$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bd122a33-f3a3-369f-b238-dd0ae24abd95.roa File: bd122a33-f3a3-369f-b238-dd0ae24abd95.roa (raw, json) Hash identifier: PEBce5cDyrGJG71hh8u+M9miZ2rCrs6kcVgGJqbE3bA= Subject key identifier: 7E:61:AE:1B:CA:C9:97:82:59:A9:68:57:07:7A:E7:61:D7:C7:2C:66 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849EF58867EB6C62E05E1A21900 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bd122a33-f3a3-369f-b238-dd0ae24abd95.roa Signing time: Thu 22 May 2025 06:30:23 +0000 ROA not before: Thu 22 May 2025 06:30:23 +0000 ROA not after: Wed 20 Aug 2025 06:30:23 +0000 asID: 834 IP address blocks: 172.111.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ef:58:86:7e:b6:c6:2e:05:e1:a2:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 22 06:30:23 2025 GMT Not After : Aug 20 06:30:23 2025 GMT Subject: CN=56213066-69c3-43bf-998d-006d05627424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:07:8d:3b:ae:5f:00:b2:bf:00:7e:e2:0b:67: cb:f4:23:46:53:bd:91:54:31:74:48:18:52:f0:db: 72:7b:72:86:2f:fa:b8:bf:93:7e:c8:38:8e:02:d3: b5:3b:04:43:d0:81:ab:d6:c9:f1:74:47:1e:39:d1: 65:7a:36:35:c3:9b:10:6c:2f:3e:2b:51:40:98:ed: 71:8a:87:38:cc:7b:f0:04:d9:e4:15:e3:96:ca:e0: c4:2f:10:af:62:20:a6:f1:68:14:3b:c7:d6:86:56: 10:9e:c0:27:a1:eb:4b:54:03:2b:08:63:d5:36:ab: b1:3c:5f:ed:f4:0c:4f:2b:71:b7:a8:64:55:28:80: 77:3e:13:92:a0:5d:dc:aa:43:dc:5b:76:8c:29:82: e9:db:a4:e6:0a:20:53:75:58:6c:ac:b8:c8:5c:db: bc:0c:7f:e3:7c:9a:25:37:ce:d1:2a:66:c9:b4:56: a8:e0:a9:66:03:73:31:24:47:e6:45:c4:fc:ea:5f: 2c:1f:21:01:64:da:60:f5:1b:a4:99:f3:d2:6a:62: 83:c7:a0:70:f4:1b:c1:03:84:a6:b3:64:0f:d3:7b: 53:8a:89:87:fa:f6:3d:6f:c1:5b:95:6b:83:9b:8c: e0:12:02:12:81:5f:be:20:e6:18:3e:15:5a:b6:42: b0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:61:AE:1B:CA:C9:97:82:59:A9:68:57:07:7A:E7:61:D7:C7:2C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bd122a33-f3a3-369f-b238-dd0ae24abd95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:81:dc:e3:60:93:d6:72:68:03:ce:5f:04:7c:aa:a6:d5:d8: 31:f1:20:87:53:d8:6b:ac:cc:93:28:ec:6d:64:96:20:70:6e: c8:03:dd:96:fa:dc:c9:35:1b:e5:87:c2:cc:5f:52:45:81:46: 72:b7:c2:f3:76:a2:af:36:c1:65:3c:53:4c:92:0a:40:e6:a9: 4f:ba:0b:b2:01:27:0a:84:1e:a6:31:7c:46:4b:f1:71:61:24: 71:a9:57:16:6f:8a:ae:7f:bf:fa:39:34:32:0e:55:55:78:3a: 46:80:3f:b3:8d:07:a1:ad:99:b6:ca:ca:3f:9d:63:3d:72:0d: 66:ae:71:dd:e6:ee:1c:a8:59:d3:96:4c:c0:fa:5e:40:f5:e0: de:b3:b4:7e:d7:2c:5e:46:c0:1c:2a:64:32:ee:1f:43:70:a8: f2:4b:33:e7:c9:66:2e:66:ae:1c:2f:ca:1b:75:1e:95:c6:a1: a5:8a:c1:1f:af:60:bb:01:8b:b2:f9:fd:27:01:86:1f:ed:61: 35:cc:77:13:25:cf:d1:65:78:b3:00:59:33:69:f6:b2:86:5c: 33:c7:8d:8b:2c:37:42:43:8e:88:69:00:52:f2:03:de:67:13: b1:75:2d:5d:00:6c:3b:18:57:bc:e9:fc:52:cb:88:85:1a:21: 2a:a8:9f:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnvWIZ+tsYuBeGiGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUyMjA2MzAyM1oXDTI1MDgyMDA2MzAyM1owLzEtMCsGA1UEAxMk NTYyMTMwNjYtNjljMy00M2JmLTk5OGQtMDA2ZDA1NjI3NDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlweNO65fALK/AH7iC2fL9CNGU72RVDF0SBhS 8Ntye3KGL/q4v5N+yDiOAtO1OwRD0IGr1snxdEceOdFlejY1w5sQbC8+K1FAmO1x ioc4zHvwBNnkFeOWyuDELxCvYiCm8WgUO8fWhlYQnsAnoetLVAMrCGPVNquxPF/t 9AxPK3G3qGRVKIB3PhOSoF3cqkPcW3aMKYLp26TmCiBTdVhsrLjIXNu8DH/jfJol N87RKmbJtFao4KlmA3MxJEfmRcT86l8sHyEBZNpg9RukmfPSamKDx6Bw9BvBA4Sm s2QP03tTiomH+vY9b8FblWuDm4zgEgISgV++IOYYPhVatkKwIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5hrhvKyZeCWaloVwd652HXxyxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmQxMjJhMzMtZjNhMy0z NjlmLWIyMzgtZGQwYWUyNGFiZDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuB3ONgk9ZyaAPOXwR8qqbV2DHxIIdT2GuszJMo7G1kliBwbsgD3Zb6 3Mk1G+WHwsxfUkWBRnK3wvN2oq82wWU8U0ySCkDmqU+6C7IBJwqEHqYxfEZL8XFh JHGpVxZviq5/v/o5NDIOVVV4OkaAP7ONB6GtmbbKyj+dYz1yDWaucd3m7hyoWdOW TMD6XkD14N6ztH7XLF5GwBwqZDLuH0NwqPJLM+fJZi5mrhwvyht1HpXGoaWKwR+v YLsBi7L5/ScBhh/tYTXMdxMlz9FleLMAWTNp9rKGXDPHjYssN0JDjohpAFLyA95n E7F1LV0AbDsYV7zp/FLLiIUaISqon/w= -----END CERTIFICATE-----Generated at Sun Jun 15 05:53:25 2025 by rpki-client