$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b9309e3-07db-3044-81aa-b836a369a052.roa File: 0b9309e3-07db-3044-81aa-b836a369a052.roa (raw, json) Hash identifier: lfZaNaS2aEUUyUEi48KeBcD8ETIrSmXyLP2zzBuAA5s= Subject key identifier: 28:4A:E8:32:AD:22:AA:6A:A8:0F:FD:7E:EB:43:7A:E2:BA:42:AE:31 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AF0F1413D99CDD1F8FDEC2800 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b9309e3-07db-3044-81aa-b836a369a052.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 212238 IP address blocks: 172.111.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:41:3d:99:cd:d1:f8:fd:ec:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=a5fb8c64-6ace-4484-8ced-173e3ed9d0b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1d:4e:eb:30:cd:73:29:2b:ad:c0:39:b0:d6: b2:a2:ce:eb:d0:0f:24:fb:e7:b2:49:90:ea:2a:cc: 07:c9:4d:f7:20:30:2b:1f:f3:cd:a9:62:f0:74:06: 40:6d:08:db:e6:42:29:4c:2d:8f:13:b9:9e:ab:4c: 02:01:8f:2f:77:54:a6:98:24:23:31:33:ca:9c:1f: 45:16:42:dc:75:55:cd:f4:27:d0:29:67:57:03:98: 43:9a:d4:a3:43:de:63:0f:42:c2:9a:9c:07:7b:db: d9:02:49:18:28:4d:5d:ef:99:85:fe:cd:89:9b:87: 12:82:f5:4f:48:ff:17:f8:95:e1:23:0b:c3:c7:70: fa:a9:f3:8b:43:1a:b6:d9:ac:3b:91:47:77:c8:0c: 9c:c7:54:58:6b:48:85:b1:df:b4:fc:39:0b:e1:2c: 6f:39:18:04:75:a6:24:16:c1:cb:0c:ff:9e:96:86: 54:d9:8c:11:91:3e:f6:2d:66:10:24:08:e5:48:34: 89:99:01:70:44:01:6d:a6:34:6e:fa:60:c2:60:85: d5:b6:7d:33:c8:c6:62:36:62:83:5b:05:40:f0:a3: c8:ff:6d:33:6a:4a:2e:b1:80:12:67:18:c0:ac:b0: d2:ce:2a:0d:94:b9:63:4f:86:71:d1:c0:08:9f:8a: 7d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4A:E8:32:AD:22:AA:6A:A8:0F:FD:7E:EB:43:7A:E2:BA:42:AE:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b9309e3-07db-3044-81aa-b836a369a052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:7a:83:d6:61:3a:75:27:d1:83:b1:95:04:e4:51:01:ad:b4: 4e:a2:8b:df:6b:12:1d:1a:d5:01:9b:75:8a:10:33:3a:78:f5: 09:2e:7c:5c:ae:7b:4e:ff:25:b0:d3:f6:1d:78:1f:e6:3e:83: dd:6d:93:66:aa:bc:c4:93:32:b0:f7:bc:cb:c1:64:54:16:80: 1f:68:e2:16:00:71:4f:8f:ae:23:fb:e6:2d:6b:1b:38:9d:31: 92:fa:32:db:d8:99:b1:1f:c0:22:3e:4d:6d:b0:b3:51:7d:ac: b7:f0:80:c8:f0:a9:20:d0:d0:4a:61:55:da:0b:d2:5b:8f:7f: 1c:cf:b0:ea:08:3d:85:41:8d:ca:d4:4f:c2:ff:70:bb:a6:a8: fa:b0:c7:b9:45:5f:a2:19:31:53:33:f4:f0:63:d4:53:f8:2f: a4:67:92:19:bd:6c:08:cf:b8:bd:8e:48:5b:89:bd:d2:ff:ea: d5:54:7f:52:49:3b:b9:16:6e:bf:2c:09:4d:0f:7d:73:38:c8: c7:ae:2d:ba:98:bd:93:6c:c9:4e:0d:16:dc:fd:b1:14:89:ca: 5f:d3:81:f2:ad:02:bb:ed:de:4b:75:08:f6:b3:76:6c:70:b8: 37:53:f0:b5:22:c3:06:5c:94:79:10:90:95:ab:7d:bf:8e:a9: 21:3e:2a:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UE9mc3R+P3sKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YTVmYjhjNjQtNmFjZS00NDg0LThjZWQtMTczZTNlZDlkMGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB1O6zDNcykrrcA5sNayos7r0A8k++eySZDq KswHyU33IDArH/PNqWLwdAZAbQjb5kIpTC2PE7meq0wCAY8vd1SmmCQjMTPKnB9F FkLcdVXN9CfQKWdXA5hDmtSjQ95jD0LCmpwHe9vZAkkYKE1d75mF/s2Jm4cSgvVP SP8X+JXhIwvDx3D6qfOLQxq22aw7kUd3yAycx1RYa0iFsd+0/DkL4SxvORgEdaYk FsHLDP+eloZU2YwRkT72LWYQJAjlSDSJmQFwRAFtpjRu+mDCYIXVtn0zyMZiNmKD WwVA8KPI/20zakousYASZxjArLDSzioNlLljT4Zx0cAIn4p9vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChK6DKtIqpqqA/9futDeuK6Qq4xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGI5MzA5ZTMtMDdkYi0z MDQ0LTgxYWEtYjgzNmEzNjlhMDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB56g9ZhOnUn0YOxlQTkUQGttE6ii99rEh0a1QGbdYoQMzp49QkufFyu e07/JbDT9h14H+Y+g91tk2aqvMSTMrD3vMvBZFQWgB9o4hYAcU+PriP75i1rGzid MZL6MtvYmbEfwCI+TW2ws1F9rLfwgMjwqSDQ0EphVdoL0luPfxzPsOoIPYVBjcrU T8L/cLumqPqwx7lFX6IZMVMz9PBj1FP4L6Rnkhm9bAjPuL2OSFuJvdL/6tVUf1JJ O7kWbr8sCU0PfXM4yMeuLbqYvZNsyU4NFtz9sRSJyl/TgfKtArvt3kt1CPazdmxw uDdT8LUiwwZclHkQkJWrfb+OqSE+Kko= -----END CERTIFICATE-----Generated at Sat Aug 23 15:47:56 2025 by rpki-client