$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa File: aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa (raw, json) Hash identifier: 7AWOAMr6ErqU4OhSKcr0Lr5m1D/KJa2Qzh8y10Sff2g= Subject key identifier: 71:88:1D:56:CD:56:74:81:C0:7C:B3:0B:E7:B2:6C:7B:39:FE:05:7A Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849DC8FBC41EE0C3B942F21B800 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 3223 IP address blocks: 172.111.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:bc:41:ee:0c:3b:94:2f:21:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=e30f4344-3d97-4a5a-8a9b-76cd9907070a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f2:1a:fb:29:41:ce:34:6b:19:ad:e4:aa:73: 05:2d:1c:7b:86:a2:e7:a0:27:71:37:9c:8f:6c:f6: d8:28:e5:b7:1b:b6:cf:c1:1d:f4:c7:ba:05:24:6a: 44:88:08:cb:43:00:32:69:12:0b:c3:a6:3f:84:85: e5:ff:97:28:83:11:30:62:47:d0:9d:f5:f4:a9:55: ea:1c:f6:13:55:b2:8d:ee:19:a5:36:04:b4:17:26: 6a:9e:fe:f8:9b:c1:d1:dd:4d:96:a2:82:34:cc:a0: 33:fa:4b:6d:13:32:ea:a5:dc:de:36:ab:4b:67:e0: 17:31:dc:da:ab:ff:5c:07:5c:dc:7d:62:a5:c9:86: 8c:e4:4b:71:ae:61:a3:06:3c:eb:3e:61:ea:ef:f8: 32:b2:48:2f:4d:b1:8b:70:f8:63:d9:8a:b5:c9:8b: 95:f3:11:43:f2:36:bb:48:ad:b7:3a:58:56:b5:56: d6:4a:96:23:e5:1b:32:88:fe:bb:88:7a:a2:69:12: ad:4f:50:e3:bf:7d:3d:ef:a0:75:81:57:a4:70:c7: 5d:3a:b4:66:92:a2:2b:f6:1f:80:35:cd:33:31:67: 31:1c:8b:77:ca:65:0a:4f:3b:c9:f5:a6:5a:22:7b: 2f:01:63:c7:0a:97:36:f8:70:3d:2e:d3:00:10:03: 19:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:88:1D:56:CD:56:74:81:C0:7C:B3:0B:E7:B2:6C:7B:39:FE:05:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a6:88:99:62:22:54:59:40:f0:00:38:7d:3a:82:a1:08:20: 59:1d:18:1b:b1:f1:91:af:19:41:35:97:8f:35:60:a1:30:10: 5b:f5:94:61:79:49:b8:cc:6b:06:84:c3:91:c4:7a:ea:9a:c4: 0f:11:e0:96:fb:7e:91:08:97:0b:23:4d:80:fb:61:3e:a3:42: 46:30:ef:0a:4b:65:b2:25:64:09:be:99:18:84:42:b9:c7:76: 9c:a2:7b:11:11:05:93:fc:0e:0d:7e:30:32:95:75:18:56:3e: da:9b:b6:65:88:8f:21:4c:ed:ff:6c:91:c6:bd:99:4d:04:48: 32:df:c6:fe:21:70:76:11:b6:30:1f:62:70:62:15:10:c7:59: ba:a6:b2:99:46:b4:34:5b:65:9d:42:d3:46:18:aa:1d:be:28: f9:ad:83:69:08:3b:6c:58:68:20:66:b9:5c:72:80:1e:5e:bf: cd:d6:17:e0:57:26:85:8a:64:64:b7:d4:fc:7a:61:8c:09:93: 68:0f:29:d2:73:42:b2:21:80:ad:86:63:46:4a:03:6f:9a:66: 5a:d6:53:f2:d3:e4:c4:50:6a:e3:21:ec:ad:fa:bd:12:c2:55: a3:9d:37:5e:0c:0e:06:83:78:e1:b6:22:c7:64:cf:f4:ef:c0: 60:68:dc:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj7xB7gw7lC8huAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk ZTMwZjQzNDQtM2Q5Ny00YTVhLThhOWItNzZjZDk5MDcwNzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/Ia+ylBzjRrGa3kqnMFLRx7hqLnoCdxN5yP bPbYKOW3G7bPwR30x7oFJGpEiAjLQwAyaRILw6Y/hIXl/5cogxEwYkfQnfX0qVXq HPYTVbKN7hmlNgS0FyZqnv74m8HR3U2WooI0zKAz+kttEzLqpdzeNqtLZ+AXMdza q/9cB1zcfWKlyYaM5EtxrmGjBjzrPmHq7/gyskgvTbGLcPhj2Yq1yYuV8xFD8ja7 SK23OlhWtVbWSpYj5RsyiP67iHqiaRKtT1Djv30976B1gVekcMddOrRmkqIr9h+A Nc0zMWcxHIt3ymUKTzvJ9aZaInsvAWPHCpc2+HA9LtMAEAMZJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGIHVbNVnSBwHyzC+eybHs5/gV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWE3ZTBkZWYtODBjNi0z MGQ0LTliMzctMDdhZTBiNDhiZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCmiJliIlRZQPAAOH06gqEIIFkdGBux8ZGvGUE1l481YKEwEFv1lGF5 SbjMawaEw5HEeuqaxA8R4Jb7fpEIlwsjTYD7YT6jQkYw7wpLZbIlZAm+mRiEQrnH dpyiexERBZP8Dg1+MDKVdRhWPtqbtmWIjyFM7f9skca9mU0ESDLfxv4hcHYRtjAf YnBiFRDHWbqmsplGtDRbZZ1C00YYqh2+KPmtg2kIO2xYaCBmuVxygB5ev83WF+BX JoWKZGS31Px6YYwJk2gPKdJzQrIhgK2GY0ZKA2+aZlrWU/LT5MRQauMh7K36vRLC VaOdN14MDgaDeOG2Isdkz/TvwGBo3IA= -----END CERTIFICATE-----Generated at Sun Jun 15 05:10:01 2025 by rpki-client