$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28baacda-6a68-3c8f-b393-d75be1456004.roa File: 28baacda-6a68-3c8f-b393-d75be1456004.roa (raw, json) Hash identifier: rQaEz1YdjRbw1poNk3AxNz5GZ8bwyzDrDnAzKMpeTqA= Subject key identifier: CF:92:57:51:91:3F:94:3A:64:A3:BF:B9:A3:12:0A:07:14:95:4D:6F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AF0F14030B9374BF2712AC800 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28baacda-6a68-3c8f-b393-d75be1456004.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 212238 IP address blocks: 172.111.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:40:30:b9:37:4b:f2:71:2a:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=ef4ac637-8dad-4fca-a5b2-460bc99badc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2e:3b:38:3d:bc:6d:b3:1e:61:2e:18:dd:b2: c2:f7:b0:e2:44:06:95:27:6e:2c:5a:15:d3:29:33: 8d:38:78:43:78:05:ae:7f:5b:ad:45:dd:78:e5:c7: ed:ae:ef:32:6b:a8:39:bc:7b:2c:ec:dd:f8:b7:fe: ef:13:f5:0e:df:2a:52:4f:89:09:ff:b6:31:3d:b7: 48:b0:a9:27:e0:c0:39:d0:fd:c7:5c:64:8a:e1:58: f1:61:16:de:57:7a:36:6b:e6:58:c0:68:bb:a4:24: 5b:20:5b:2d:1d:07:5c:fe:6c:f0:5b:28:36:ca:d2: ea:5b:b3:97:11:ec:ef:c5:60:18:d1:2a:7c:d2:44: 6c:21:ad:b5:ca:e5:61:e7:0a:ab:43:42:5f:01:6c: c7:70:e2:4b:b3:ad:a8:ab:c4:8b:89:af:86:83:05: e7:82:4f:be:ad:63:3a:9e:6e:b3:b6:b6:85:b3:db: 0e:59:e7:c8:4b:a8:b2:47:e7:85:bb:a3:85:e2:0c: e7:a1:c9:06:f1:98:3b:f4:28:9f:6d:b1:66:c5:8c: df:d0:68:eb:5e:df:19:09:70:f7:5a:e2:3b:e7:f3: fe:e5:17:f9:16:e0:68:c8:48:ed:fb:39:08:7b:f4: 09:41:ca:23:c8:3b:32:78:5e:4a:93:d8:75:08:94: f6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:92:57:51:91:3F:94:3A:64:A3:BF:B9:A3:12:0A:07:14:95:4D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28baacda-6a68-3c8f-b393-d75be1456004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:19:1e:0d:0e:b3:87:ee:53:fd:75:eb:e4:89:df:0b:bc:fe: 79:7d:84:e3:34:ce:e5:ea:e0:82:86:be:dd:0b:39:1b:d5:8e: 37:24:09:14:5d:ea:5d:61:37:7b:6c:44:be:cc:6b:5b:b7:d3: 0f:f8:76:6d:0a:8c:c1:1a:7a:5c:43:59:39:9b:26:59:5c:18: 33:13:ce:fb:f7:00:49:c9:8a:bb:6b:39:c4:b0:9d:48:aa:d8: f8:b5:12:93:fb:60:5a:03:82:6c:9d:af:5b:da:d0:3e:80:88: d2:6d:2e:74:2f:cc:87:93:4f:27:8a:93:fd:5e:d0:b3:86:99: 59:cc:48:db:12:8b:ed:ce:b7:fa:06:84:ef:31:23:fe:b8:00: a9:46:a7:08:11:b1:dc:3c:d1:66:3b:d4:df:3c:05:5b:fc:e6: 1b:9f:cd:5f:e3:ac:9e:e3:37:cd:f8:b3:ad:f7:30:38:f0:d9: 48:c0:51:f7:0e:95:56:a8:6c:bd:17:bc:7f:ed:02:93:d5:b9: 50:11:a8:1e:5a:49:5d:c5:4f:ff:a3:ed:8b:98:3c:fe:dc:56: 97:b0:64:49:b2:9d:e5:61:0d:c0:eb:dc:0b:9f:b3:32:db:0b: 83:47:31:51:f5:69:71:6b:bc:16:96:5c:6d:40:08:64:52:88: c3:00:03:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UAwuTdL8nEqyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZWY0YWM2MzctOGRhZC00ZmNhLWE1YjItNDYwYmM5OWJhZGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC47OD28bbMeYS4Y3bLC97DiRAaVJ24sWhXT KTONOHhDeAWuf1utRd145cftru8ya6g5vHss7N34t/7vE/UO3ypST4kJ/7YxPbdI sKkn4MA50P3HXGSK4VjxYRbeV3o2a+ZYwGi7pCRbIFstHQdc/mzwWyg2ytLqW7OX EezvxWAY0Sp80kRsIa21yuVh5wqrQ0JfAWzHcOJLs62oq8SLia+GgwXngk++rWM6 nm6ztraFs9sOWefIS6iyR+eFu6OF4gznockG8Zg79CifbbFmxYzf0GjrXt8ZCXD3 WuI75/P+5Rf5FuBoyEjt+zkIe/QJQcojyDsyeF5Kk9h1CJT2TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+SV1GRP5Q6ZKO/uaMSCgcUlU1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjhiYWFjZGEtNmE2OC0z YzhmLWIzOTMtZDc1YmUxNDU2MDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQZHg0Os4fuU/116+SJ3wu8/nl9hOM0zuXq4IKGvt0LORvVjjckCRRd 6l1hN3tsRL7Ma1u30w/4dm0KjMEaelxDWTmbJllcGDMTzvv3AEnJirtrOcSwnUiq 2Pi1EpP7YFoDgmydr1va0D6AiNJtLnQvzIeTTyeKk/1e0LOGmVnMSNsSi+3Ot/oG hO8xI/64AKlGpwgRsdw80WY71N88BVv85hufzV/jrJ7jN834s633MDjw2UjAUfcO lVaobL0XvH/tApPVuVARqB5aSV3FT/+j7YuYPP7cVpewZEmyneVhDcDr3AufszLb C4NHMVH1aXFrvBaWXG1ACGRSiMMAA2M= -----END CERTIFICATE-----Generated at Sat Aug 23 14:24:15 2025 by rpki-client