$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1693deb8-1531-33fd-925a-247e8cd7c80d.roa File: 1693deb8-1531-33fd-925a-247e8cd7c80d.roa (raw, json) Hash identifier: X9x+qDQmnk8E2X2Tm+Cy4PNxwE597bL40UDJbdgWoJc= Subject key identifier: 92:8F:59:0A:71:32:BB:36:E4:E9:1B:B7:B1:C3:FF:FE:67:5D:C7:0B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AF0F1404BCFE2FF9DED4F4940 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1693deb8-1531-33fd-925a-247e8cd7c80d.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 212238 IP address blocks: 172.111.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:40:4b:cf:e2:ff:9d:ed:4f:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=e3945d30-b9f9-4c66-a5de-1c8dc4198d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:75:43:91:fc:e0:6f:cb:cd:05:ce:fd:db:c0: 01:42:b1:b8:a4:36:5f:27:ea:d0:00:a4:f2:38:7b: eb:d8:40:27:94:d0:9c:ef:87:9e:fd:6a:24:b8:b8: ac:f6:31:d5:31:5a:f0:d1:f4:06:de:53:5e:ab:4e: a1:a3:78:56:a4:40:42:f8:c8:2c:06:8b:a1:31:ff: c5:df:1b:f6:31:86:03:a2:45:2d:24:f9:57:75:7c: a0:e7:52:3c:98:8a:e4:4e:e7:d6:e4:f1:5a:38:56: d5:ab:5d:5e:56:f4:75:dd:80:67:6c:f5:cf:03:5d: ec:51:1d:d4:69:d9:95:94:f7:d1:73:03:1f:4b:2a: ed:56:9e:dd:2d:29:45:a9:4a:a4:a1:05:6d:2f:37: 3e:58:33:68:eb:b8:02:cd:30:28:b3:98:0a:55:ee: f5:4c:b8:4b:3d:91:ff:ef:02:eb:a9:6c:4d:e9:94: c9:9e:c7:ce:b2:65:9a:a5:d1:59:ff:ee:69:67:84: eb:65:16:d0:5e:51:54:d5:97:da:d6:85:e2:38:b2: fd:01:ba:5b:5b:22:8f:80:15:22:b1:c8:cb:e6:4e: e5:6c:f3:cb:31:43:8a:46:27:c6:48:e8:2e:6c:ce: 1b:83:51:2f:ec:33:83:23:0e:c6:ed:16:23:12:f8: ae:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8F:59:0A:71:32:BB:36:E4:E9:1B:B7:B1:C3:FF:FE:67:5D:C7:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1693deb8-1531-33fd-925a-247e8cd7c80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:40:06:5d:58:0e:07:3c:8f:76:18:62:b5:6b:a6:c4:8c:59: cb:c5:c1:e1:39:55:70:98:ff:8c:9d:2b:24:b1:27:43:ef:50: 4d:7a:3f:e4:31:9d:40:32:9c:0c:06:2a:08:3e:40:bd:20:90: 71:54:bb:6d:5d:03:99:b7:a4:9d:39:2c:5e:73:65:4c:ba:ac: f9:2b:42:22:17:f5:5b:dd:7b:0d:00:39:87:73:16:e7:ca:2d: 70:3c:51:db:12:b5:91:c7:ef:92:f4:de:34:dc:10:cc:30:30: 47:5e:8d:66:9f:3a:4b:e7:f8:49:a2:57:bb:8f:2e:66:7e:f8: c9:f8:d3:f2:1c:48:3e:6e:92:06:83:65:4f:b3:90:28:09:49: d4:f3:05:d7:89:69:b5:8e:75:8f:da:f3:f9:ee:7a:7a:ec:65: d6:f9:14:9c:1b:c7:46:04:67:ce:89:32:bf:03:90:a6:d9:08: 26:7c:b2:b1:af:49:09:cc:58:da:e9:06:d2:cf:97:42:1b:18: 8c:ec:1c:05:de:47:81:8d:22:15:87:93:b9:e3:55:7b:cd:c5: cc:12:52:59:a5:1c:6b:81:ef:a7:41:ca:ab:54:df:c2:1b:c8: 03:e3:cd:b4:f9:8e:5b:74:18:e0:da:23:5d:48:c0:88:a9:12: 80:b5:bb:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UBLz+L/ne1PSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZTM5NDVkMzAtYjlmOS00YzY2LWE1ZGUtMWM4ZGM0MTk4ZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3VDkfzgb8vNBc7928ABQrG4pDZfJ+rQAKTy OHvr2EAnlNCc74ee/WokuLis9jHVMVrw0fQG3lNeq06ho3hWpEBC+MgsBouhMf/F 3xv2MYYDokUtJPlXdXyg51I8mIrkTufW5PFaOFbVq11eVvR13YBnbPXPA13sUR3U admVlPfRcwMfSyrtVp7dLSlFqUqkoQVtLzc+WDNo67gCzTAos5gKVe71TLhLPZH/ 7wLrqWxN6ZTJnsfOsmWapdFZ/+5pZ4TrZRbQXlFU1Zfa1oXiOLL9AbpbWyKPgBUi scjL5k7lbPPLMUOKRifGSOgubM4bg1Ev7DODIw7G7RYjEviuyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKPWQpxMrs25Okbt7HD//5nXccLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTY5M2RlYjgtMTUzMS0z M2ZkLTkyNWEtMjQ3ZThjZDdjODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9ABl1YDgc8j3YYYrVrpsSMWcvFweE5VXCY/4ydKySxJ0PvUE16P+Qx nUAynAwGKgg+QL0gkHFUu21dA5m3pJ05LF5zZUy6rPkrQiIX9Vvdew0AOYdzFufK LXA8UdsStZHH75L03jTcEMwwMEdejWafOkvn+EmiV7uPLmZ++Mn40/IcSD5ukgaD ZU+zkCgJSdTzBdeJabWOdY/a8/nuenrsZdb5FJwbx0YEZ86JMr8DkKbZCCZ8srGv SQnMWNrpBtLPl0IbGIzsHAXeR4GNIhWHk7njVXvNxcwSUlmlHGuB76dByqtU38Ib yAPjzbT5jlt0GODaI11IwIipEoC1u/I= -----END CERTIFICATE-----Generated at Sat Aug 23 14:31:18 2025 by rpki-client