$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bd122a33-f3a3-369f-b238-dd0ae24abd95.roa File: bd122a33-f3a3-369f-b238-dd0ae24abd95.roa (raw, json) Hash identifier: zT09cuWivxNorkXK0WB/Nf7A+G3v1ZTseI8Ni2Hg1BU= Subject key identifier: 39:CB:65:41:73:1E:E6:2D:7A:25:3C:86:AD:19:4F:DF:E4:31:31:61 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584ACF710FA2CB2D85F902CF9000 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bd122a33-f3a3-369f-b238-dd0ae24abd95.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 834 IP address blocks: 172.111.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:0f:a2:cb:2d:85:f9:02:cf:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=05e12f3a-d55f-4d51-8cf7-00f430954128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:13:b5:2f:3c:ff:a3:9a:cb:d9:bf:26:e6:2d: 00:b0:db:92:dd:52:b4:cf:07:a3:10:79:b1:79:73: 1b:42:26:27:37:d0:69:a1:ac:9b:e3:d7:44:fc:e2: ce:d7:2d:01:8e:b5:59:ea:36:2e:d4:83:12:fe:a0: 99:8d:92:7b:95:5f:8e:d4:77:4b:30:67:b3:2d:70: 19:32:29:8d:77:36:89:1c:a3:0d:3c:0f:29:4a:75: ee:68:06:7d:3c:b9:02:f4:57:cb:a8:9e:ce:a1:9a: 20:74:e0:c0:61:3d:12:97:6f:7c:d2:6c:e6:16:d0: 73:e2:d9:39:59:f6:24:4a:cc:39:88:f5:86:10:26: f3:b8:54:9c:e4:f7:59:0f:ed:3f:bf:ae:1a:de:d1: 5d:1e:50:1e:db:d5:a9:4f:96:7d:ae:f5:ed:fe:36: 53:6e:70:54:54:05:08:ff:92:24:75:60:2f:ba:73: b1:f9:59:c6:f3:1e:83:15:b1:a9:b3:8c:44:fb:cf: cc:80:f1:f2:53:45:5f:f4:4d:e6:5f:49:20:0c:99: e0:83:ee:49:80:64:6f:65:83:ce:f6:fa:2b:dc:70: c6:05:fe:f7:d4:af:20:d1:eb:33:33:42:dc:33:37: e8:2c:ed:f5:46:c8:c1:2d:f3:08:64:f9:4e:5b:cb: 31:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CB:65:41:73:1E:E6:2D:7A:25:3C:86:AD:19:4F:DF:E4:31:31:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bd122a33-f3a3-369f-b238-dd0ae24abd95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:4a:23:4b:99:8c:ec:52:61:32:f8:bc:25:5d:c4:be:23:7b: 1f:98:fb:28:f7:2c:ca:34:a1:6b:d2:f5:6c:af:fc:ab:c8:a3: 04:b6:1b:df:8d:92:25:3d:2d:87:6a:74:f2:f5:30:b2:1d:72: 16:f4:96:bb:28:bb:4b:1c:71:f9:55:c6:8a:0a:34:2f:f8:ec: f8:a9:22:7f:37:2c:c2:40:7f:54:b9:65:cf:46:41:e1:7d:82: e4:1f:92:76:e2:ee:1c:61:4a:ca:94:d4:61:13:a2:d0:84:96: ce:06:b9:59:0c:32:00:ec:9d:e6:89:e3:57:11:5c:a4:bb:e5: 14:1b:06:13:c0:20:32:48:60:07:09:58:14:b2:bb:da:ae:f0: 5c:f1:6c:04:9e:3f:0d:38:83:f6:0e:83:9d:b8:87:8c:d2:44: 69:e2:3e:b1:32:ab:00:fe:74:1f:79:05:1e:af:00:cf:05:8d: a7:e8:7e:ee:6b:6c:b3:ab:c8:d8:fa:9d:fb:95:c5:b9:e4:f6: 25:09:d5:61:b1:1e:d9:69:9a:e7:02:5d:36:96:be:30:bc:22: 3f:ce:b8:ed:1e:a1:a5:00:e6:71:23:1a:f8:7e:75:13:aa:c3: 3b:cf:37:0f:20:57:d5:f8:3c:26:a4:04:d6:6b:21:c2:69:71: cc:fe:81:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQ+iyy2F+QLPkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk MDVlMTJmM2EtZDU1Zi00ZDUxLThjZjctMDBmNDMwOTU0MTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxO1Lzz/o5rL2b8m5i0AsNuS3VK0zwejEHmx eXMbQiYnN9Bpoayb49dE/OLO1y0BjrVZ6jYu1IMS/qCZjZJ7lV+O1HdLMGezLXAZ MimNdzaJHKMNPA8pSnXuaAZ9PLkC9FfLqJ7OoZogdODAYT0Sl2980mzmFtBz4tk5 WfYkSsw5iPWGECbzuFSc5PdZD+0/v64a3tFdHlAe29WpT5Z9rvXt/jZTbnBUVAUI /5IkdWAvunOx+VnG8x6DFbGps4xE+8/MgPHyU0Vf9E3mX0kgDJngg+5JgGRvZYPO 9vor3HDGBf731K8g0eszM0LcMzfoLO31RsjBLfMIZPlOW8sxeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnLZUFzHuYteiU8hq0ZT9/kMTFhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmQxMjJhMzMtZjNhMy0z NjlmLWIyMzgtZGQwYWUyNGFiZDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdKI0uZjOxSYTL4vCVdxL4jex+Y+yj3LMo0oWvS9Wyv/KvIowS2G9+N kiU9LYdqdPL1MLIdchb0lrsou0sccflVxooKNC/47PipIn83LMJAf1S5Zc9GQeF9 guQfknbi7hxhSsqU1GETotCEls4GuVkMMgDsneaJ41cRXKS75RQbBhPAIDJIYAcJ WBSyu9qu8FzxbASePw04g/YOg524h4zSRGniPrEyqwD+dB95BR6vAM8Fjafofu5r bLOryNj6nfuVxbnk9iUJ1WGxHtlpmucCXTaWvjC8Ij/OuO0eoaUA5nEjGvh+dROq wzvPNw8gV9X4PCakBNZrIcJpccz+gZg= -----END CERTIFICATE-----Generated at Sat Aug 23 09:01:33 2025 by rpki-client