$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa File: a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa (raw, json) Hash identifier: EKe6WLcYqIoUh7LXbmPdGlIzCgKbhgeHwBNcWt6Nsmk= Subject key identifier: 94:7C:9C:11:AB:E8:2A:FD:50:6B:D3:BE:21:3F:A8:CD:B2:96:5D:E5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849D85F907AF7F6C714F2E628C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 3223 IP address blocks: 172.111.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:90:7a:f7:f6:c7:14:f2:e6:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=3f346447-0b55-4d0b-940c-6812c40b0600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:44:87:0c:80:3a:d8:ea:d1:b8:b0:87:dc:64: 06:19:37:0e:49:5f:2c:33:36:33:a9:da:4b:37:44: 23:25:84:01:4b:73:d2:67:63:2e:c8:e8:b7:61:17: 83:74:bd:68:bf:5d:f0:48:49:7b:e9:f0:ed:b5:8a: e2:b5:cf:02:be:cb:ca:b4:54:48:a1:f9:1a:55:23: c4:ec:a4:62:ec:f2:6f:5b:c3:b1:a2:c7:f7:c3:33: dd:9b:c7:e5:a3:c8:a4:56:63:4e:b2:c4:a3:8c:8c: ea:44:88:74:81:a1:2d:c8:4c:1e:71:9b:ca:7a:4f: fe:a7:d8:19:f4:f9:15:b6:14:b6:90:9a:af:2e:72: 71:1f:dd:ea:59:0a:8c:30:05:39:a0:2b:de:eb:92: 51:0a:b7:32:c9:0a:ca:8f:c9:ac:ce:40:3b:f8:76: 31:63:78:c7:74:50:fb:05:c8:06:7b:b7:c3:66:25: 67:6d:87:dd:3a:08:4e:69:d0:72:52:8f:01:22:cb: 82:fe:c8:6b:c9:44:e9:e3:2d:61:25:34:69:ba:ff: da:d6:fa:4d:b9:4b:2d:f7:9c:2a:a9:7e:a9:cc:6a: 72:fd:9c:17:67:a9:96:f3:4f:c5:bb:97:88:43:be: 40:3d:d9:55:58:b0:35:8d:82:9b:0e:68:de:de:73: e3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7C:9C:11:AB:E8:2A:FD:50:6B:D3:BE:21:3F:A8:CD:B2:96:5D:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a1c85ec1-36d7-3c6b-ba9f-62cea1b1e759.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:d4:84:ce:db:35:ea:15:6b:b7:df:e2:58:a1:61:eb:9b:56: 62:ca:56:33:21:80:74:94:56:ac:2e:2f:72:27:2b:65:ea:1f: cb:e4:4a:a9:4e:a1:18:f0:3a:08:ce:1f:a0:6b:2c:f4:66:39: a8:8a:ab:00:6b:b5:d4:0f:c2:0a:9f:24:24:a0:2c:cd:27:2f: 81:44:7b:ce:5c:b7:91:f1:52:01:58:29:8c:fb:52:20:b1:1c: bd:b0:79:32:ba:4c:b3:3f:31:58:ca:dc:53:a1:de:96:13:74: 34:45:8c:32:ec:62:e1:e0:42:90:38:ba:3a:89:60:f4:97:39: c2:55:94:21:23:ef:9a:e7:a8:d9:3b:15:5f:16:44:95:d7:c6: 1c:a5:d2:9a:80:d0:b6:da:5c:92:0e:ab:da:d6:18:a3:c9:15: 2e:5c:af:e9:99:73:93:82:b8:c0:a6:6f:0d:95:23:d9:58:d7: bd:5c:67:ca:f1:4a:13:69:42:e0:6e:93:91:3b:b5:cf:62:14: 86:97:4f:c5:b1:02:e6:7d:2a:35:99:48:2b:62:38:26:5e:c7: aa:36:72:84:d0:d5:d7:98:98:61:70:e5:2f:3c:dd:1e:84:72: f0:fa:17:c9:7c:37:f7:76:b3:7b:c9:0a:66:df:67:7f:eb:68: 45:8e:b0:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5B69/bHFPLmKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk M2YzNDY0NDctMGI1NS00ZDBiLTk0MGMtNjgxMmM0MGIwNjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUSHDIA62OrRuLCH3GQGGTcOSV8sMzYzqdpL N0QjJYQBS3PSZ2MuyOi3YReDdL1ov13wSEl76fDttYritc8CvsvKtFRIofkaVSPE 7KRi7PJvW8Oxosf3wzPdm8flo8ikVmNOssSjjIzqRIh0gaEtyEwecZvKek/+p9gZ 9PkVthS2kJqvLnJxH93qWQqMMAU5oCve65JRCrcyyQrKj8mszkA7+HYxY3jHdFD7 BcgGe7fDZiVnbYfdOghOadByUo8BIsuC/shryUTp4y1hJTRpuv/a1vpNuUst95wq qX6pzGpy/ZwXZ6mW80/Fu5eIQ75APdlVWLA1jYKbDmje3nPj0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJR8nBGr6Cr9UGvTviE/qM2yll3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTFjODVlYzEtMzZkNy0z YzZiLWJhOWYtNjJjZWExYjFlNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLUhM7bNeoVa7ff4lihYeubVmLKVjMhgHSUVqwuL3InK2XqH8vkSqlO oRjwOgjOH6BrLPRmOaiKqwBrtdQPwgqfJCSgLM0nL4FEe85ct5HxUgFYKYz7UiCx HL2weTK6TLM/MVjK3FOh3pYTdDRFjDLsYuHgQpA4ujqJYPSXOcJVlCEj75rnqNk7 FV8WRJXXxhyl0pqA0LbaXJIOq9rWGKPJFS5cr+mZc5OCuMCmbw2VI9lY171cZ8rx ShNpQuBuk5E7tc9iFIaXT8WxAuZ9KjWZSCtiOCZex6o2coTQ1deYmGFw5S883R6E cvD6F8l8N/d2s3vJCmbfZ3/raEWOsEM= -----END CERTIFICATE-----Generated at Sun Jun 29 09:22:41 2025 by rpki-client