$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831e684b-3865-3f29-a227-911e4062b52f.roa File: 831e684b-3865-3f29-a227-911e4062b52f.roa (raw, json) Hash identifier: JIoDdXEeMomjvl2PnaKHC3YNNk95ybrSqnqWaMt34GQ= Subject key identifier: 2F:71:A7:16:3C:DF:5F:38:CE:4B:60:3B:F9:3A:67:A1:38:76:79:07 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849FE0FFB4545F211F9F0B8B900 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831e684b-3865-3f29-a227-911e4062b52f.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 9009 IP address blocks: 172.111.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:fb:45:45:f2:11:f9:f0:b8:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=6c399768-d984-461d-b388-a09278e26e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a1:16:e2:c7:7a:3d:93:2d:77:ed:d4:7c:49: 04:55:59:8e:65:02:f3:9e:2b:3c:d2:a4:91:9b:e8: 54:8c:e3:87:90:19:17:70:2f:a4:08:b0:4e:ec:a3: 9e:39:ff:ee:34:c2:09:fc:44:1d:3a:fd:97:e1:c1: 0c:dd:c7:9a:6e:20:4f:48:39:60:d3:ca:d1:90:a5: f0:29:85:49:85:80:b6:de:3e:4b:ec:a4:f0:62:ea: fb:a4:8c:47:a2:a9:29:94:74:ec:15:35:5b:ce:a8: b7:a6:c3:b5:85:0b:ef:80:40:b9:40:a5:51:42:af: b6:08:82:18:37:79:cf:da:0e:ba:3e:42:37:e4:d5: 9c:c4:11:be:9b:d1:f9:4c:7b:bc:63:1f:2a:36:20: 6f:bf:2f:da:d1:18:ec:a1:a3:46:c3:82:65:c5:88: c2:49:ce:ad:d5:0a:7e:9f:42:84:cb:47:a2:44:da: 92:1f:bf:b7:32:6f:81:4a:ce:ba:2d:18:c7:2a:41: 87:c4:90:b9:9b:43:cb:5d:5e:6a:eb:52:c0:9f:c5: 02:3e:56:f3:08:94:c5:e9:b9:e6:12:d9:bf:74:80: 0f:9f:ea:43:4f:98:24:23:e0:31:c6:4e:eb:4b:d5: d8:55:69:a7:2b:42:3f:d8:b1:6b:d3:32:35:a0:ae: 04:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:71:A7:16:3C:DF:5F:38:CE:4B:60:3B:F9:3A:67:A1:38:76:79:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831e684b-3865-3f29-a227-911e4062b52f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:9c:99:2b:5e:c0:5b:61:d1:fb:b1:d3:2d:99:73:e8:66:b8: a8:c2:ce:65:52:ec:c6:c7:f1:9b:28:9b:5f:9a:65:dc:02:59: 08:5a:20:a3:d6:41:cd:c1:60:47:ae:34:2e:b9:f0:d8:2c:42: 87:cf:08:d8:f9:a4:5d:ea:9c:77:86:23:59:23:b1:c4:e8:86: 39:8f:96:d5:89:81:26:28:d2:9c:87:12:ee:07:fe:86:d6:59: 18:cc:fa:91:c5:f6:ab:cf:52:be:82:16:f6:36:1e:2d:cd:b7: f2:d7:dd:7e:b9:fe:26:3e:0d:98:fe:50:e0:be:d1:cb:9a:9b: 83:ae:2f:a2:ea:34:54:bd:6a:c5:79:19:d2:b9:a1:01:de:ed: 36:b3:ac:37:9c:fe:05:78:5c:fd:6e:d9:ae:74:ca:9f:fd:85: 3d:e5:79:4b:51:7b:87:7e:fb:29:97:62:80:d7:fa:c5:b6:cd: 3c:52:52:99:55:e5:6f:16:e6:24:85:f6:b6:60:55:fd:29:1b: 22:a0:a3:a0:35:bf:03:2d:19:74:c8:44:2e:96:c3:97:be:b7: 0b:1e:a8:8c:6d:8a:3a:ab:00:3d:e8:ed:c1:d1:72:e1:df:26: 73:d0:fa:c1:76:de:3d:74:3a:de:48:9e:2b:90:78:22:3c:52: 30:af:ad:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D/tFRfIR+fC4uQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk NmMzOTk3NjgtZDk4NC00NjFkLWIzODgtYTA5Mjc4ZTI2ZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KEW4sd6PZMtd+3UfEkEVVmOZQLznis80qSR m+hUjOOHkBkXcC+kCLBO7KOeOf/uNMIJ/EQdOv2X4cEM3ceabiBPSDlg08rRkKXw KYVJhYC23j5L7KTwYur7pIxHoqkplHTsFTVbzqi3psO1hQvvgEC5QKVRQq+2CIIY N3nP2g66PkI35NWcxBG+m9H5THu8Yx8qNiBvvy/a0RjsoaNGw4JlxYjCSc6t1Qp+ n0KEy0eiRNqSH7+3Mm+BSs66LRjHKkGHxJC5m0PLXV5q61LAn8UCPlbzCJTF6bnm Etm/dIAPn+pDT5gkI+Axxk7rS9XYVWmnK0I/2LFr0zI1oK4EJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9xpxY83184zktgO/k6Z6E4dnkHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODMxZTY4NGItMzg2NS0z ZjI5LWEyMjctOTExZTQwNjJiNTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWcmStewFth0fux0y2Zc+hmuKjCzmVS7MbH8Zsom1+aZdwCWQhaIKPW Qc3BYEeuNC658NgsQofPCNj5pF3qnHeGI1kjscTohjmPltWJgSYo0pyHEu4H/obW WRjM+pHF9qvPUr6CFvY2Hi3Nt/LX3X65/iY+DZj+UOC+0cuam4OuL6LqNFS9asV5 GdK5oQHe7TazrDec/gV4XP1u2a50yp/9hT3leUtRe4d++ymXYoDX+sW2zTxSUplV 5W8W5iSF9rZgVf0pGyKgo6A1vwMtGXTIRC6Ww5e+twseqIxtijqrAD3o7cHRcuHf JnPQ+sF23j10Ot5IniuQeCI8UjCvrfI= -----END CERTIFICATE-----Generated at Mon Jun 16 22:12:33 2025 by rpki-client