$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa File: febb0e75-40f1-37a9-a0a4-5dc80635d514.roa (raw, json) Hash identifier: 1ggjFhYP6G49h/kWtiEOC8O7fjq2kdqqfsXMTVYzqw0= Subject key identifier: 06:CC:5F:CC:0D:C3:20:EA:5E:D5:B3:CA:F3:41:03:4E:49:D5:45:3A Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A23C00B4C8EC0A14612431940 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 3223 IP address blocks: 172.111.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:0b:4c:8e:c0:a1:46:12:43:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=8face6e6-a1cb-4c49-9aa9-73370178dc60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:40:61:c5:dd:87:04:dc:c6:a1:13:c3:58:a0: 99:95:40:9e:6d:39:47:c0:ab:b6:72:57:c1:73:5f: 3a:b0:0a:85:fb:b1:c5:08:16:c1:9d:01:f6:48:19: 41:3b:71:9e:7a:a5:67:c6:49:93:09:5b:9b:db:ba: e5:42:c4:8a:aa:89:dc:99:91:21:49:5a:06:eb:8f: 8d:7d:43:8b:8b:75:7a:79:a5:8e:a9:be:30:e4:1f: eb:7a:37:dc:26:3f:5d:dc:b3:6d:57:bb:ac:b9:12: 96:cb:c4:02:29:59:db:0f:17:1c:b0:ed:28:94:a0: b6:c2:74:02:3a:95:0f:a8:34:60:a0:25:c3:5a:aa: fa:33:15:f9:5b:9e:2e:d1:3a:cd:81:5c:65:9f:4b: bb:dd:30:25:81:5a:eb:ee:b7:af:7e:45:74:cd:e8: cd:2d:9a:5f:9f:79:bc:e9:60:f6:67:67:af:7c:ac: 44:ac:13:d6:aa:40:d7:89:ac:e0:8a:7f:1c:c4:69: a2:58:36:13:3e:65:29:4e:e5:c6:20:fa:eb:e0:ce: f0:02:92:66:5d:8f:cd:6f:4b:20:4e:6d:51:e7:7f: 69:bc:89:4e:dd:91:26:75:5f:fa:29:94:b0:f7:21: 93:24:15:a3:9a:52:96:a5:51:8a:9f:88:a7:fb:d9: bb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CC:5F:CC:0D:C3:20:EA:5E:D5:B3:CA:F3:41:03:4E:49:D5:45:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:aa:bb:68:43:e1:fd:d6:3f:7b:88:28:2f:9b:4a:9f:a5:97: d7:53:8d:23:46:e3:7a:42:bb:e8:3f:7b:20:e9:80:19:75:bc: d5:57:50:06:d8:f9:67:49:80:33:b2:5b:cb:b6:de:d9:f8:a7: 7e:37:68:de:3c:be:87:97:86:69:a6:85:a2:65:71:49:46:53: 27:c6:98:e8:b1:72:1f:9d:48:f5:6e:cf:fb:54:cd:6a:44:f1: 04:75:77:dc:f8:e8:d9:eb:2d:f5:41:2b:de:27:e9:71:2c:4d: dd:10:32:f8:9e:c1:75:57:60:0e:f6:0e:4d:0d:fd:f7:65:64: 8e:9c:11:75:7c:9b:aa:45:3c:6f:41:f1:2e:91:20:7f:9c:af: 43:4c:21:53:22:7d:75:00:17:d4:f4:92:61:24:70:46:b4:3f: bf:89:d7:17:3f:d1:c9:31:13:7f:af:34:23:27:42:20:ce:f5: f8:ed:35:38:d2:a2:0f:d4:b1:7b:06:6d:61:33:90:8e:b8:48: b3:fb:0d:33:bf:01:42:44:ca:5f:d6:a9:d1:b9:83:80:2f:34: ce:18:5e:27:1a:eb:34:46:f8:db:fe:56:0e:00:11:45:ee:1a: 9f:9c:14:04:5a:08:57:d5:63:44:ef:d4:81:12:d4:6b:c4:b2: 7f:8d:b8:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwAtMjsChRhJDGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk OGZhY2U2ZTYtYTFjYi00YzQ5LTlhYTktNzMzNzAxNzhkYzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0Bhxd2HBNzGoRPDWKCZlUCebTlHwKu2clfB c186sAqF+7HFCBbBnQH2SBlBO3GeeqVnxkmTCVub27rlQsSKqoncmZEhSVoG64+N fUOLi3V6eaWOqb4w5B/rejfcJj9d3LNtV7usuRKWy8QCKVnbDxccsO0olKC2wnQC OpUPqDRgoCXDWqr6MxX5W54u0TrNgVxln0u73TAlgVrr7revfkV0zejNLZpfn3m8 6WD2Z2evfKxErBPWqkDXiazgin8cxGmiWDYTPmUpTuXGIPrr4M7wApJmXY/Nb0sg Tm1R539pvIlO3ZEmdV/6KZSw9yGTJBWjmlKWpVGKn4in+9m7ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbMX8wNwyDqXtWzyvNBA05J1UU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmViYjBlNzUtNDBmMS0z N2E5LWEwYTQtNWRjODA2MzVkNTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKqu2hD4f3WP3uIKC+bSp+ll9dTjSNG43pCu+g/eyDpgBl1vNVXUAbY +WdJgDOyW8u23tn4p343aN48voeXhmmmhaJlcUlGUyfGmOixch+dSPVuz/tUzWpE 8QR1d9z46NnrLfVBK94n6XEsTd0QMviewXVXYA72Dk0N/fdlZI6cEXV8m6pFPG9B 8S6RIH+cr0NMIVMifXUAF9T0kmEkcEa0P7+J1xc/0ckxE3+vNCMnQiDO9fjtNTjS og/UsXsGbWEzkI64SLP7DTO/AUJEyl/WqdG5g4AvNM4YXica6zRG+Nv+Vg4AEUXu Gp+cFARaCFfVY0Tv1IES1GvEsn+NuDQ= -----END CERTIFICATE-----Generated at Sun Jun 15 19:23:47 2025 by rpki-client