$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa File: 9d435f49-9dcd-3273-914a-89e66b8a1f88.roa (raw, json) Hash identifier: pAOS8p4V94ZwOjXzttOsYmOwyfkmM0FDK99DdGXWmY8= Subject key identifier: 2F:8C:C7:35:67:F2:49:5D:27:CD:4B:4A:D6:4C:FF:D3:5D:E6:30:8D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A29556AF490BFE6C6BC07F100 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 9009 IP address blocks: 172.111.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:6a:f4:90:bf:e6:c6:bc:07:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=737027cd-dd90-4dde-8335-f13a51ce86ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4a:b5:80:06:53:c0:1c:db:d0:f8:8c:f5:7f: 48:08:83:b8:25:ae:f2:86:d4:f9:b3:e5:d3:43:02: 52:00:c6:30:52:da:9e:c4:e4:a8:85:26:b0:57:a0: e0:47:d2:37:8f:b1:aa:dc:50:c2:90:f8:fc:f3:5b: 85:f5:d4:75:f3:ec:fd:06:01:d8:54:05:64:8e:0f: 0c:5b:39:65:d1:f8:82:6d:53:6f:0e:ba:b2:f7:59: 2d:d5:f0:09:f8:fc:3c:ee:ab:96:6c:21:6e:bd:ce: 72:e1:c6:25:2c:35:83:49:ee:99:8a:d7:9f:af:f0: 27:18:c0:4e:06:3a:2d:94:17:f5:63:91:e4:58:65: 29:c6:13:83:e3:60:4c:a0:a2:54:aa:cc:d9:4f:20: f0:05:7d:e0:8c:b6:a3:14:e5:85:30:5f:be:79:71: 28:4b:66:66:10:a4:b0:2f:7a:ae:8b:ad:24:11:1c: a9:79:92:32:61:3b:8b:18:68:60:95:d6:a5:0a:9c: 71:b8:d8:ff:0e:cb:a9:96:cd:ac:fd:14:5a:df:8d: 1a:81:01:f4:4a:df:20:d9:0d:6a:ca:a9:a5:e8:ef: 0d:07:15:b4:ee:37:81:b1:8e:9b:56:da:dd:1c:b1: 13:c4:99:f9:f3:8e:03:fb:77:9c:25:ea:7d:2c:6a: 53:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8C:C7:35:67:F2:49:5D:27:CD:4B:4A:D6:4C:FF:D3:5D:E6:30:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:27:6d:b9:df:18:24:ee:d4:d6:50:76:70:ec:b8:11:5c:80: bf:98:7c:9b:24:31:18:6f:3d:f2:b1:f0:6d:6a:2f:59:27:2b: 78:46:9b:8a:ce:54:8e:b3:62:9b:ea:81:42:2f:3e:41:1b:b9: 75:75:d6:5d:02:95:25:74:cf:0e:8b:e9:a7:4b:86:c1:cd:77: 1f:a0:b1:25:9e:b1:cb:04:e1:ba:84:d1:87:5c:80:cb:6d:13: d1:60:c2:59:c0:7c:f7:f5:93:0b:8a:8f:ce:2a:0d:69:5f:3e: e7:81:ec:a1:a7:5f:70:2d:6c:51:64:09:cc:23:7d:c3:79:72: 15:e4:c7:22:ca:85:54:79:80:27:f6:66:4b:9b:65:ad:ae:d3: 61:6b:07:90:6b:3a:2d:a9:03:fc:39:5b:93:cc:5e:d1:27:f8: c1:63:b6:90:42:b4:dd:56:a5:1c:7c:15:e9:b7:15:78:6c:4a: 97:09:5a:c1:2e:49:1b:26:64:59:a1:dc:29:56:6f:c0:aa:dc: 58:b1:1f:61:6c:f6:ce:24:d3:38:de:7c:c5:38:e4:15:01:a8: eb:4b:83:11:b4:f3:43:e1:22:61:06:6a:2d:a5:85:a5:64:fe: 1b:5f:aa:c1:6d:89:56:e2:e6:0e:cd:f0:32:ab:1d:de:1b:8c: 49:1c:6d:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEopVWr0kL/mxrwH8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk NzM3MDI3Y2QtZGQ5MC00ZGRlLTgzMzUtZjEzYTUxY2U4NmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Uq1gAZTwBzb0PiM9X9ICIO4Ja7yhtT5s+XT QwJSAMYwUtqexOSohSawV6DgR9I3j7Gq3FDCkPj881uF9dR18+z9BgHYVAVkjg8M Wzll0fiCbVNvDrqy91kt1fAJ+Pw87quWbCFuvc5y4cYlLDWDSe6Zitefr/AnGMBO BjotlBf1Y5HkWGUpxhOD42BMoKJUqszZTyDwBX3gjLajFOWFMF++eXEoS2ZmEKSw L3qui60kERypeZIyYTuLGGhgldalCpxxuNj/Dsupls2s/RRa340agQH0St8g2Q1q yqml6O8NBxW07jeBsY6bVtrdHLETxJn5844D+3ecJep9LGpT+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+MxzVn8kldJ81LStZM/9Nd5jCNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWQ0MzVmNDktOWRjZC0z MjczLTkxNGEtODllNjZiOGExZjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsnbbnfGCTu1NZQdnDsuBFcgL+YfJskMRhvPfKx8G1qL1knK3hGm4rO VI6zYpvqgUIvPkEbuXV11l0ClSV0zw6L6adLhsHNdx+gsSWescsE4bqE0YdcgMtt E9FgwlnAfPf1kwuKj84qDWlfPueB7KGnX3AtbFFkCcwjfcN5chXkxyLKhVR5gCf2 ZkubZa2u02FrB5BrOi2pA/w5W5PMXtEn+MFjtpBCtN1WpRx8Fem3FXhsSpcJWsEu SRsmZFmh3ClWb8Cq3FixH2Fs9s4k0zjefMU45BUBqOtLgxG080PhImEGai2lhaVk /htfqsFtiVbi5g7N8DKrHd4bjEkcbWI= -----END CERTIFICATE-----Generated at Tue Jun 17 07:08:53 2025 by rpki-client