$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bcfabaff-da91-3d0d-a57e-76ee6455e657.roa File: bcfabaff-da91-3d0d-a57e-76ee6455e657.roa (raw, json) Hash identifier: hJCcVqv4JHPeEQu2tD7LMEgJCctkuLMjv26Xadq6GDM= Subject key identifier: 2D:1E:7A:65:54:DC:6C:3A:D3:35:1A:02:59:11:1A:59:81:22:27:73 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A37F876D086419CB24D38BF80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bcfabaff-da91-3d0d-a57e-76ee6455e657.roa Signing time: Tue 17 Jun 2025 06:50:51 +0000 ROA not before: Tue 17 Jun 2025 06:50:51 +0000 ROA not after: Mon 15 Sep 2025 06:50:51 +0000 asID: 29802 IP address blocks: 172.111.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:f8:76:d0:86:41:9c:b2:4d:38:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 17 06:50:51 2025 GMT Not After : Sep 15 06:50:51 2025 GMT Subject: CN=2d0a03bd-bfc1-47fb-8593-9993f96c5d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:58:08:58:50:76:66:0c:4b:9d:8a:02:b5:d8: 9c:a6:26:17:1a:8c:9b:a9:57:89:07:5c:df:14:dc: 8b:ae:9f:b6:67:5f:bb:4f:9e:1d:01:5d:11:2d:2f: 41:85:d3:f5:33:78:48:06:6a:ee:b9:33:0e:c7:9b: af:f2:1e:59:46:4b:60:84:fc:3a:ed:4c:3e:c3:6e: 02:c1:6f:2c:bd:46:d6:ea:41:08:e1:1c:23:3c:b2: 29:c3:4e:a9:90:37:41:08:0e:ab:9e:06:db:48:be: 98:0e:86:4b:29:85:3a:19:35:91:23:44:6a:16:02: d5:c6:f2:03:fe:63:9a:df:d7:4a:9d:e5:e2:ef:76: 22:95:66:06:d3:5e:b0:a0:c0:ac:fc:68:a7:a3:62: 73:88:99:95:a4:c0:04:54:dd:11:d7:78:9f:00:8c: 18:ae:75:11:33:66:9e:c1:14:98:95:3f:96:ea:18: 41:0c:1b:d9:bc:d3:30:1c:2d:25:e0:e9:00:b9:9a: b9:8f:2f:26:77:50:cf:ec:5c:00:f6:f5:74:f1:3b: b3:35:75:76:19:09:91:21:af:07:47:fb:4a:38:88: 09:95:93:39:b3:08:80:f0:37:89:13:1a:23:59:a6: a0:59:eb:ed:49:11:e1:02:44:1b:42:da:c3:73:ee: b6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1E:7A:65:54:DC:6C:3A:D3:35:1A:02:59:11:1A:59:81:22:27:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bcfabaff-da91-3d0d-a57e-76ee6455e657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a7:99:a8:d6:fa:4c:df:00:10:f5:c7:82:d6:67:52:9d:e5: cc:dc:c2:ac:a5:ba:b3:df:45:ba:6f:75:90:2d:83:e3:16:0e: 32:c0:fe:49:17:aa:93:88:84:71:64:7b:fc:14:26:07:bb:dc: cf:21:69:c9:b8:0c:d0:ae:69:5b:4a:ff:c3:9d:c2:cd:c7:a4: 31:10:9f:70:4a:dc:10:d2:30:fe:a1:ce:ea:d6:63:2f:a5:e5: 54:b0:c7:6b:5f:13:d2:60:84:b0:11:fe:6e:32:68:df:bc:91: ed:db:bc:26:49:a0:3b:ce:54:d7:ca:59:5d:f3:13:5a:06:e9: 2f:bf:89:1f:4b:a2:4c:b0:41:1f:57:5f:fe:b5:da:bc:22:52: 69:83:14:9c:55:fd:16:28:aa:4c:47:e8:3f:37:7f:dd:7e:1e: f8:36:ac:4f:7f:b7:63:3b:04:1c:1b:0a:72:b6:0e:4d:3d:81: 60:db:2d:c3:33:88:68:bd:27:37:19:cf:4d:96:c7:fc:a5:49: 00:91:71:29:2c:ba:14:51:fc:ed:b6:5d:cd:a4:84:92:3c:73: 17:57:5e:f9:dd:8d:30:9b:c2:90:ee:7c:04:76:0e:9a:37:ae: 36:d5:04:e2:b5:e9:08:21:21:d4:c7:e1:be:df:e2:60:72:2a: b0:f1:08:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3+HbQhkGcsk04v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxNzA2NTA1MVoXDTI1MDkxNTA2NTA1MVowLzEtMCsGA1UEAxMk MmQwYTAzYmQtYmZjMS00N2ZiLTg1OTMtOTk5M2Y5NmM1ZDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFgIWFB2ZgxLnYoCtdicpiYXGoybqVeJB1zf FNyLrp+2Z1+7T54dAV0RLS9BhdP1M3hIBmruuTMOx5uv8h5ZRktghPw67Uw+w24C wW8svUbW6kEI4RwjPLIpw06pkDdBCA6rngbbSL6YDoZLKYU6GTWRI0RqFgLVxvID /mOa39dKneXi73YilWYG016woMCs/Gino2JziJmVpMAEVN0R13ifAIwYrnURM2ae wRSYlT+W6hhBDBvZvNMwHC0l4OkAuZq5jy8md1DP7FwA9vV08TuzNXV2GQmRIa8H R/tKOIgJlZM5swiA8DeJExojWaagWevtSRHhAkQbQtrDc+62HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0eemVU3Gw60zUaAlkRGlmBIidzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmNmYWJhZmYtZGE5MS0z ZDBkLWE1N2UtNzZlZTY0NTVlNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHunmajW+kzfABD1x4LWZ1Kd5czcwqylurPfRbpvdZAtg+MWDjLA/kkX qpOIhHFke/wUJge73M8hacm4DNCuaVtK/8Odws3HpDEQn3BK3BDSMP6hzurWYy+l 5VSwx2tfE9JghLAR/m4yaN+8ke3bvCZJoDvOVNfKWV3zE1oG6S+/iR9LokywQR9X X/612rwiUmmDFJxV/RYoqkxH6D83f91+Hvg2rE9/t2M7BBwbCnK2Dk09gWDbLcMz iGi9JzcZz02Wx/ylSQCRcSksuhRR/O22Xc2khJI8cxdXXvndjTCbwpDufAR2Dpo3 rjbVBOK16QghIdTH4b7f4mByKrDxCGs= -----END CERTIFICATE-----Generated at Sun Jun 29 09:15:19 2025 by rpki-client