$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa File: 98c89c7a-b014-3805-924d-4831141ca4b6.roa (raw, json) Hash identifier: 14tOGrlu8OPhiEvBElBAhQJsJkQbBqzLcqmSSmLCxk8= Subject key identifier: E3:F9:21:CA:D3:54:94:4B:C2:A7:F4:55:BC:D0:C5:F6:80:4A:58:1C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A23C00DB09BEC7C58994E3480 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 137409 IP address blocks: 172.111.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:0d:b0:9b:ec:7c:58:99:4e:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=f1a6812c-3e92-41a2-93ea-3335422eca59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:be:c7:85:e2:84:13:43:b9:1b:89:ed:8c:9b: 79:b4:72:a8:06:46:a8:db:31:28:1a:bf:56:d2:ef: 6f:0e:e2:d0:7b:9f:39:61:60:fb:f9:69:a4:19:a6: a4:9d:b6:27:8e:18:6e:6e:14:f9:65:17:09:db:33: f3:95:38:54:dd:a6:48:af:66:2d:9e:a4:c8:50:47: d4:17:44:e6:ce:f1:22:b9:8e:12:2b:80:38:96:b4: d1:bb:84:e6:88:38:1d:a3:37:57:a2:eb:fd:1c:3f: 12:ac:62:09:cd:e5:af:67:b5:7a:13:98:e9:2e:fb: 91:40:b2:58:07:bf:09:9b:e3:c3:07:bf:d5:f2:a0: 57:be:e7:3d:52:6b:65:4e:c5:1f:15:82:1a:91:09: f3:65:12:37:3c:b3:84:b0:1d:56:9a:9a:23:13:4e: 2b:a1:d9:fa:90:eb:20:83:a7:86:99:6e:a3:90:9b: 11:23:af:48:99:37:f6:cd:9f:ef:c2:cc:62:cd:2f: 16:38:cf:c4:f6:73:0b:4d:9e:38:5b:4e:ab:54:00: 4f:1a:23:2a:5a:bd:9c:9a:b9:d7:df:ae:b5:99:48: b8:74:c6:5f:c6:a1:9d:f5:63:b5:0d:b5:f4:49:ee: f5:4d:27:0a:50:56:e2:a9:7e:c2:c9:7e:12:d7:cd: 9c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F9:21:CA:D3:54:94:4B:C2:A7:F4:55:BC:D0:C5:F6:80:4A:58:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/98c89c7a-b014-3805-924d-4831141ca4b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:dc:a1:41:63:c0:ea:85:45:15:90:7e:67:4e:0b:0f:0d:34: bb:34:24:0f:01:0e:8d:86:f4:4e:50:37:63:a8:1f:83:ff:51: 3c:a4:97:ab:c6:21:45:5a:9e:5d:28:e5:4d:28:8e:98:86:8a: 8a:36:3d:12:2a:c6:de:10:89:f1:1c:b5:81:1e:00:db:45:04: e3:be:d4:dd:23:bb:f8:33:c4:aa:8f:96:0b:d0:67:b2:74:50: c3:66:d1:a8:5d:da:fc:c6:31:79:4d:83:0c:38:29:5a:c2:9e: 65:6c:70:79:ec:4b:ec:1b:ef:aa:42:f7:f9:ff:53:1b:96:f6: 83:77:f0:a1:b3:2b:61:18:91:dc:3e:d9:8a:9e:9b:8f:0d:0d: 71:31:2b:66:75:b2:8e:69:2b:1d:53:c4:b8:0b:37:94:2d:a6: 68:25:ad:85:bd:ab:ea:ca:63:73:68:a4:66:b4:ad:13:f4:6f: f8:14:dd:4e:24:a7:e7:8c:2b:6e:12:02:d3:24:f5:4c:c9:e2: 4f:2e:f0:66:af:38:8a:72:35:59:4e:58:e9:c2:ee:53:15:98: bd:fc:7d:59:e1:e4:a5:e1:f6:73:30:23:24:d0:a4:d9:18:07: b1:9c:d7:49:67:bc:ec:b7:d5:27:ee:56:f7:82:a7:f8:52:c7: 3a:ad:42:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwA2wm+x8WJlONIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk ZjFhNjgxMmMtM2U5Mi00MWEyLTkzZWEtMzMzNTQyMmVjYTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5b7HheKEE0O5G4ntjJt5tHKoBkao2zEoGr9W 0u9vDuLQe585YWD7+WmkGaaknbYnjhhubhT5ZRcJ2zPzlThU3aZIr2YtnqTIUEfU F0TmzvEiuY4SK4A4lrTRu4TmiDgdozdXouv9HD8SrGIJzeWvZ7V6E5jpLvuRQLJY B78Jm+PDB7/V8qBXvuc9UmtlTsUfFYIakQnzZRI3PLOEsB1WmpojE04rodn6kOsg g6eGmW6jkJsRI69ImTf2zZ/vwsxizS8WOM/E9nMLTZ44W06rVABPGiMqWr2cmrnX 3661mUi4dMZfxqGd9WO1DbX0Se71TScKUFbiqX7CyX4S182cQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOP5IcrTVJRLwqf0VbzQxfaASlgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOThjODljN2EtYjAxNC0z ODA1LTkyNGQtNDgzMTE0MWNhNGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPcoUFjwOqFRRWQfmdOCw8NNLs0JA8BDo2G9E5QN2OoH4P/UTykl6vG IUVanl0o5U0ojpiGioo2PRIqxt4QifEctYEeANtFBOO+1N0ju/gzxKqPlgvQZ7J0 UMNm0ahd2vzGMXlNgww4KVrCnmVscHnsS+wb76pC9/n/UxuW9oN38KGzK2EYkdw+ 2Yqem48NDXExK2Z1so5pKx1TxLgLN5QtpmglrYW9q+rKY3NopGa0rRP0b/gU3U4k p+eMK24SAtMk9UzJ4k8u8GavOIpyNVlOWOnC7lMVmL38fVnh5KXh9nMwIyTQpNkY B7Gc10lnvOy31SfuVveCp/hSxzqtQq4= -----END CERTIFICATE-----Generated at Mon Jun 16 10:18:21 2025 by rpki-client