$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a71e0638-78b5-3914-8d96-9db194d3fc38.roa File: a71e0638-78b5-3914-8d96-9db194d3fc38.roa (raw, json) Hash identifier: LWPH4CFCStZmi/EpJJJ0/CnpKQI/PmF4jJQLqhO760I= Subject key identifier: 3A:95:D7:F1:0C:9C:EB:1E:3C:AE:FC:D5:84:84:A4:E0:99:13:BA:3C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A23C00B3F035F148C40FE6580 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a71e0638-78b5-3914-8d96-9db194d3fc38.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 9009 IP address blocks: 172.111.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:0b:3f:03:5f:14:8c:40:fe:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=1e6aa6e2-5e5f-440a-94e3-df174b240297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:65:18:36:a0:14:5b:d0:77:20:a0:e3:64:7d: 80:80:98:8c:9c:66:4a:ae:59:96:67:74:4a:d2:47: ff:8d:6f:fe:6b:b9:60:f8:db:d8:e1:d2:d4:71:87: b5:85:5a:e4:e2:bd:9b:e5:1d:0f:81:93:fe:9f:02: 25:6a:0d:19:9d:28:23:4f:ab:d6:d7:d6:68:b2:70: 70:06:f7:11:8e:e9:01:49:00:b6:6f:91:12:30:74: 4d:6a:78:63:e8:de:28:1a:60:ac:72:41:38:fa:94: b1:8a:8d:59:3d:de:12:16:20:11:e4:a2:a1:25:c0: d3:e7:0a:37:e2:e3:3d:50:9d:c2:02:19:b2:12:63: 8a:94:98:cf:38:bb:42:c2:cd:5c:c5:6c:b4:00:d3: 85:35:2f:b9:93:fb:38:01:d9:f1:c7:02:0d:a3:eb: 4a:39:4a:21:86:d9:98:91:53:96:f9:cf:20:49:77: 85:18:4d:1c:12:87:e4:ce:9a:cc:a6:db:47:8d:17: 1f:d4:99:c5:a0:cf:38:36:3c:4a:db:04:5f:44:ad: de:4f:0e:39:0c:23:d6:09:b4:77:da:06:f2:9d:aa: 41:38:ea:89:fc:7e:b2:0a:0d:d6:69:dd:51:0f:b8: eb:1a:b7:f2:ea:16:c5:dc:74:74:82:17:b5:1b:dd: e4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:95:D7:F1:0C:9C:EB:1E:3C:AE:FC:D5:84:84:A4:E0:99:13:BA:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a71e0638-78b5-3914-8d96-9db194d3fc38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:af:20:52:7b:99:1f:6e:ff:f4:2b:56:d6:63:cb:94:5c:d9: 6e:c1:1b:5f:62:66:c1:66:44:a9:48:2e:09:ac:43:ab:a6:7c: f7:80:07:e9:b8:39:13:fc:a7:51:f6:7b:a7:08:8d:4c:fc:6b: 9d:ab:95:a6:ad:7b:cb:74:06:fe:17:91:60:a7:ce:cf:a8:83: dd:ef:38:8e:2d:3b:1d:22:a5:c9:40:4f:81:54:54:4b:d2:50: 4b:c5:97:08:d2:4b:41:88:0a:7c:cf:4f:38:61:06:48:56:28: db:2c:32:06:81:cc:26:bf:56:4b:de:f7:e3:0f:96:73:08:83: 21:a7:53:75:db:42:dc:d2:bb:ab:cd:90:ce:74:22:48:31:a6: 96:de:64:3d:c9:09:7a:45:41:66:b8:52:6e:02:69:83:fe:af: d1:d5:ed:3e:91:86:f4:b6:3e:8e:ed:80:cc:4b:5d:35:c2:9e: d6:31:6d:4f:12:cd:c4:9e:c1:ce:0a:9c:c6:ee:2a:bb:35:ce: f4:40:50:3c:f3:8f:fd:70:a5:1c:b8:97:34:60:3a:2d:db:97: 54:18:fc:d2:e5:11:7e:6a:77:06:46:c1:c9:f8:bc:06:ac:67: 6b:5f:0a:8f:8c:06:6a:0e:91:98:a3:3a:83:9c:ff:1f:f7:24: 34:41:84:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwAs/A18UjED+ZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk MWU2YWE2ZTItNWU1Zi00NDBhLTk0ZTMtZGYxNzRiMjQwMjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGUYNqAUW9B3IKDjZH2AgJiMnGZKrlmWZ3RK 0kf/jW/+a7lg+NvY4dLUcYe1hVrk4r2b5R0PgZP+nwIlag0ZnSgjT6vW19ZosnBw BvcRjukBSQC2b5ESMHRNanhj6N4oGmCsckE4+pSxio1ZPd4SFiAR5KKhJcDT5wo3 4uM9UJ3CAhmyEmOKlJjPOLtCws1cxWy0ANOFNS+5k/s4AdnxxwINo+tKOUohhtmY kVOW+c8gSXeFGE0cEofkzprMpttHjRcf1JnFoM84NjxK2wRfRK3eTw45DCPWCbR3 2gbynapBOOqJ/H6yCg3Wad1RD7jrGrfy6hbF3HR0ghe1G93kawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqV1/EMnOsePK781YSEpOCZE7o8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTcxZTA2MzgtNzhiNS0z OTE0LThkOTYtOWRiMTk0ZDNmYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmvIFJ7mR9u//QrVtZjy5Rc2W7BG19iZsFmRKlILgmsQ6umfPeAB+m4 ORP8p1H2e6cIjUz8a52rlaate8t0Bv4XkWCnzs+og93vOI4tOx0ipclAT4FUVEvS UEvFlwjSS0GICnzPTzhhBkhWKNssMgaBzCa/Vkve9+MPlnMIgyGnU3XbQtzSu6vN kM50IkgxppbeZD3JCXpFQWa4Um4CaYP+r9HV7T6RhvS2Po7tgMxLXTXCntYxbU8S zcSewc4KnMbuKrs1zvRAUDzzj/1wpRy4lzRgOi3bl1QY/NLlEX5qdwZGwcn4vAas Z2tfCo+MBmoOkZijOoOc/x/3JDRBhMY= -----END CERTIFICATE-----Generated at Mon Jun 16 15:56:43 2025 by rpki-client