$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ac899459-f0f1-3fb9-8e1d-b4e1b4a1749a.roa File: ac899459-f0f1-3fb9-8e1d-b4e1b4a1749a.roa (raw, json) Hash identifier: xKwZVC9uljqD0D3/Pb3sLfw7vjx42fMOLsv/oCXdnQo= Subject key identifier: 82:FF:02:08:20:E6:0F:3C:FF:7D:F7:36:6D:9B:55:29:21:7D:7F:AD Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584A5CFC937E6A7BE239717C8400 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ac899459-f0f1-3fb9-8e1d-b4e1b4a1749a.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 54113 IP address blocks: 172.111.124.0/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:93:7e:6a:7b:e2:39:71:7c:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=e19e425d-1b37-475b-8e2b-501e63456fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:11:90:94:c2:1f:f1:86:76:ad:11:28:67:72: 94:1d:57:31:e3:36:d1:c1:21:f4:bc:a4:01:07:27: d8:74:6f:c0:a6:b7:f5:1e:fe:db:98:93:b2:d6:12: 75:55:26:92:3a:ec:7c:27:e5:6e:8e:2e:89:19:95: 04:bd:08:d8:88:5c:7a:0a:b6:b8:c6:94:f9:b3:42: bb:a2:5c:14:e4:a6:38:3c:40:8b:3b:4a:0e:d6:bf: 48:72:5c:9f:20:a3:51:32:90:56:c0:33:65:35:8e: a5:ad:b4:9e:79:fa:1d:2f:2d:07:0f:ca:33:30:1f: 84:de:8b:43:75:0d:84:70:ef:f5:ad:0a:98:e8:6c: c3:53:28:6f:dd:0e:a5:d0:ad:c8:06:d9:cb:de:24: 4f:9e:f9:05:63:fb:01:03:ee:9b:dc:92:64:25:9a: ea:eb:b3:15:54:ff:b1:15:f7:65:c0:24:f5:7f:f5: 44:17:b3:c2:d6:5a:7c:4f:7e:f2:96:bc:82:97:d0: 65:fc:26:3e:e7:e6:c4:ce:16:df:89:84:fb:fa:11: 46:b0:05:96:ff:cb:8a:c7:fc:e7:dc:e6:81:9a:c6: 77:fe:f3:b4:4f:b4:a4:73:50:e2:da:bc:06:16:07: d5:cc:7c:43:74:69:23:eb:93:09:13:42:72:74:cf: a7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FF:02:08:20:E6:0F:3C:FF:7D:F7:36:6D:9B:55:29:21:7D:7F:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ac899459-f0f1-3fb9-8e1d-b4e1b4a1749a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.124.0/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:32:f9:77:32:ed:97:43:5c:92:5d:44:ae:bd:18:88:ec:76: 52:ec:b6:d6:dd:3a:a6:0b:80:55:19:af:71:9b:21:e3:4a:c7: 99:c7:58:73:c5:82:b8:c4:0b:16:5e:6a:c8:0d:a5:10:57:7e: d7:9f:b5:2d:35:33:a0:21:23:f6:85:a4:19:a4:ff:09:3c:93: 24:13:7d:06:01:9b:dc:73:00:b3:47:ab:3d:50:44:7c:fd:13: 7c:ad:68:99:a0:51:32:5d:1d:5a:4c:91:1c:c0:f2:0e:95:26: bb:01:f2:2c:8a:05:4f:d3:08:05:48:55:8b:a1:cb:85:1d:d7: 11:31:0b:ac:2a:19:77:bc:72:2c:59:12:f0:47:4b:f4:be:a5: 7e:71:46:2e:10:bb:a4:b3:36:be:44:bd:ca:34:eb:38:74:fe: b0:2f:99:f7:f2:f0:b9:b6:b7:6f:70:d8:ff:89:24:4e:bd:84: 9c:a1:ad:a9:21:31:55:69:28:18:b1:f5:6e:05:8b:15:b9:83: e2:63:3a:43:a1:73:bb:b3:eb:0f:6a:7f:ad:21:05:17:1c:28: 10:27:b3:30:57:84:7e:5b:4e:0b:f7:9e:bf:b7:75:c2:b1:f1: 93:f1:d8:33:0e:2b:68:f7:59:23:43:c9:ca:e7:71:9b:50:6c: ed:53:93:0a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpc/JN+anviOXF8hAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZTE5ZTQyNWQtMWIzNy00NzViLThlMmItNTAxZTYzNDU2ZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhGQlMIf8YZ2rREoZ3KUHVcx4zbRwSH0vKQB ByfYdG/Aprf1Hv7bmJOy1hJ1VSaSOux8J+Vuji6JGZUEvQjYiFx6Cra4xpT5s0K7 olwU5KY4PECLO0oO1r9IclyfIKNRMpBWwDNlNY6lrbSeefodLy0HD8ozMB+E3otD dQ2EcO/1rQqY6GzDUyhv3Q6l0K3IBtnL3iRPnvkFY/sBA+6b3JJkJZrq67MVVP+x FfdlwCT1f/VEF7PC1lp8T37ylryCl9Bl/CY+5+bEzhbfiYT7+hFGsAWW/8uKx/zn 3OaBmsZ3/vO0T7Skc1Di2rwGFgfVzHxDdGkj65MJE0JydM+n8QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIL/Aggg5g88/333Nm2bVSkhfX+tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYWM4OTk0NTktZjBmMS0z ZmI5LThlMWQtYjRlMWI0YTE3NDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFrG98ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCpMvl3Mu2XQ1ySXUSuvRiI7HZS7LbW3TqmC4BVGa9xmyHjSseZx1hz xYK4xAsWXmrIDaUQV37Xn7UtNTOgISP2haQZpP8JPJMkE30GAZvccwCzR6s9UER8 /RN8rWiZoFEyXR1aTJEcwPIOlSa7AfIsigVP0wgFSFWLocuFHdcRMQusKhl3vHIs WRLwR0v0vqV+cUYuELuksza+RL3KNOs4dP6wL5n38vC5trdvcNj/iSROvYScoa2p ITFVaSgYsfVuBYsVuYPiYzpDoXO7s+sPan+tIQUXHCgQJ7MwV4R+W04L956/t3XC sfGT8dgzDito91kjQ8nK53GbUGztU5MK -----END CERTIFICATE-----Generated at Tue Jul 1 13:18:25 2025 by rpki-client