$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf9e4922-1859-37b0-bf62-2e1ee6ab2e81.roa File: bf9e4922-1859-37b0-bf62-2e1ee6ab2e81.roa (raw, json) Hash identifier: 6aFJ0BRu6h0jc9ulgzNzDZSwIiP6I6OChwCZBbMREOM= Subject key identifier: 4A:65:84:7C:1D:77:48:9D:8B:96:35:3D:02:8B:D6:FC:F6:27:71:9A Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A2D85901F1128D8D64CC05E00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf9e4922-1859-37b0-bf62-2e1ee6ab2e81.roa Signing time: Fri 13 Jun 2025 13:01:04 +0000 ROA not before: Fri 13 Jun 2025 13:01:04 +0000 ROA not after: Thu 11 Sep 2025 13:01:04 +0000 asID: 396356 IP address blocks: 172.111.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:85:90:1f:11:28:d8:d6:4c:c0:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 13 13:01:04 2025 GMT Not After : Sep 11 13:01:04 2025 GMT Subject: CN=71651182-b5a7-46e9-a196-756b54ebd556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:be:71:ea:bb:0d:3e:8a:17:d9:f7:50:cd:77: 04:70:07:be:bc:e3:11:ee:7c:ec:63:7d:b2:69:8a: c7:01:38:1f:52:d2:27:da:50:ca:b8:14:af:43:d3: 9f:e1:96:14:03:de:35:44:18:9a:5a:bd:72:06:dd: 8e:7d:ef:26:10:6e:bb:8a:11:6c:b5:c4:82:8a:3f: 55:1e:4c:20:77:7d:8e:c1:2c:e2:4a:47:27:0f:42: f4:98:1d:05:37:bf:65:a6:c1:75:64:75:a1:cb:90: 29:c0:31:59:d7:b3:cb:11:1d:70:5e:d7:84:aa:e7: b1:47:61:67:ca:53:b2:c2:aa:61:96:ae:83:7b:fd: 07:a8:48:93:ab:c9:3b:a6:e3:ef:be:3f:57:87:9b: 50:a7:fc:63:1e:9b:8f:a7:b0:80:84:c0:41:ef:71: 74:9a:b9:97:00:e0:60:4b:1d:42:6c:36:3e:57:5a: 2c:04:03:f2:1a:1b:f3:8b:35:06:04:19:eb:a2:df: fd:1b:0a:c2:42:d6:a1:62:3b:18:09:84:d8:b4:17: 55:f3:3f:32:59:82:f8:f7:0f:ce:e4:31:a4:01:b3: 03:71:90:71:47:fc:d9:10:be:b2:b8:6f:3f:ad:05: ac:43:fa:af:1f:f5:ec:88:5b:63:99:2f:21:62:70: c3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:65:84:7C:1D:77:48:9D:8B:96:35:3D:02:8B:D6:FC:F6:27:71:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf9e4922-1859-37b0-bf62-2e1ee6ab2e81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:89:21:2d:8e:fe:0e:24:17:76:e5:53:a2:b6:05:c7:bd:ed: eb:e7:57:79:29:dd:a7:69:4d:67:1c:13:f1:1a:53:09:1a:23: 10:8b:32:f7:18:cd:2d:3a:7b:f2:cf:46:9d:a6:cd:94:e6:e3: dc:72:28:07:af:2c:b8:5d:97:82:81:b8:26:50:9d:e9:83:82: 14:bd:b5:71:f6:ab:50:5e:99:5b:a1:b3:d9:b5:b3:60:32:37: cc:35:96:b3:03:93:54:1b:4c:00:46:f6:6b:5e:a5:5a:37:8d: 5a:26:ec:4f:ab:73:b4:a9:33:ea:c1:f3:4c:c4:11:14:8d:4a: 5a:1d:84:b1:23:43:28:ef:54:bf:d5:0a:b2:ff:21:18:d6:48: 7b:a3:f3:db:23:03:6b:02:d0:cb:63:e0:b6:cb:fc:f3:bb:c3: 8c:46:e4:6d:21:67:51:00:ca:63:89:20:ec:b4:9a:8c:d8:01: 86:00:a8:e2:b3:96:06:d9:6d:bd:3a:05:7e:cc:1b:b7:53:df: 64:5b:3d:3f:ce:31:19:22:57:66:46:1f:af:9b:6a:9e:ea:37: 0a:aa:c9:34:20:29:82:21:7e:e9:f1:6e:f0:d9:67:3b:c0:6d: 60:50:70:e2:4d:66:25:de:7f:b5:a9:f6:0e:99:61:f8:2e:c1: dc:bf:4e:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothZAfESjY1kzAXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk NzE2NTExODItYjVhNy00NmU5LWExOTYtNzU2YjU0ZWJkNTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob5x6rsNPooX2fdQzXcEcAe+vOMR7nzsY32y aYrHATgfUtIn2lDKuBSvQ9Of4ZYUA941RBiaWr1yBt2Ofe8mEG67ihFstcSCij9V Hkwgd32OwSziSkcnD0L0mB0FN79lpsF1ZHWhy5ApwDFZ17PLER1wXteEquexR2Fn ylOywqphlq6De/0HqEiTq8k7puPvvj9Xh5tQp/xjHpuPp7CAhMBB73F0mrmXAOBg Sx1CbDY+V1osBAPyGhvzizUGBBnrot/9GwrCQtahYjsYCYTYtBdV8z8yWYL49w/O 5DGkAbMDcZBxR/zZEL6yuG8/rQWsQ/qvH/XsiFtjmS8hYnDDFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEplhHwdd0idi5Y1PQKL1vz2J3GaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmY5ZTQ5MjItMTg1OS0z N2IwLWJmNjItMmUxZWU2YWIyZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSJIS2O/g4kF3blU6K2Bce97evnV3kp3adpTWccE/EaUwkaIxCLMvcY zS06e/LPRp2mzZTm49xyKAevLLhdl4KBuCZQnemDghS9tXH2q1BemVuhs9m1s2Ay N8w1lrMDk1QbTABG9mtepVo3jVom7E+rc7SpM+rB80zEERSNSlodhLEjQyjvVL/V CrL/IRjWSHuj89sjA2sC0Mtj4LbL/PO7w4xG5G0hZ1EAymOJIOy0mozYAYYAqOKz lgbZbb06BX7MG7dT32RbPT/OMRkiV2ZGH6+bap7qNwqqyTQgKYIhfunxbvDZZzvA bWBQcOJNZiXef7Wp9g6ZYfguwdy/Tgk= -----END CERTIFICATE-----Generated at Mon Jun 16 07:47:18 2025 by rpki-client