$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8a1ba122-bcad-35e5-8886-23d77ffccc27.roa File: 8a1ba122-bcad-35e5-8886-23d77ffccc27.roa (raw, json) Hash identifier: piX6Q8v2FHkgDHvz6k/deQkdrbXnheyAJ3d/ZBFNjU4= Subject key identifier: 0D:70:2D:D6:CA:11:2B:A9:5B:23:B6:04:68:72:9D:90:CC:4F:2F:96 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584ABEB0DCD3E7CE6C990E57AC80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8a1ba122-bcad-35e5-8886-23d77ffccc27.roa Signing time: Mon 04 Aug 2025 13:00:36 +0000 ROA not before: Mon 04 Aug 2025 13:00:36 +0000 ROA not after: Sun 02 Nov 2025 14:00:36 +0000 asID: 9009 IP address blocks: 172.111.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:be:b0:dc:d3:e7:ce:6c:99:0e:57:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 4 13:00:36 2025 GMT Not After : Nov 2 14:00:36 2025 GMT Subject: CN=2327ad10-76c2-479a-bbbd-59178ac0e349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:45:cf:43:26:58:34:3e:2c:a1:2b:14:fc:e7: 19:2c:39:16:07:86:2f:de:82:21:51:21:35:f2:2e: bf:b8:67:72:9d:67:6d:e1:1c:24:44:f5:64:ff:28: d2:44:45:fb:fd:1b:2b:7c:a0:db:f6:c0:7d:1a:0d: d1:7c:2e:80:03:de:12:f3:f2:f4:79:66:91:fc:3c: 24:4a:34:5e:31:f2:d5:54:06:63:e3:51:1d:d8:d1: 07:e5:34:52:90:2f:8b:49:9e:5f:6e:58:b7:41:b1: b0:4d:6a:53:2e:6b:ce:ea:37:6e:b0:a1:4b:c4:36: d2:d9:89:05:20:d6:f5:74:cb:94:3c:25:0c:b4:89: 7f:1a:4c:c5:9a:87:24:1e:69:fc:1e:61:51:b1:d2: 4d:9b:2d:31:a5:29:1b:aa:b7:fd:e9:e6:0c:15:6e: 5d:09:53:ac:fb:6e:f7:af:f5:35:a3:e8:37:16:cf: c8:34:f7:5d:15:d0:35:97:2b:65:52:ab:de:c4:a9: cc:b9:74:79:b1:f0:c2:d6:1e:9e:54:c3:b5:80:d0: a3:cf:b1:9a:86:8d:5d:8f:81:cc:8f:05:4a:82:f9: 15:39:3a:83:d3:21:1b:20:5b:ea:89:de:71:36:f3: c4:6a:60:50:2b:3f:42:0c:1a:9f:51:fa:6a:43:0d: 00:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:70:2D:D6:CA:11:2B:A9:5B:23:B6:04:68:72:9D:90:CC:4F:2F:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8a1ba122-bcad-35e5-8886-23d77ffccc27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:5e:21:25:9f:49:8a:6f:95:18:fd:5f:5e:44:85:56:62:54: fa:ae:22:5d:5f:f6:00:81:92:f7:35:b9:f1:5a:40:bf:8e:58: e4:61:29:4d:f4:6a:70:fa:b5:f3:7a:44:85:22:08:c5:97:f4: de:18:c6:ef:57:87:3a:fd:04:6e:ef:9c:5c:8f:45:1c:22:de: d8:de:1b:60:8e:83:bd:50:2f:77:ee:7f:1f:2a:bd:db:86:de: b7:c1:8e:3b:5a:69:51:09:00:7e:36:34:ba:ef:44:1c:a5:34: 09:fa:26:ef:c9:7f:92:64:7c:34:d3:92:2d:49:b8:5a:87:09: 0b:66:be:2a:8e:c4:f2:1c:63:bf:4c:f8:a3:b7:94:df:0f:1c: d4:31:48:70:0c:27:01:35:61:d2:d9:99:ba:58:77:c4:aa:e1: 40:57:ff:ae:a8:d4:ac:46:b5:17:96:68:3f:1e:90:9c:7f:4d: 12:7d:ad:ca:a5:31:16:5a:ab:e6:72:65:da:33:73:e2:11:ac: b3:af:f7:ae:98:58:c0:a3:f1:4a:cc:fe:40:1d:b7:9f:d1:87: 2a:68:ad:09:41:94:38:ab:42:f3:f1:ef:7a:86:76:68:4e:64: 44:86:8c:2d:a5:25:6d:0a:25:d4:25:bf:d4:b9:69:22:f4:75: 91:77:bd:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq+sNzT585smQ5XrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgwNDEzMDAzNloXDTI1MTEwMjE0MDAzNlowLzEtMCsGA1UEAxMk MjMyN2FkMTAtNzZjMi00NzlhLWJiYmQtNTkxNzhhYzBlMzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEXPQyZYND4soSsU/OcZLDkWB4Yv3oIhUSE1 8i6/uGdynWdt4RwkRPVk/yjSREX7/RsrfKDb9sB9Gg3RfC6AA94S8/L0eWaR/Dwk SjReMfLVVAZj41Ed2NEH5TRSkC+LSZ5fbli3QbGwTWpTLmvO6jdusKFLxDbS2YkF INb1dMuUPCUMtIl/GkzFmockHmn8HmFRsdJNmy0xpSkbqrf96eYMFW5dCVOs+273 r/U1o+g3Fs/INPddFdA1lytlUqvexKnMuXR5sfDC1h6eVMO1gNCjz7Gaho1dj4HM jwVKgvkVOTqD0yEbIFvqid5xNvPEamBQKz9CDBqfUfpqQw0AVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1wLdbKESupWyO2BGhynZDMTy+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOGExYmExMjItYmNhZC0z NWU1LTg4ODYtMjNkNzdmZmNjYzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdeISWfSYpvlRj9X15EhVZiVPquIl1f9gCBkvc1ufFaQL+OWORhKU30 anD6tfN6RIUiCMWX9N4Yxu9Xhzr9BG7vnFyPRRwi3tjeG2COg71QL3fufx8qvduG 3rfBjjtaaVEJAH42NLrvRBylNAn6Ju/Jf5JkfDTTki1JuFqHCQtmviqOxPIcY79M +KO3lN8PHNQxSHAMJwE1YdLZmbpYd8Sq4UBX/66o1KxGtReWaD8ekJx/TRJ9rcql MRZaq+ZyZdozc+IRrLOv966YWMCj8UrM/kAdt5/RhyporQlBlDirQvPx73qGdmhO ZESGjC2lJW0KJdQlv9S5aSL0dZF3vQs= -----END CERTIFICATE-----Generated at Wed Aug 6 16:24:27 2025 by rpki-client