$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/349f4f01-600a-32e9-bbea-35b40ce2bd26.roa File: 349f4f01-600a-32e9-bbea-35b40ce2bd26.roa (raw, json) Hash identifier: cBJ9z+NyhrfOD0eTb8rnQLvS2GVpzqX+H9BbgHT3RXo= Subject key identifier: 89:43:C2:87:51:71:F1:0E:2E:40:53:BB:78:74:E4:D4:C1:DB:B8:D1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B797D6B8A0E171160B3CD5200 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/349f4f01-600a-32e9-bbea-35b40ce2bd26.roa Signing time: Fri 10 Oct 2025 10:53:13 +0000 ROA not before: Fri 10 Oct 2025 10:53:13 +0000 ROA not after: Thu 08 Jan 2026 11:53:13 +0000 asID: 11972 IP address blocks: 172.111.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:7d:6b:8a:0e:17:11:60:b3:cd:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 10:53:13 2025 GMT Not After : Jan 8 11:53:13 2026 GMT Subject: CN=1af1d334-5869-4f83-a662-269139851d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:99:5c:74:f9:4b:75:5c:62:b6:0e:1e:b6:13: 3a:61:53:2f:dd:ac:73:ec:5b:86:10:31:26:23:44: 24:96:c6:c2:3e:4c:86:a7:66:0a:eb:fe:89:1a:f2: f5:d3:37:00:66:a0:3b:5f:ff:46:91:13:e1:95:bc: 01:b4:f6:89:11:8f:71:c4:03:60:98:0e:39:ee:5e: e8:6a:fb:b0:fd:b9:ed:cb:3d:1f:8b:bd:d0:5c:45: cc:04:6d:bc:56:7b:3b:17:f9:02:fb:9d:ae:d2:81: 38:ea:f2:d3:00:88:b0:ee:56:41:b7:30:53:ef:31: ad:f2:ce:18:00:ca:9c:d0:39:b2:4a:fe:92:af:c0: d1:8b:bb:4e:ce:9f:68:39:d3:ce:93:06:4e:ee:c7: 06:f8:78:fa:cc:43:b1:64:c6:6f:61:ca:08:1f:45: 1f:4b:aa:31:1a:ef:55:a8:98:75:e0:37:20:31:fd: 6d:c6:42:25:7a:6a:76:a3:a5:8c:89:0e:96:b9:50: ef:0b:81:0f:bb:f2:b4:03:eb:4f:52:93:1f:e8:0a: 48:d1:87:9d:4a:a2:9b:87:26:b2:f7:6f:94:4d:0e: 6e:75:f7:f1:a2:e1:be:cf:4d:90:23:de:4d:2d:b8: 97:c2:13:a2:51:74:1a:7e:11:9f:b3:29:30:14:af: 9b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:43:C2:87:51:71:F1:0E:2E:40:53:BB:78:74:E4:D4:C1:DB:B8:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/349f4f01-600a-32e9-bbea-35b40ce2bd26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:bc:ee:8a:36:c9:fa:69:5e:a6:e0:9e:d4:f0:e6:cd:bf:d5: 61:19:a2:9b:f8:a8:45:88:47:1f:8d:92:40:65:55:5e:c8:e6: 49:ff:57:56:25:1c:0b:43:f6:1f:c9:9a:bf:74:f1:2f:e8:19: a2:ce:83:0f:c4:e9:35:c9:2e:5f:71:3d:ef:22:03:4a:6e:f8: e0:71:4a:9d:83:55:c2:d3:9c:1c:bd:ae:b4:2d:3f:af:06:34: f3:83:a8:20:81:2c:80:88:f6:08:70:74:94:f8:6a:70:90:b6: a6:9b:d8:76:db:4a:23:43:c1:18:df:60:23:11:e4:20:79:03: 91:2d:70:37:00:29:1f:87:8d:8e:12:fc:cf:10:33:eb:3f:c8: 03:cb:33:1c:7b:01:c9:8f:b3:47:20:8c:14:c8:8f:31:72:3c: e9:26:76:94:37:20:5a:f4:6e:d8:f1:20:9a:cf:98:f7:d7:f2: 06:13:c0:91:1a:c1:17:55:3e:ee:ff:1a:16:dc:71:30:b9:3a: 95:04:30:6e:8a:eb:b9:1b:d5:2a:e1:84:7d:2d:92:24:75:ba: 9f:33:a2:c6:5b:68:68:17:8c:0e:04:6a:99:0e:69:32:4b:37: c5:6e:58:90:07:e7:dc:32:4b:73:11:1c:5b:87:32:51:36:37: d2:84:8b:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5fWuKDhcRYLPNUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxMDEwNTMxM1oXDTI2MDEwODExNTMxM1owLzEtMCsGA1UEAxMk MWFmMWQzMzQtNTg2OS00ZjgzLWE2NjItMjY5MTM5ODUxZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZlcdPlLdVxitg4ethM6YVMv3axz7FuGEDEm I0QklsbCPkyGp2YK6/6JGvL10zcAZqA7X/9GkRPhlbwBtPaJEY9xxANgmA457l7o avuw/bntyz0fi73QXEXMBG28Vns7F/kC+52u0oE46vLTAIiw7lZBtzBT7zGt8s4Y AMqc0DmySv6Sr8DRi7tOzp9oOdPOkwZO7scG+Hj6zEOxZMZvYcoIH0UfS6oxGu9V qJh14DcgMf1txkIlemp2o6WMiQ6WuVDvC4EPu/K0A+tPUpMf6ApI0YedSqKbhyay 92+UTQ5udffxouG+z02QI95NLbiXwhOiUXQafhGfsykwFK+b3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlDwodRcfEOLkBTu3h05NTB27jRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzQ5ZjRmMDEtNjAwYS0z MmU5LWJiZWEtMzViNDBjZTJiZDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADq87oo2yfppXqbgntTw5s2/1WEZopv4qEWIRx+NkkBlVV7I5kn/V1Yl HAtD9h/Jmr908S/oGaLOgw/E6TXJLl9xPe8iA0pu+OBxSp2DVcLTnBy9rrQtP68G NPODqCCBLICI9ghwdJT4anCQtqab2HbbSiNDwRjfYCMR5CB5A5EtcDcAKR+HjY4S /M8QM+s/yAPLMxx7AcmPs0cgjBTIjzFyPOkmdpQ3IFr0btjxIJrPmPfX8gYTwJEa wRdVPu7/GhbccTC5OpUEMG6K67kb1SrhhH0tkiR1up8zosZbaGgXjA4EapkOaTJL N8VuWJAH59wyS3MRHFuHMlE2N9KEi30= -----END CERTIFICATE-----Generated at Mon Oct 20 15:18:00 2025 by rpki-client