$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/514e4b81-db6f-3755-97ea-8cfb072dea6c.roa File: 514e4b81-db6f-3755-97ea-8cfb072dea6c.roa (raw, json) Hash identifier: kQjpxk/F7WXzIqTNs1o5YAVJ0Kg78BqKHSkFa1XE6s0= Subject key identifier: 9D:65:B9:18:51:10:77:8C:E2:46:FD:47:43:02:5E:B2:CA:24:4B:79 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584A42758F5A1963B578233796C0 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/514e4b81-db6f-3755-97ea-8cfb072dea6c.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 54113 IP address blocks: 172.111.94.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:8f:5a:19:63:b5:78:23:37:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=50e1d1fd-7731-4e24-82b8-f94feffbf417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:23:c2:1f:c8:c9:b7:73:24:c5:83:29:cc:b5: 7b:58:1c:f1:b4:0d:fd:ff:76:51:0b:4a:b5:59:34: 39:50:3b:12:e5:2c:df:9e:71:22:0e:0e:ba:0d:87: 35:f5:89:27:b5:90:1d:05:86:dc:17:0b:72:60:33: e9:cd:c5:40:4d:f4:6a:f1:36:aa:66:b6:50:26:23: d2:d4:f3:f1:f5:4a:dc:d0:65:6c:b3:68:fe:68:4f: bb:0e:ce:a1:f4:de:5d:45:d1:70:77:e8:96:4b:1c: c3:c0:9d:f5:b6:c4:b9:8d:0c:86:cf:44:7d:f7:61: 34:46:5a:3b:31:e4:df:08:07:c2:54:18:0c:68:3f: dd:35:be:9f:eb:f1:9d:cc:2c:e4:e0:f0:99:47:36: 87:a7:c3:4a:3e:36:b0:1f:5d:ad:14:f3:16:71:9a: e1:58:07:49:5f:98:c9:b7:a9:58:23:fb:0b:c1:ec: 96:24:9c:4e:c2:13:52:4c:72:87:ad:e1:77:e3:e2: 7b:3e:9b:d0:09:7e:be:ee:0e:c4:63:af:18:d0:ac: 33:a0:c0:e8:c2:e8:7a:53:45:36:47:38:44:85:5c: 4f:f6:27:52:bd:8a:b2:89:ef:c1:3f:65:1c:a6:c5: 4c:9d:b3:20:3b:71:62:9c:5c:ed:66:a3:ae:04:de: b4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:65:B9:18:51:10:77:8C:E2:46:FD:47:43:02:5E:B2:CA:24:4B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/514e4b81-db6f-3755-97ea-8cfb072dea6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.94.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:28:66:e4:a1:15:ee:a3:b8:a1:3d:84:d3:72:f6:7b:c9:da: 76:59:88:cd:bb:0a:ea:b9:83:51:6e:69:6d:5c:fc:90:ae:9e: c3:be:b0:84:c5:e1:67:2f:71:a6:02:4b:f5:1b:62:e6:43:e9: 9f:26:38:59:48:85:33:e6:3c:9c:b0:b6:d1:31:38:af:a4:84: 73:4c:68:0d:2a:a2:6e:93:7d:2f:38:5e:aa:27:6a:ae:f8:6d: 0e:70:b6:d6:d6:92:93:1f:92:89:8a:b7:86:66:52:85:f7:8e: bc:ab:6e:42:5d:27:16:00:85:fc:6a:e5:5d:59:fb:6e:6f:b8: 49:96:d3:4b:ed:74:d1:c1:01:79:03:f9:db:15:ea:d8:0a:ba: 06:f7:eb:37:af:c9:73:dd:48:de:09:72:02:34:b8:3a:a9:b2: fd:a3:e0:c2:4e:f8:63:92:d1:76:f8:9a:26:a4:57:67:aa:82: 2a:ff:57:c0:66:67:1f:e1:08:19:79:5d:3c:13:b6:d4:d3:27: 1a:0d:3d:fe:c7:b2:25:f6:67:1d:1e:8a:f8:e6:14:18:76:b9: 4f:6f:e0:41:71:d4:33:dc:29:35:93:87:22:91:48:b1:63:db: 88:7a:9f:ef:d6:ba:71:68:26:37:0d:8b:dc:07:e1:46:6e:a9: 2e:e6:f9:73 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpCdY9aGWO1eCM3lsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk NTBlMWQxZmQtNzczMS00ZTI0LTgyYjgtZjk0ZmVmZmJmNDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSPCH8jJt3MkxYMpzLV7WBzxtA39/3ZRC0q1 WTQ5UDsS5SzfnnEiDg66DYc19YkntZAdBYbcFwtyYDPpzcVATfRq8TaqZrZQJiPS 1PPx9Urc0GVss2j+aE+7Ds6h9N5dRdFwd+iWSxzDwJ31tsS5jQyGz0R992E0Rlo7 MeTfCAfCVBgMaD/dNb6f6/GdzCzk4PCZRzaHp8NKPjawH12tFPMWcZrhWAdJX5jJ t6lYI/sLweyWJJxOwhNSTHKHreF34+J7PpvQCX6+7g7EY68Y0KwzoMDowuh6U0U2 RzhEhVxP9idSvYqyie/BP2UcpsVMnbMgO3FinFztZqOuBN60MwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ1luRhREHeM4kb9R0MCXrLKJEt5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNTE0ZTRiODEtZGI2Zi0z NzU1LTk3ZWEtOGNmYjA3MmRlYTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG9egDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDIKGbkoRXuo7ihPYTTcvZ7ydp2WYjNuwrquYNRbmltXPyQrp7DvrCE xeFnL3GmAkv1G2LmQ+mfJjhZSIUz5jycsLbRMTivpIRzTGgNKqJuk30vOF6qJ2qu +G0OcLbW1pKTH5KJireGZlKF9468q25CXScWAIX8auVdWftub7hJltNL7XTRwQF5 A/nbFerYCroG9+s3r8lz3UjeCXICNLg6qbL9o+DCTvhjktF2+JompFdnqoIq/1fA Zmcf4QgZeV08E7bU0ycaDT3+x7Il9mcdHor45hQYdrlPb+BBcdQz3Ck1k4cikUix Y9uIep/v1rpxaCY3DYvcB+FGbqku5vlz -----END CERTIFICATE-----Generated at Mon Jun 30 14:19:41 2025 by rpki-client