$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa File: a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa (raw, json) Hash identifier: 7ZHuCyGTD2GJpke2aPFp6WMwpECR82zFNozjQVCOJ/c= Subject key identifier: 2B:D4:52:0F:F3:58:14:B5:BA:02:FA:D8:B2:4C:35:BA:C7:00:9A:FC Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AB91B96622B9A0B6D1AD15480 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 3223 IP address blocks: 172.111.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:96:62:2b:9a:0b:6d:1a:d1:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=4964e158-2311-4e2e-992f-94ddf5a208a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:2d:02:ee:5b:f5:00:b4:33:be:44:4f:74: ed:7d:b9:69:10:ee:6e:60:90:bf:c2:32:4f:07:66: 27:70:77:be:1d:49:c1:88:77:a4:34:f8:21:22:a3: a2:66:01:8b:07:e8:57:d4:6d:f9:c9:ec:94:c9:c9: fb:69:ee:40:d5:28:d1:d3:81:51:ca:09:23:43:ac: 5d:a4:3e:b0:6b:c9:64:9e:03:bc:06:ce:d4:25:3d: c5:cf:42:03:b6:a0:57:48:64:1a:c6:d1:b9:c5:01: e2:a9:49:0b:1c:9d:ef:16:9d:fa:6a:5e:f5:7a:c2: cb:ca:fc:51:b4:fb:ea:63:7d:a6:3e:91:09:f3:7f: b6:45:92:45:c8:fe:3a:42:07:6a:9b:51:70:a4:ed: df:d8:3c:b3:c1:76:de:8a:55:11:56:06:b0:d6:ba: 1a:82:a8:e7:d6:98:55:1e:05:fc:42:2a:ca:b1:a9: 1d:91:04:37:b8:c4:20:4a:af:e9:56:b4:84:c9:1a: 7e:71:71:95:dc:4a:10:f6:46:31:5d:38:ff:80:fa: 24:3f:6e:eb:99:ab:22:af:b2:46:fd:f9:e5:ad:52: 26:88:c1:09:7f:31:e7:33:0b:d2:ce:3b:92:a0:8a: 58:7d:94:b8:1d:ee:fb:dd:8b:d8:1b:2a:66:fa:4c: 14:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D4:52:0F:F3:58:14:B5:BA:02:FA:D8:B2:4C:35:BA:C7:00:9A:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:68:b3:b5:41:8e:49:b2:a1:07:75:23:c7:23:9a:dc:11:28: 51:42:87:10:13:c6:d5:cb:4b:b6:56:05:b5:1b:76:e5:bb:5f: d9:bd:db:d5:f3:bd:a0:4a:84:92:c5:e7:c2:ab:f6:4d:6d:e2: 02:28:06:74:3c:90:37:91:aa:77:ae:46:22:5a:9b:c9:22:85: de:ae:a5:bb:e4:de:80:29:1c:be:96:87:48:18:28:8a:d6:6b: 9e:c4:65:e3:fa:2f:0a:eb:b2:3c:80:20:b3:16:6d:fb:55:7b: b2:2e:09:10:0a:5f:b6:95:16:31:22:c9:4c:e1:41:31:97:33: 3a:dc:53:b8:4f:06:b1:90:3e:67:75:1e:4b:76:3d:94:4b:25: ce:0c:09:f2:58:94:c1:90:b5:1a:9e:3a:aa:68:3e:16:2f:10: a5:73:b2:19:be:87:7f:dc:0e:55:98:8a:e4:34:5d:25:09:89: 28:43:b4:2b:a9:10:3c:ec:fc:d8:01:10:0b:ca:e7:91:e0:0c: 06:95:d4:38:9c:00:56:7f:a7:c7:79:c6:af:df:70:9c:ad:b3: 71:e7:19:f2:83:32:71:29:46:b6:b0:99:0a:ec:bd:1f:ec:b5: 65:f3:c8:37:cd:2a:9c:12:d2:ab:58:f6:3d:b9:63:ce:aa:7a: 2c:51:e2:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G5ZiK5oLbRrRVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NDk2NGUxNTgtMjMxMS00ZTJlLTk5MmYtOTRkZGY1YTIwOGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWktAu5b9QC0M75ET3TtfblpEO5uYJC/wjJP B2YncHe+HUnBiHekNPghIqOiZgGLB+hX1G35yeyUycn7ae5A1SjR04FRygkjQ6xd pD6wa8lkngO8Bs7UJT3Fz0IDtqBXSGQaxtG5xQHiqUkLHJ3vFp36al71esLLyvxR tPvqY32mPpEJ83+2RZJFyP46Qgdqm1FwpO3f2DyzwXbeilURVgaw1roagqjn1phV HgX8QirKsakdkQQ3uMQgSq/pVrSEyRp+cXGV3EoQ9kYxXTj/gPokP27rmasir7JG /fnlrVImiMEJfzHnMwvSzjuSoIpYfZS4He773YvYGypm+kwUsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvUUg/zWBS1ugL62LJMNbrHAJr8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTFjODVlYzEtMzZkNy0z YzZiLWJhOWYtNjJjZWExYjFlNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1os7VBjkmyoQd1I8cjmtwRKFFChxATxtXLS7ZWBbUbduW7X9m929Xz vaBKhJLF58Kr9k1t4gIoBnQ8kDeRqneuRiJam8kihd6upbvk3oApHL6Wh0gYKIrW a57EZeP6LwrrsjyAILMWbftVe7IuCRAKX7aVFjEiyUzhQTGXMzrcU7hPBrGQPmd1 Hkt2PZRLJc4MCfJYlMGQtRqeOqpoPhYvEKVzshm+h3/cDlWYiuQ0XSUJiShDtCup EDzs/NgBEAvK55HgDAaV1DicAFZ/p8d5xq/fcJyts3HnGfKDMnEpRrawmQrsvR/s tWXzyDfNKpwS0qtY9j25Y86qeixR4kE= -----END CERTIFICATE-----Generated at Wed Aug 6 10:07:01 2025 by rpki-client