$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa File: aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa (raw, json) Hash identifier: wUIhTl2BJVOhGsu0mQzS/+1zIOdRiQQaUfSQUSosisg= Subject key identifier: 83:06:96:4A:D1:B6:CD:FD:B7:27:3C:F4:53:A9:D3:54:5E:DA:2E:12 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584ABD4B8E845151A5AF00ED60C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 3223 IP address blocks: 172.111.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:8e:84:51:51:a5:af:00:ed:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=651c6caf-495c-4c07-a7c7-899bd6e2947e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:64:89:49:56:40:5e:ef:de:bd:79:af:dc:4e: 40:ea:eb:74:98:12:66:60:21:88:91:67:83:3e:50: 01:e4:7e:a3:cf:0d:aa:15:12:0f:61:fd:6e:f1:26: d7:e7:57:95:de:03:db:58:99:3e:36:eb:91:1d:86: f6:2a:6c:af:7a:e6:af:fa:c7:ae:74:6c:eb:b3:f1: d0:0d:e9:31:6d:80:6e:60:be:a2:40:1b:68:ba:41: 09:14:ba:ef:fc:b9:29:bc:7c:1a:37:31:0f:fa:20: f8:f9:04:a0:c0:14:12:5b:a3:94:4e:63:44:45:3a: 42:c9:a4:d9:65:c5:4f:f0:e2:c5:6b:0b:67:e3:6f: 2f:3c:74:bb:45:a9:bb:fe:92:7e:32:04:85:8f:bf: 87:01:07:2a:bc:1c:ca:6f:41:98:82:86:fd:23:24: c9:00:bc:f9:a0:f8:46:3c:7e:b5:20:48:86:c5:8d: 9b:ff:56:f5:c1:38:11:2e:13:0c:16:30:ff:d8:a9: bc:04:66:83:94:e6:85:b5:fe:c5:b2:71:07:cf:da: cc:09:6c:dd:c8:cd:e1:82:0f:fd:7b:e8:1f:c1:86: d2:5e:91:70:98:8a:61:a3:24:0d:dd:eb:6d:38:93: 81:96:85:25:a9:13:0f:f8:67:3f:a5:59:09:5a:c6: 48:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:06:96:4A:D1:B6:CD:FD:B7:27:3C:F4:53:A9:D3:54:5E:DA:2E:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b6:7b:1c:67:ec:e8:10:3d:e8:50:d2:c7:ab:8c:87:b0:b3: 50:2d:88:62:0d:a5:89:4c:b4:9f:b0:4c:ca:08:fe:a3:66:70: 4b:5d:3f:d3:40:53:b8:bc:5c:e1:75:d3:d5:e4:3b:c5:ce:9a: fe:6c:cd:58:93:ca:09:20:9e:b1:84:b9:68:20:c3:93:45:53: 2c:5b:c0:24:52:fb:40:3f:10:f3:3a:2f:8a:24:23:63:66:e5: b5:0d:3c:2f:6c:15:7a:42:05:0d:fa:1e:ee:94:63:1e:9c:d3: ef:38:e0:bc:66:ce:8e:e6:67:ff:4b:fb:8d:68:b8:71:a5:9e: 3e:79:3d:ff:2d:39:f8:ad:08:18:f0:cb:8c:87:4a:a3:b8:e7: 99:5c:f1:48:77:67:d7:21:f0:59:ca:ea:38:3e:4b:40:30:58: c3:9b:4f:98:4e:3c:2d:7a:fa:ed:df:b0:e8:30:05:9f:c5:0a: 6d:9b:18:31:43:04:73:d0:38:e6:35:03:af:fa:37:a7:77:d5: 75:7c:23:d8:01:ad:f3:ff:16:64:98:00:54:e6:77:71:74:a7: 90:cc:1c:02:ec:07:b2:9a:9d:5c:1e:dd:56:1e:84:f5:61:1c: 19:eb:f2:09:b9:b8:77:6f:9b:64:05:63:43:9c:72:3c:8f:6b: e8:9b:b7:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S46EUVGlrwDtYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk NjUxYzZjYWYtNDk1Yy00YzA3LWE3YzctODk5YmQ2ZTI5NDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmSJSVZAXu/evXmv3E5A6ut0mBJmYCGIkWeD PlAB5H6jzw2qFRIPYf1u8SbX51eV3gPbWJk+NuuRHYb2Kmyveuav+seudGzrs/HQ DekxbYBuYL6iQBtoukEJFLrv/LkpvHwaNzEP+iD4+QSgwBQSW6OUTmNERTpCyaTZ ZcVP8OLFawtn428vPHS7Ram7/pJ+MgSFj7+HAQcqvBzKb0GYgob9IyTJALz5oPhG PH61IEiGxY2b/1b1wTgRLhMMFjD/2Km8BGaDlOaFtf7FsnEHz9rMCWzdyM3hgg/9 e+gfwYbSXpFwmIphoyQN3ettOJOBloUlqRMP+Gc/pVkJWsZI9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMGlkrRts39tyc89FOp01Re2i4SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWE3ZTBkZWYtODBjNi0z MGQ0LTliMzctMDdhZTBiNDhiZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFq2exxn7OgQPehQ0serjIews1AtiGINpYlMtJ+wTMoI/qNmcEtdP9NA U7i8XOF109XkO8XOmv5szViTygkgnrGEuWggw5NFUyxbwCRS+0A/EPM6L4okI2Nm 5bUNPC9sFXpCBQ36Hu6UYx6c0+844Lxmzo7mZ/9L+41ouHGlnj55Pf8tOfitCBjw y4yHSqO455lc8Uh3Z9ch8FnK6jg+S0AwWMObT5hOPC16+u3fsOgwBZ/FCm2bGDFD BHPQOOY1A6/6N6d31XV8I9gBrfP/FmSYAFTmd3F0p5DMHALsB7KanVwe3VYehPVh HBnr8gm5uHdvm2QFY0OccjyPa+ibt0E= -----END CERTIFICATE-----Generated at Tue Aug 5 20:16:37 2025 by rpki-client