$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e874fe40-45b2-3a5d-b03a-928e96bb9724.roa File: e874fe40-45b2-3a5d-b03a-928e96bb9724.roa (raw, json) Hash identifier: 1NIlHNXuqFVoSmZudjj929a+/58tRMT0MiKjBtdegnk= Subject key identifier: A8:7C:4A:B8:90:F4:F2:77:B5:32:C9:58:05:E8:57:4C:C2:CC:3A:D5 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584A331B0B404214D7868BE4BDC0 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e874fe40-45b2-3a5d-b03a-928e96bb9724.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 54113 IP address blocks: 172.111.117.0/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1b:0b:40:42:14:d7:86:8b:e4:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=8f073cc8-dfba-4449-a074-8d0d331c4046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a1:17:be:6a:86:24:4e:43:f4:36:9f:26:c1: 7f:32:18:71:0d:53:fc:ab:c4:4b:a6:b2:47:6c:80: 90:8e:ce:83:5a:3b:26:ae:81:0c:78:ef:63:c1:88: 36:4a:23:a1:a3:88:92:76:d8:13:42:56:ca:f8:2c: e2:6b:8e:e6:72:14:e6:50:66:8a:70:89:91:c1:b1: b1:90:22:05:19:a1:2b:ac:13:04:7a:0f:00:c1:a4: af:51:35:f0:d6:a2:44:74:ad:26:2f:66:2b:53:2d: 30:03:70:fe:7d:21:a1:ee:2c:77:95:cd:c0:96:ac: b1:8c:0e:81:a6:e8:90:dc:12:b5:34:b7:79:bf:46: 5a:c7:6e:2b:c6:32:f4:fb:33:87:e6:40:39:5f:17: c0:4c:9e:b3:ab:8d:15:bd:09:ba:3e:54:b5:2d:3a: 7d:f6:36:d8:75:15:fb:04:cb:03:58:57:75:aa:af: c7:3b:32:27:8c:a6:e3:5b:a3:73:04:4c:f2:7b:7f: ac:3a:63:58:29:55:e6:cb:2c:a5:3b:d7:e9:a1:a1: 55:ad:b4:0b:7c:27:cb:03:52:38:e4:df:02:08:5e: aa:1b:4b:8d:68:39:4c:cf:fc:91:1a:65:c6:34:bf: ba:8f:38:5d:0d:81:92:f9:13:81:85:38:9c:6e:0b: 11:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7C:4A:B8:90:F4:F2:77:B5:32:C9:58:05:E8:57:4C:C2:CC:3A:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e874fe40-45b2-3a5d-b03a-928e96bb9724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.117.0/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:6b:34:e6:0e:49:88:c8:d8:09:32:5b:48:62:b4:a4:05:86: 7e:ea:d1:9d:1c:29:73:82:04:80:ae:cf:79:81:cf:f9:52:82: 96:27:de:3e:c2:bc:3f:a2:17:83:5a:f5:de:2a:41:35:cb:8c: a2:b8:0c:77:11:ec:24:02:ba:9d:b3:e7:79:50:da:4b:15:fb: 6a:b6:6d:76:ff:8d:80:c0:e8:cf:f6:c9:cb:93:48:c0:26:fb: 7c:b2:f3:31:2a:f8:d1:1d:59:97:21:0c:f4:a8:9d:e8:21:c4: da:42:07:80:03:37:c1:02:ad:62:8f:f9:e5:c7:ff:74:a1:ed: f2:51:0e:c9:1f:03:67:5e:04:75:2e:d4:fc:04:95:a1:f4:c1: 51:db:38:b9:a0:d5:5b:ae:b0:ae:d1:ae:3e:a0:6c:a2:99:5e: 67:db:de:55:92:f6:ed:1f:3d:6a:77:b2:f0:62:63:ba:99:7f: 34:a9:18:2e:d9:0f:a1:ec:f2:2e:6c:54:ba:01:c5:65:ef:b8: e7:7a:cd:14:a0:1c:8b:a8:1c:79:e8:21:aa:82:b8:37:e8:c3: 7a:38:24:51:79:b8:d4:9e:6c:e7:5f:15:24:25:07:18:f5:06: 5f:f2:d7:72:44:0d:55:29:71:64:c8:d0:de:60:f1:a5:9a:b9: 6c:79:be:ef -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEozGwtAQhTXhovkvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk OGYwNzNjYzgtZGZiYS00NDQ5LWEwNzQtOGQwZDMzMWM0MDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqEXvmqGJE5D9DafJsF/MhhxDVP8q8RLprJH bICQjs6DWjsmroEMeO9jwYg2SiOho4iSdtgTQlbK+Czia47mchTmUGaKcImRwbGx kCIFGaErrBMEeg8AwaSvUTXw1qJEdK0mL2YrUy0wA3D+fSGh7ix3lc3AlqyxjA6B puiQ3BK1NLd5v0Zax24rxjL0+zOH5kA5XxfATJ6zq40VvQm6PlS1LTp99jbYdRX7 BMsDWFd1qq/HOzInjKbjW6NzBEzye3+sOmNYKVXmyyylO9fpoaFVrbQLfCfLA1I4 5N8CCF6qG0uNaDlMz/yRGmXGNL+6jzhdDYGS+ROBhTicbgsRNwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKh8SriQ9PJ3tTLJWAXoV0zCzDrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZTg3NGZlNDAtNDViMi0z YTVkLWIwM2EtOTI4ZTk2YmI5NzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUErG91ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCCazTmDkmIyNgJMltIYrSkBYZ+6tGdHClzggSArs95gc/5UoKWJ94+ wrw/oheDWvXeKkE1y4yiuAx3EewkArqds+d5UNpLFftqtm12/42AwOjP9snLk0jA Jvt8svMxKvjRHVmXIQz0qJ3oIcTaQgeAAzfBAq1ij/nlx/90oe3yUQ7JHwNnXgR1 LtT8BJWh9MFR2zi5oNVbrrCu0a4+oGyimV5n295VkvbtHz1qd7LwYmO6mX80qRgu 2Q+h7PIubFS6AcVl77jnes0UoByLqBx56CGqgrg36MN6OCRRebjUnmznXxUkJQcY 9QZf8tdyRA1VKXFkyNDeYPGlmrlseb7v -----END CERTIFICATE-----Generated at Tue Jul 1 15:03:28 2025 by rpki-client