$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/40a8728e-8622-357a-9afc-9d9645772182.roa File: 40a8728e-8622-357a-9afc-9d9645772182.roa (raw, json) Hash identifier: T54kYGsP/dTph305RK2Mt+/uufW/R34BPzLrIc/BJYI= Subject key identifier: 71:31:C7:85:BE:E6:06:A1:F8:A9:95:41:09:E6:13:D4:29:7B:64:CF Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849EF574375B939155BBBCF12C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/40a8728e-8622-357a-9afc-9d9645772182.roa Signing time: Thu 22 May 2025 06:27:51 +0000 ROA not before: Thu 22 May 2025 06:27:51 +0000 ROA not after: Wed 20 Aug 2025 06:27:51 +0000 asID: 834 IP address blocks: 172.111.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ef:57:43:75:b9:39:15:5b:bb:cf:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 22 06:27:51 2025 GMT Not After : Aug 20 06:27:51 2025 GMT Subject: CN=bce303c8-ee86-4075-824e-173bb1bd5695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3e:53:88:31:c9:c0:1a:cd:9c:f3:03:73:05: 3e:1c:19:16:8d:b4:19:da:3d:e2:ff:7e:41:5d:9d: 18:1e:93:75:f8:7c:80:bf:a1:26:e6:0f:b6:0e:0f: 4b:b7:2a:c0:ca:d2:e5:7e:2e:20:b9:1d:90:79:8d: da:37:21:b6:9f:46:ae:ba:9d:10:6a:b7:86:09:42: a5:19:c0:ca:aa:0d:8c:fb:ab:8f:b2:4f:7f:33:89: 81:26:ef:cb:6b:3e:f5:72:7e:af:6f:05:00:82:ed: e3:0b:ec:96:4c:36:bc:23:1a:57:9c:cf:56:64:f0: 08:df:1f:7b:ed:b6:7a:a2:77:31:44:90:08:a5:70: 1e:f8:e6:3b:1e:b0:16:90:a9:d9:a3:c3:6c:3a:28: 05:5e:57:69:e2:16:a4:cd:04:01:ee:c6:52:a7:4a: 3d:e9:9d:f3:ba:34:63:03:f9:62:5e:75:1c:99:5d: 60:94:a8:61:43:18:02:db:5a:59:d5:01:85:79:5b: 34:50:d3:2e:7e:3f:f8:31:09:83:27:ef:1b:a6:a5: ed:c3:ad:71:37:cd:27:32:7b:5a:06:1c:52:a7:a7: c2:28:48:59:22:3f:7c:0d:b1:da:e6:08:50:f8:7a: 27:99:df:40:74:c3:af:d1:f8:56:4d:f0:0d:c4:31: 08:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:31:C7:85:BE:E6:06:A1:F8:A9:95:41:09:E6:13:D4:29:7B:64:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/40a8728e-8622-357a-9afc-9d9645772182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:23:fd:49:b3:fc:4a:4d:b3:dc:31:2d:73:43:bf:2e:40:49: d1:fa:9f:f0:b8:bf:9d:71:a8:6f:1e:03:36:d8:1f:0d:60:78: 58:f5:b5:05:e1:0a:31:a5:b6:59:1a:ad:18:ea:a0:64:00:24: 66:23:a2:19:58:e8:02:d1:e9:36:47:9d:18:4c:0a:06:db:ca: 0d:83:56:59:e1:b5:1e:1b:fd:da:15:57:7a:c5:6a:67:91:8c: a2:dd:c6:51:c3:e7:8d:c7:af:57:af:cb:20:a2:0f:9f:df:b0: 0e:a1:08:8b:4f:b2:9d:d2:91:ab:cc:1a:16:41:94:1b:a2:05: 1a:82:9f:df:9a:fd:a8:c6:6d:af:2d:d0:2c:2f:19:19:36:ed: cd:7e:9c:69:1c:c2:ed:11:95:08:b6:77:c7:7c:6b:0a:89:e6: a5:64:a3:1a:d8:71:67:20:7c:4a:9d:ad:8a:fd:fc:4f:48:b5: 42:a3:1c:a3:a5:c2:38:b9:0f:76:6a:08:fa:5e:29:a5:da:8f: ce:aa:0b:3f:37:72:c7:1a:51:17:2c:67:8c:6b:22:93:b4:22: fd:9d:8b:39:4f:46:44:0b:f2:b1:ed:ba:99:db:b8:ed:5a:03: a8:44:4c:09:de:e8:4e:60:6a:87:6b:28:ef:9d:be:73:6d:6a: d4:34:0a:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnvV0N1uTkVW7vPEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUyMjA2Mjc1MVoXDTI1MDgyMDA2Mjc1MVowLzEtMCsGA1UEAxMk YmNlMzAzYzgtZWU4Ni00MDc1LTgyNGUtMTczYmIxYmQ1Njk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD5TiDHJwBrNnPMDcwU+HBkWjbQZ2j3i/35B XZ0YHpN1+HyAv6Em5g+2Dg9LtyrAytLlfi4guR2QeY3aNyG2n0auup0QareGCUKl GcDKqg2M+6uPsk9/M4mBJu/Laz71cn6vbwUAgu3jC+yWTDa8IxpXnM9WZPAI3x97 7bZ6oncxRJAIpXAe+OY7HrAWkKnZo8NsOigFXldp4hakzQQB7sZSp0o96Z3zujRj A/liXnUcmV1glKhhQxgC21pZ1QGFeVs0UNMufj/4MQmDJ+8bpqXtw61xN80nMnta BhxSp6fCKEhZIj98DbHa5ghQ+Honmd9AdMOv0fhWTfANxDEI8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHExx4W+5gah+KmVQQnmE9Qpe2TPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDBhODcyOGUtODYyMi0z NTdhLTlhZmMtOWQ5NjQ1NzcyMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgj/Umz/EpNs9wxLXNDvy5ASdH6n/C4v51xqG8eAzbYHw1geFj1tQXh CjGltlkarRjqoGQAJGYjohlY6ALR6TZHnRhMCgbbyg2DVlnhtR4b/doVV3rFameR jKLdxlHD543Hr1evyyCiD5/fsA6hCItPsp3SkavMGhZBlBuiBRqCn9+a/ajGba8t 0CwvGRk27c1+nGkcwu0RlQi2d8d8awqJ5qVkoxrYcWcgfEqdrYr9/E9ItUKjHKOl wji5D3ZqCPpeKaXaj86qCz83cscaURcsZ4xrIpO0Iv2dizlPRkQL8rHtupnbuO1a A6hETAne6E5gaodrKO+dvnNtatQ0CsI= -----END CERTIFICATE-----Generated at Tue Jul 1 16:18:20 2025 by rpki-client