$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa File: 33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa (raw, json) Hash identifier: EQkeU0jaR2xP9Y1fwqo7Y0MUxOqTeBGWfcY/720f/EQ= Subject key identifier: D0:08:32:73:D5:DC:46:97:56:FA:FD:1F:37:4F:28:64:97:27:AB:18 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AE9F66C9DFB67D5D409891480 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 9009 IP address blocks: 172.111.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6c:9d:fb:67:d5:d4:09:89:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=38c71f7a-71cc-4d53-a283-f9d88c78c1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3b:6b:b4:2a:a6:66:12:2c:65:90:05:73:c0: 40:34:d4:d9:88:d0:2a:36:0d:c4:cc:7d:f5:d8:2f: cf:b5:3b:e9:2f:93:ee:18:14:44:f3:f2:df:82:f3: c7:76:af:ef:af:9d:61:01:63:24:ca:53:e0:8f:7e: f5:15:2e:c1:80:14:a3:0c:cb:c7:e8:56:76:b5:2d: 2c:5c:c4:93:02:6f:16:4f:c0:1e:56:ac:76:88:e2: d1:43:38:0f:d4:ee:be:13:7e:7a:82:cd:7c:09:9b: 93:b2:9f:2d:70:38:e4:87:e3:fb:0a:66:4e:eb:38: b4:72:a2:1e:5a:66:c0:de:db:ae:9c:ff:64:66:28: be:7b:05:29:de:4d:fc:57:19:47:dd:c9:9f:4d:44: 04:23:9b:0e:0a:65:0d:f4:48:3f:03:80:7a:c6:1e: 85:e1:65:9c:0a:c5:05:c2:e0:c8:19:26:b0:16:7c: 69:28:ea:0a:7e:c2:db:cc:ac:f4:1d:a5:65:38:07: eb:ab:35:76:c8:67:25:c3:67:ec:3c:c9:36:ee:12: 4b:b8:2a:02:ba:34:8d:bd:3e:84:64:64:9c:8c:e0: 87:79:e0:1a:c3:77:95:89:ae:98:6a:87:ae:86:f9: e5:c6:6b:8a:53:48:8a:77:86:15:96:39:97:05:47: 60:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:08:32:73:D5:DC:46:97:56:FA:FD:1F:37:4F:28:64:97:27:AB:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/33a0ff32-babe-3bdf-8441-bb1e81b0a949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f4:9d:6b:ef:dd:d5:df:20:a1:2f:f0:81:b5:de:fe:f8:07: 58:cb:b1:3c:22:fb:b0:3d:64:c7:86:ab:b9:ac:0f:61:2f:06: e0:19:e5:4c:34:ed:4c:a9:3f:a8:18:9e:56:b9:cf:fd:a6:30: 4f:04:86:d8:28:da:12:ac:c7:95:90:8c:b5:c9:35:57:cf:e6: e8:53:3a:5d:d4:de:56:de:48:c6:78:66:90:c0:9b:d3:4a:0b: 16:c8:1d:cb:57:1a:3c:21:26:8d:fc:92:c9:86:db:85:d7:5f: 60:67:ee:fa:6d:4d:94:aa:f3:d5:96:15:36:49:c3:f5:f1:2b: 72:5d:a2:bd:12:c3:03:6e:38:0c:77:28:bc:2f:e2:76:34:93: 38:8a:17:88:f1:61:a1:4a:51:c9:55:31:71:af:4a:08:52:af: ed:93:2c:1b:5a:dd:3b:7d:22:47:cf:59:53:9e:77:2e:af:6b: 49:46:9e:eb:bc:a1:95:49:04:1a:e6:f5:4c:3b:56:42:36:9d: d2:6d:44:9a:f0:f8:ef:3d:39:f8:c7:87:0e:38:5a:46:62:92: 43:36:00:e6:63:b2:88:66:45:42:c9:e7:4b:7d:ab:b0:f5:89: 3a:68:60:a9:bb:26:2d:6a:26:b6:de:79:ac:e4:05:b2:aa:f4: 61:90:82:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9myd+2fV1AmJFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk MzhjNzFmN2EtNzFjYy00ZDUzLWEyODMtZjlkODhjNzhjMWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTtrtCqmZhIsZZAFc8BANNTZiNAqNg3EzH31 2C/PtTvpL5PuGBRE8/LfgvPHdq/vr51hAWMkylPgj371FS7BgBSjDMvH6FZ2tS0s XMSTAm8WT8AeVqx2iOLRQzgP1O6+E356gs18CZuTsp8tcDjkh+P7CmZO6zi0cqIe WmbA3tuunP9kZii+ewUp3k38VxlH3cmfTUQEI5sOCmUN9Eg/A4B6xh6F4WWcCsUF wuDIGSawFnxpKOoKfsLbzKz0HaVlOAfrqzV2yGclw2fsPMk27hJLuCoCujSNvT6E ZGScjOCHeeAaw3eVia6YaoeuhvnlxmuKU0iKd4YVljmXBUdgYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAIMnPV3EaXVvr9HzdPKGSXJ6sYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzNhMGZmMzItYmFiZS0z YmRmLTg0NDEtYmIxZTgxYjBhOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn0nWvv3dXfIKEv8IG13v74B1jLsTwi+7A9ZMeGq7msD2EvBuAZ5Uw0 7UypP6gYnla5z/2mME8Ehtgo2hKsx5WQjLXJNVfP5uhTOl3U3lbeSMZ4ZpDAm9NK CxbIHctXGjwhJo38ksmG24XXX2Bn7vptTZSq89WWFTZJw/XxK3Jdor0SwwNuOAx3 KLwv4nY0kziKF4jxYaFKUclVMXGvSghSr+2TLBta3Tt9IkfPWVOedy6va0lGnuu8 oZVJBBrm9Uw7VkI2ndJtRJrw+O89OfjHhw44WkZikkM2AOZjsohmRULJ50t9q7D1 iTpoYKm7Ji1qJrbeeazkBbKq9GGQglY= -----END CERTIFICATE-----Generated at Sat Aug 23 09:01:17 2025 by rpki-client