$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c21c4f14-8175-330f-80c0-b9e8250f5974.roa File: c21c4f14-8175-330f-80c0-b9e8250f5974.roa (raw, json) Hash identifier: Ah8RrAF734VnVrb+jMwlJYRYrliFBy8UPeT/K9i4560= Subject key identifier: AB:36:D0:20:0A:56:9B:24:72:7F:49:7D:4B:3B:17:9B:FD:65:1A:6C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A2D76A8E34BC1165D5F710290 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c21c4f14-8175-330f-80c0-b9e8250f5974.roa Signing time: Fri 13 Jun 2025 12:31:13 +0000 ROA not before: Fri 13 Jun 2025 12:31:13 +0000 ROA not after: Thu 11 Sep 2025 12:31:13 +0000 asID: 329007 IP address blocks: 172.111.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:76:a8:e3:4b:c1:16:5d:5f:71:02:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 13 12:31:13 2025 GMT Not After : Sep 11 12:31:13 2025 GMT Subject: CN=85725931-9633-4ce6-8add-ed7139110452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ed:71:6a:9c:fa:68:76:12:b1:ca:5b:60:4a: a6:70:a1:a9:84:f6:0e:51:27:ae:6d:39:7a:4f:c1: 68:86:76:8b:83:fa:83:f1:a9:33:18:92:ca:e1:40: 80:92:44:26:5a:43:92:61:b0:8a:77:fa:05:79:b2: 6d:dc:5d:85:41:0b:14:4a:29:8b:8d:b6:13:1c:fb: 17:5c:a1:43:99:9d:79:f6:ad:4f:e9:53:28:a0:6f: 4b:4f:a1:8f:03:b0:89:bd:17:b1:d9:8e:8c:e4:a9: 1b:8e:48:2a:c2:f9:15:9a:f1:f6:a3:c5:49:99:66: 48:d8:a4:65:19:82:48:8e:b7:92:6e:41:98:e3:74: 27:75:68:0c:74:59:6a:1a:bc:0a:79:4c:d0:b7:8e: 9b:43:f1:1d:8f:ff:e5:57:27:56:b5:c0:56:24:53: d6:ad:99:4e:e1:d1:93:5c:2c:72:ee:04:88:84:b2: e4:16:b2:59:02:f2:3c:d6:c7:d5:1d:8a:12:62:60: a9:dd:ad:11:ad:9a:aa:52:b4:48:ba:03:ba:94:d6: 16:01:d7:ab:a4:0d:61:ff:9b:bd:4e:65:07:03:1c: 0b:de:5c:f0:6d:3c:4a:c5:c4:19:8d:4c:7d:5c:27: 66:c7:e2:9e:11:b7:08:ec:a5:6a:55:f6:da:ae:8e: 03:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:36:D0:20:0A:56:9B:24:72:7F:49:7D:4B:3B:17:9B:FD:65:1A:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c21c4f14-8175-330f-80c0-b9e8250f5974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:b5:ce:bd:15:6f:8f:ee:5c:c6:2a:81:57:fd:8d:e8:47:98: 86:f0:f2:18:d1:9d:5b:8b:69:d4:c4:77:56:9e:c6:ac:c2:14: ba:47:3a:3f:36:59:8e:10:3f:42:f9:b6:76:38:ab:57:3f:ba: a9:1c:04:f5:09:c7:f6:0b:57:7c:e4:98:85:0a:6f:3f:5c:f6: 98:84:cd:d0:65:99:a7:0b:97:d4:25:4b:5c:cb:db:25:26:9f: ed:46:8f:eb:12:06:2b:3d:dd:82:f5:4c:34:ee:84:6b:38:c0: 5c:ac:bd:c3:53:76:32:64:d5:d9:b4:7f:80:72:a0:15:18:95: c6:b7:9f:ba:21:31:df:a6:01:03:61:0f:54:d3:56:08:bf:9c: 90:49:15:5f:da:6d:ec:bf:e9:5c:8c:bd:2f:08:86:e9:d2:3f: ae:b3:6d:99:26:e8:e5:f7:56:20:8b:21:48:bc:b4:0a:f4:4d: b0:dd:f3:c2:a5:ac:f1:72:b4:e9:a3:83:54:26:c2:ca:5d:74: aa:16:e0:94:7e:88:6b:04:a7:a7:ee:bc:10:b4:33:e3:7a:2e: 98:10:ef:76:78:b6:85:4a:00:60:d9:0b:c2:c3:35:09:4d:aa: c4:19:a3:9f:77:e9:e2:1b:23:1c:f1:aa:05:28:c6:96:5e:0c: 54:7d:71:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEotdqjjS8EWXV9xApAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxMzEyMzExM1oXDTI1MDkxMTEyMzExM1owLzEtMCsGA1UEAxMk ODU3MjU5MzEtOTYzMy00Y2U2LThhZGQtZWQ3MTM5MTEwNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke1xapz6aHYSscpbYEqmcKGphPYOUSeubTl6 T8FohnaLg/qD8akzGJLK4UCAkkQmWkOSYbCKd/oFebJt3F2FQQsUSimLjbYTHPsX XKFDmZ159q1P6VMooG9LT6GPA7CJvRex2Y6M5KkbjkgqwvkVmvH2o8VJmWZI2KRl GYJIjreSbkGY43QndWgMdFlqGrwKeUzQt46bQ/Edj//lVydWtcBWJFPWrZlO4dGT XCxy7gSIhLLkFrJZAvI81sfVHYoSYmCp3a0RrZqqUrRIugO6lNYWAderpA1h/5u9 TmUHAxwL3lzwbTxKxcQZjUx9XCdmx+KeEbcI7KVqVfbaro4DjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKs20CAKVpskcn9JfUs7F5v9ZRpsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzIxYzRmMTQtODE3NS0z MzBmLTgwYzAtYjllODI1MGY1OTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEO1zr0Vb4/uXMYqgVf9jehHmIbw8hjRnVuLadTEd1aexqzCFLpHOj82 WY4QP0L5tnY4q1c/uqkcBPUJx/YLV3zkmIUKbz9c9piEzdBlmacLl9QlS1zL2yUm n+1Gj+sSBis93YL1TDTuhGs4wFysvcNTdjJk1dm0f4ByoBUYlca3n7ohMd+mAQNh D1TTVgi/nJBJFV/abey/6VyMvS8IhunSP66zbZkm6OX3ViCLIUi8tAr0TbDd88Kl rPFytOmjg1QmwspddKoW4JR+iGsEp6fuvBC0M+N6LpgQ73Z4toVKAGDZC8LDNQlN qsQZo5936eIbIxzxqgUoxpZeDFR9caw= -----END CERTIFICATE-----Generated at Sun Jun 15 05:24:57 2025 by rpki-client