$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d56d197e-5c29-3a3f-8fae-ccf02e1f2cee.roa File: d56d197e-5c29-3a3f-8fae-ccf02e1f2cee.roa (raw, json) Hash identifier: DdUFXtYtqGKnQl1L6H3+jlofZUE0bF+yUq/dUDG2kso= Subject key identifier: 08:B9:B7:E1:8D:23:81:DF:1D:72:15:2D:64:8E:B5:29:BD:C4:E6:83 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A23C016EE51BA1F5EF3622B80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d56d197e-5c29-3a3f-8fae-ccf02e1f2cee.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 3223 IP address blocks: 172.111.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:16:ee:51:ba:1f:5e:f3:62:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=c25de5eb-8eb2-4c1a-a8c4-a04335a4a719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ed:cf:e2:42:6e:19:c4:9b:4c:c2:ea:26:8d: b1:cd:40:c8:5c:91:ee:70:2c:cf:07:58:3f:bf:c8: 28:4e:e4:fd:60:32:e7:13:ee:f0:9f:ea:2b:80:85: 75:e3:3c:2f:22:4f:40:04:d6:12:cd:41:fa:28:26: 8d:64:7e:2f:66:67:a0:75:00:de:c3:30:8d:53:84: 0d:79:5d:1c:a8:66:aa:66:62:6a:0a:60:d8:e3:4c: c7:51:c1:54:97:68:29:cb:b3:5e:26:78:5f:43:a0: da:00:76:f2:d9:94:40:13:32:6a:aa:0e:09:6a:ba: ea:87:7e:e2:b9:ed:2c:89:30:49:df:79:7e:a4:83: 0e:81:38:f2:e6:98:c2:58:cd:bc:a6:61:f7:a6:45: 39:a0:de:0c:f4:42:08:06:53:c9:26:14:44:bc:cf: 1a:41:25:d7:f1:82:1c:ad:54:68:9c:15:3c:5f:c1: f7:b0:82:16:df:cb:0a:9b:2a:cb:d0:c1:37:30:b4: 58:db:e2:d1:2e:c5:63:b7:b0:aa:83:71:7d:68:6a: b0:3e:cd:0b:26:ca:1a:9d:0a:46:69:bb:25:3c:64: f1:dc:f9:a3:56:41:90:12:86:b7:94:84:6c:e6:5c: bd:8c:07:48:51:54:c4:35:95:c3:e3:13:e4:14:4c: b7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B9:B7:E1:8D:23:81:DF:1D:72:15:2D:64:8E:B5:29:BD:C4:E6:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d56d197e-5c29-3a3f-8fae-ccf02e1f2cee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:0b:35:c8:6a:41:c6:f9:de:7c:04:e7:81:05:89:c1:a5:a0: b8:f7:c2:0f:24:85:94:4c:27:58:34:6e:5c:64:0d:63:4f:7a: ef:58:0b:9c:6b:30:03:4c:64:ad:5b:cb:23:92:63:26:09:5d: e0:56:c1:75:44:62:7b:b5:41:30:b8:d7:c3:26:9c:dd:e9:63: cf:c0:0a:8a:fb:e0:af:10:85:fd:b9:80:61:70:cd:ef:dc:c2: 4f:2d:f7:d5:f5:80:d2:3f:eb:b9:03:8b:99:b4:ab:eb:a4:12: 8e:dc:49:8b:28:5d:c3:60:df:9b:45:07:46:03:52:75:28:10: d6:6d:be:30:86:f7:dd:ce:00:25:b3:13:64:b6:c2:c9:2b:ee: 89:a1:d4:ec:e2:11:4c:fc:6d:e6:23:93:24:9a:ab:0b:94:52: 8a:55:0e:fa:70:42:ab:a1:08:eb:fd:84:b4:c0:9e:bd:fd:df: c8:13:43:28:26:1e:f2:28:a8:26:98:e4:70:60:0e:fa:c0:81: 5f:7e:22:5d:5f:66:1d:69:65:fe:56:6b:5c:4a:23:73:40:98: 86:40:20:34:8b:72:88:4f:7f:81:28:d1:c9:4a:ec:22:f0:bb: 94:bd:72:f7:5d:a5:5a:d8:11:dc:57:3b:fd:c7:56:18:22:f8: c1:7f:ad:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwBbuUbofXvNiK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk YzI1ZGU1ZWItOGViMi00YzFhLWE4YzQtYTA0MzM1YTRhNzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO3P4kJuGcSbTMLqJo2xzUDIXJHucCzPB1g/ v8goTuT9YDLnE+7wn+orgIV14zwvIk9ABNYSzUH6KCaNZH4vZmegdQDewzCNU4QN eV0cqGaqZmJqCmDY40zHUcFUl2gpy7NeJnhfQ6DaAHby2ZRAEzJqqg4Jarrqh37i ue0siTBJ33l+pIMOgTjy5pjCWM28pmH3pkU5oN4M9EIIBlPJJhREvM8aQSXX8YIc rVRonBU8X8H3sIIW38sKmyrL0ME3MLRY2+LRLsVjt7Cqg3F9aGqwPs0LJsoanQpG abslPGTx3PmjVkGQEoa3lIRs5ly9jAdIUVTENZXD4xPkFEy3YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAi5t+GNI4HfHXIVLWSOtSm9xOaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDU2ZDE5N2UtNWMyOS0z YTNmLThmYWUtY2NmMDJlMWYyY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFULNchqQcb53nwE54EFicGloLj3wg8khZRMJ1g0blxkDWNPeu9YC5xr MANMZK1byyOSYyYJXeBWwXVEYnu1QTC418MmnN3pY8/ACor74K8Qhf25gGFwze/c wk8t99X1gNI/67kDi5m0q+ukEo7cSYsoXcNg35tFB0YDUnUoENZtvjCG993OACWz E2S2wskr7omh1OziEUz8beYjkySaqwuUUopVDvpwQquhCOv9hLTAnr3938gTQygm HvIoqCaY5HBgDvrAgV9+Il1fZh1pZf5Wa1xKI3NAmIZAIDSLcohPf4Eo0clK7CLw u5S9cvddpVrYEdxXO/3HVhgi+MF/rR8= -----END CERTIFICATE-----Generated at Sun Jun 15 05:17:02 2025 by rpki-client