$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ad6c860f-4ded-3a34-85ce-75a2a6b52f51.roa File: ad6c860f-4ded-3a34-85ce-75a2a6b52f51.roa (raw, json) Hash identifier: mYEZoktIAr4a0IbipoqqSxuq6rFAv2fyXI/brJzE6bE= Subject key identifier: C0:8F:96:97:7C:F4:D6:A8:CD:39:B5:5D:ED:08:E5:B4:AC:92:31:85 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A2D9C291F08713DDF6D960600 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ad6c860f-4ded-3a34-85ce-75a2a6b52f51.roa Signing time: Fri 13 Jun 2025 13:46:47 +0000 ROA not before: Fri 13 Jun 2025 13:46:47 +0000 ROA not after: Thu 11 Sep 2025 13:46:47 +0000 asID: 29802 IP address blocks: 172.111.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:9c:29:1f:08:71:3d:df:6d:96:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 13 13:46:47 2025 GMT Not After : Sep 11 13:46:47 2025 GMT Subject: CN=abea93aa-cd3c-4ab1-8387-313e3612b161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:74:54:a8:8d:71:0c:d7:e0:84:c3:6c:92:1e: d9:45:f6:bd:21:4c:2e:a2:7f:fc:02:25:40:06:92: 87:9b:e2:88:a4:56:b8:fc:3e:87:83:f2:ba:d8:60: 32:b0:db:9b:ed:df:90:3b:49:a2:07:40:02:ee:61: 09:4c:12:e0:8f:6d:f1:5a:23:ce:83:eb:cf:fa:d9: ab:fd:aa:67:06:0d:5b:68:3b:37:5c:09:5f:c9:d5: 6d:27:62:db:c6:91:a4:cb:e5:de:ac:b4:9f:b3:b1: 20:96:af:f0:09:cc:c0:9a:8a:ec:f7:7a:17:4b:73: 25:78:dc:39:f9:38:20:d4:91:12:fe:d5:ad:2c:4a: fb:00:e8:fb:3b:51:3c:8b:42:e5:8a:dc:10:da:2d: 98:0e:1e:37:fb:18:98:c2:bf:f1:cd:16:27:06:49: e5:8f:b5:94:e4:d0:7a:ea:c8:7a:f7:38:17:5a:0e: c4:b1:17:c7:1e:39:05:d9:11:32:8e:68:db:b1:20: fc:e0:c6:3a:90:3b:85:78:8c:83:e0:81:55:8b:fe: 3a:fe:53:35:12:e8:08:f2:fb:3e:0a:ca:9f:16:1b: d5:69:6f:17:f6:74:8e:8c:d7:4b:05:6c:49:60:c1: fe:b1:1d:b1:de:0b:0e:30:3b:28:9b:c6:5d:6f:44: 94:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8F:96:97:7C:F4:D6:A8:CD:39:B5:5D:ED:08:E5:B4:AC:92:31:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ad6c860f-4ded-3a34-85ce-75a2a6b52f51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:2e:d4:9f:9b:12:a5:9f:08:34:36:01:2a:04:8f:71:b6:24: 81:8c:d6:9c:e2:5a:31:f1:21:59:cb:ce:7e:03:41:c7:52:a7: 78:c3:40:55:36:e2:1c:d3:1a:68:61:9c:2e:14:f4:d5:b8:12: ea:56:7b:79:03:81:d3:a4:16:7b:90:ec:2a:e4:5e:87:d6:8b: 57:f4:d4:87:9f:24:3a:be:8b:9d:96:e8:b2:0d:4a:b4:f0:dc: e6:ab:1b:f8:da:e8:cb:0a:6f:95:5f:a2:e7:fa:db:d4:7b:69: 95:3d:e6:47:3e:30:53:86:99:33:ec:58:b8:74:32:c5:22:7c: 1c:70:8a:ed:b8:1b:1b:d5:ab:2a:68:1f:be:be:9b:fa:45:d2: 75:df:ce:af:ab:5f:1f:7c:ff:eb:a2:e8:00:02:54:17:27:d7: 59:bb:c1:9f:22:00:f8:a9:fd:1f:03:90:36:b7:f2:27:a9:99: 0a:80:63:68:61:ba:d8:2f:c2:50:f3:41:a2:a9:f1:18:72:72: 12:52:0c:e3:45:84:cf:f8:1a:e3:8e:13:32:0a:e7:b9:f5:2f: 36:1a:b0:74:14:5e:05:60:13:92:a4:07:39:1d:8e:c5:95:0e: 6f:b1:2e:7f:40:26:30:ec:5c:84:24:c0:a1:c2:8e:45:c4:8e: d6:fa:19:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEotnCkfCHE9322WBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxMzEzNDY0N1oXDTI1MDkxMTEzNDY0N1owLzEtMCsGA1UEAxMk YWJlYTkzYWEtY2QzYy00YWIxLTgzODctMzEzZTM2MTJiMTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXRUqI1xDNfghMNskh7ZRfa9IUwuon/8AiVA BpKHm+KIpFa4/D6Hg/K62GAysNub7d+QO0miB0AC7mEJTBLgj23xWiPOg+vP+tmr /apnBg1baDs3XAlfydVtJ2LbxpGky+XerLSfs7Eglq/wCczAmors93oXS3MleNw5 +Tgg1JES/tWtLEr7AOj7O1E8i0LlitwQ2i2YDh43+xiYwr/xzRYnBknlj7WU5NB6 6sh69zgXWg7EsRfHHjkF2REyjmjbsSD84MY6kDuFeIyD4IFVi/46/lM1EugI8vs+ CsqfFhvVaW8X9nSOjNdLBWxJYMH+sR2x3gsOMDsom8Zdb0SUKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCPlpd89NaozTm1Xe0I5bSskjGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWQ2Yzg2MGYtNGRlZC0z YTM0LTg1Y2UtNzVhMmE2YjUyZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwu1J+bEqWfCDQ2ASoEj3G2JIGM1pziWjHxIVnLzn4DQcdSp3jDQFU2 4hzTGmhhnC4U9NW4EupWe3kDgdOkFnuQ7CrkXofWi1f01IefJDq+i52W6LINSrTw 3OarG/ja6MsKb5Vfouf629R7aZU95kc+MFOGmTPsWLh0MsUifBxwiu24GxvVqypo H76+m/pF0nXfzq+rXx98/+ui6AACVBcn11m7wZ8iAPip/R8DkDa38iepmQqAY2hh utgvwlDzQaKp8RhychJSDONFhM/4GuOOEzIK57n1LzYasHQUXgVgE5KkBzkdjsWV Dm+xLn9AJjDsXIQkwKHCjkXEjtb6Gdo= -----END CERTIFICATE-----Generated at Sun Jun 15 17:43:49 2025 by rpki-client