$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a5fadc25-0dd9-373b-93bb-8d41c0da47ba.roa File: a5fadc25-0dd9-373b-93bb-8d41c0da47ba.roa (raw, json) Hash identifier: iEx9S1VcEQi0/E3k9/phYIau/my9nBDsAQglfQGerew= Subject key identifier: 3A:7E:B5:26:D6:D4:D4:D8:4A:B7:00:A6:4D:91:45:5E:D3:6D:A4:B0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AC0164F57C56E88F82D72F880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a5fadc25-0dd9-373b-93bb-8d41c0da47ba.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 329007 IP address blocks: 172.111.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:4f:57:c5:6e:88:f8:2d:72:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=d6c4da61-5fb9-48ea-a7cf-d89bf353d2a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:a6:8f:31:0a:d3:ff:f5:f9:98:a0:66:6b:02: 9c:46:26:49:fa:14:b6:e9:dc:42:f6:62:65:74:ea: 74:a1:d0:85:cf:4e:57:e8:d2:2a:83:41:ad:68:e9: 41:13:9e:ce:f5:86:74:42:e3:07:ee:10:c4:18:e5: 51:aa:f5:81:d2:3e:23:35:30:29:80:2b:e0:bd:9c: 74:37:85:6d:2a:e7:ac:9d:7d:9c:67:95:b3:8b:c2: 50:63:83:58:ca:91:32:ad:2b:16:c6:e1:fe:d7:a1: e0:6b:1f:2f:e0:6d:2c:85:01:bf:47:07:b5:60:a2: f9:18:62:56:1e:01:50:cf:81:51:c2:d6:3f:d6:56: 85:a6:0f:9c:26:4c:dd:d3:ce:bc:f6:fa:84:d5:22: 3a:58:33:ab:fd:7b:0c:69:f8:97:6b:87:53:60:f4: 5a:51:fd:c6:d6:3f:e1:ef:5c:97:79:ea:c8:8a:7a: 49:f7:70:74:fa:ff:5e:b6:50:ac:de:08:a3:21:c6: f5:05:74:20:8b:1b:6c:39:b8:ed:ab:15:db:46:f9: d5:19:2a:de:32:30:71:b1:e7:1d:a4:be:67:66:2c: 4f:c0:7a:ff:c3:0f:9c:11:49:6f:84:0e:7a:b0:68: 3e:b0:58:e4:fc:ca:2d:6d:d0:1a:7f:ad:63:ea:29: bd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7E:B5:26:D6:D4:D4:D8:4A:B7:00:A6:4D:91:45:5E:D3:6D:A4:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a5fadc25-0dd9-373b-93bb-8d41c0da47ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:9f:14:c0:c2:3d:cf:c1:67:d3:b6:ec:87:6b:38:8c:2c:29: 48:f3:24:37:1b:78:30:b1:e5:33:9f:4a:c8:cd:f3:42:7d:a6: cf:27:ce:31:68:02:c6:e8:39:6e:a1:0e:f0:84:17:c8:8d:b4: f2:03:85:d4:9a:5d:d6:b5:f9:d6:6b:c3:d0:48:bd:3a:ce:d9: c5:d2:0e:10:73:cb:75:2c:f1:6a:20:38:8d:30:6b:ac:14:36: 1d:de:80:7f:94:ca:8e:c1:09:96:3d:a6:e7:9f:7e:07:71:c1: 03:d6:4f:80:76:50:81:dd:b8:12:bb:a8:db:80:cd:36:ec:9d: 16:09:fb:41:b9:0e:b1:4c:f8:9d:53:17:80:69:19:63:3e:0c: 1f:f2:0c:8d:ad:29:c2:6f:2f:dc:85:20:8a:5c:6d:cb:7a:da: 34:52:b8:59:48:97:29:06:4a:06:c2:c0:42:7c:90:dd:4f:66: c9:e3:9b:18:ff:be:c5:28:8c:dd:44:4a:9f:e3:24:78:9f:83: a0:00:6d:9a:a4:fe:1e:ec:dd:db:f8:5f:97:87:08:98:38:7d: b7:82:96:b1:7c:68:c8:87:3f:02:f1:10:86:ef:9e:2b:1e:11: 0f:79:09:60:40:4a:23:d6:e1:d7:1a:4a:6e:ab:3a:68:f7:c2: 32:90:57:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFk9XxW6I+C1y+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ZDZjNGRhNjEtNWZiOS00OGVhLWE3Y2YtZDg5YmYzNTNkMmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/KaPMQrT//X5mKBmawKcRiZJ+hS26dxC9mJl dOp0odCFz05X6NIqg0GtaOlBE57O9YZ0QuMH7hDEGOVRqvWB0j4jNTApgCvgvZx0 N4VtKuesnX2cZ5Wzi8JQY4NYypEyrSsWxuH+16Hgax8v4G0shQG/Rwe1YKL5GGJW HgFQz4FRwtY/1laFpg+cJkzd08689vqE1SI6WDOr/XsMafiXa4dTYPRaUf3G1j/h 71yXeerIinpJ93B0+v9etlCs3gijIcb1BXQgixtsObjtqxXbRvnVGSreMjBxsecd pL5nZixPwHr/ww+cEUlvhA56sGg+sFjk/MotbdAaf61j6im9eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDp+tSbW1NTYSrcApk2RRV7TbaSwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTVmYWRjMjUtMGRkOS0z NzNiLTkzYmItOGQ0MWMwZGE0N2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGifFMDCPc/BZ9O27IdrOIwsKUjzJDcbeDCx5TOfSsjN80J9ps8nzjFo AsboOW6hDvCEF8iNtPIDhdSaXda1+dZrw9BIvTrO2cXSDhBzy3Us8WogOI0wa6wU Nh3egH+Uyo7BCZY9pueffgdxwQPWT4B2UIHduBK7qNuAzTbsnRYJ+0G5DrFM+J1T F4BpGWM+DB/yDI2tKcJvL9yFIIpcbct62jRSuFlIlykGSgbCwEJ8kN1PZsnjmxj/ vsUojN1ESp/jJHifg6AAbZqk/h7s3dv4X5eHCJg4fbeClrF8aMiHPwLxEIbvnise EQ95CWBASiPW4dcaSm6rOmj3wjKQV/A= -----END CERTIFICATE-----Generated at Wed Aug 6 12:43:51 2025 by rpki-client