74:4C:BD:7A:79:EA:2C:9D:AF:10:2F:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/753b1cef-8f73-33af-bcd5-dc3f7c93b4c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:52:f0:08:93:3d:65:e6:8b:45:ae:e3:72:f6:13:5e:8e:2b: c8:76:11:79:3c:98:28:c2:9a:18:40:0e:ad:8c:95:89:8d:8f: 08:7e:d3:49:7d:9e:f8:dc:b3:43:41:84:ea:37:2e:5c:cb:61: 53:6b:54:57:1a:28:d0:c7:03:1c:a1:95:c9:ed:37:d0:7f:3c: 40:4e:ad:b6:49:ca:63:e6:32:16:a3:da:29:0d:0a:62:da:0e: ac:83:ca:c5:20:22:a1:b0:95:4e:51:af:57:94:2a:55:1d:97: a6:0f:9f:11:78:84:3d:d2:96:c2:4f:46:e4:71:e6:90:45:38: 91:29:36:b8:98:3d:6d:55:8c:30:95:45:4c:a8:03:63:5e:d9: 21:1c:aa:ac:73:6b:1c:37:5a:79:3e:c0:ac:52:0d:51:93:a7: 07:2c:e1:a9:a3:d8:85:e6:58:d1:ca:be:07:85:f4:18:a3:dc: 30:24:a7:56:7f:a0:d4:c9:4d:72:76:47:92:70:d9:66:fb:13: 6f:f7:61:f7:5b:68:fb:99:9c:da:23:ce:df:d8:85:f1:eb:5b: c8:b9:6e:64:1a:14:ff:d0:56:19:96:3b:f4:23:c4:70:91:05: 03:80:fb:e0:3f:69:31:97:cd:d2:f5:79:5a:cf:6c:97:f7:45: 4f:ef:c8:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S45wQWnjDom7z0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZTViN2M5ZmEtMTVjMi00MTUxLTliY2ItMjlkZTBiMWUyZjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyY4yEuy/Wboo1OkozEBVUwhOz9DMlJKEgfO 6BitsykReto5fU+CN9w9JlWwjjCZQQErjkD9WWh9SyxoNlx5rP150Yi7EXiNiIkv WyknWkziLqOk5fZa8rSAPHmdzEE/keDSNpJryzUi7+/OaPd/Rf9iW6ra+X5+whPs 6sF1QOB36d8RWnQ6JbwVKdj26bHbjk/aDA2onEKIm4Dwr/YMTGVKPNmwRhL+5EhD qnGhMbCH9FcP1X7hZnBiETimFwRQNL43KpfzH5uW3TBfHFRI3hopt2z+qZmIZ+6i tLyTMUMjzKsPpk9H6Cx+XclE9JMZN6xMZcA5+wxn0a0vEb64wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYyn5C62JJOdEy9ennqLJ2vEC8DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzUzYjFjZWYtOGY3My0z M2FmLWJjZDUtZGMzZjdjOTNiNGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5S8AiTPWXmi0Wu43L2E16OK8h2EXk8mCjCmhhADq2MlYmNjwh+00l9 nvjcs0NBhOo3LlzLYVNrVFcaKNDHAxyhlcntN9B/PEBOrbZJymPmMhaj2ikNCmLa DqyDysUgIqGwlU5Rr1eUKlUdl6YPnxF4hD3SlsJPRuRx5pBFOJEpNriYPW1VjDCV RUyoA2Ne2SEcqqxzaxw3Wnk+wKxSDVGTpwcs4amj2IXmWNHKvgeF9Bij3DAkp1Z/ oNTJTXJ2R5Jw2Wb7E2/3YfdbaPuZnNojzt/YhfHrW8i5bmQaFP/QVhmWO/QjxHCR BQOA++A/aTGXzdL1eVrPbJf3RU/vyEA= -----END CERTIFICATE-----Generated at Wed Aug 6 16:05:28 2025 by rpki-client