$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/48afdee3-6323-3856-b569-6a0bad0efb94.roa File: 48afdee3-6323-3856-b569-6a0bad0efb94.roa (raw, json) Hash identifier: QxwadGvdKjbqNX53nTz4pcHhGXoC9BLiUhBX0Vucf7Y= Subject key identifier: D3:3D:9D:97:D5:40:D7:BA:16:28:56:43:12:3B:46:28:1C:26:6B:A6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B6A61EE8B2284062D116D5300 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/48afdee3-6323-3856-b569-6a0bad0efb94.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 16509 IP address blocks: 172.111.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:ee:8b:22:84:06:2d:11:6d:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=b314d69f-7630-4bda-850a-dcc535af1861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fe:fb:fc:a0:d1:9a:78:86:4f:b4:d6:ec:5c: 0a:fd:9f:39:f9:09:4a:c3:4f:9a:24:fb:3e:55:5b: a4:8a:e5:df:c1:0f:cb:66:2f:6e:45:8a:c0:9a:66: 3d:00:1d:1a:2e:d1:f5:6d:b1:db:d0:39:7d:50:2d: 47:b7:44:b0:66:50:40:3e:38:db:91:1b:9c:d0:ec: 1b:42:c3:ac:5d:43:f8:d3:74:ae:64:f9:d1:15:2c: 21:14:34:66:b1:d4:8c:da:9f:36:32:96:a6:55:5f: 4d:32:fd:6a:6c:ba:af:a5:29:a2:19:d3:40:da:ad: a6:a2:2b:65:a8:6a:32:36:1c:44:4d:39:0d:6a:15: 4d:e9:7c:be:ab:b2:e1:28:fb:25:fd:69:98:a1:6e: 39:53:a1:f8:80:44:36:ac:0f:04:cc:7f:c4:03:a6: 1c:33:fc:e8:ff:97:ae:44:5f:17:07:b7:df:a0:20: 2d:12:8b:8e:0e:46:cc:45:72:53:a5:4d:e5:ef:e5: e4:6b:34:bd:b8:cd:69:d8:52:52:cf:b0:06:4a:6d: 0b:65:09:09:05:44:94:3d:b5:8b:fe:6c:e4:bb:ed: b3:2d:46:53:cd:02:14:eb:d0:95:70:2d:53:2a:4f: 38:b8:3b:a9:24:fa:44:eb:15:d7:73:3c:bb:1d:58: 3d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3D:9D:97:D5:40:D7:BA:16:28:56:43:12:3B:46:28:1C:26:6B:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/48afdee3-6323-3856-b569-6a0bad0efb94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:53:ce:1c:da:77:54:a0:d4:1d:aa:34:1f:80:9e:fc:19:ee: 48:67:10:56:e9:45:c5:e7:0a:8f:9f:30:47:74:59:5b:09:a6: d1:53:4e:ce:67:f8:30:6a:bd:b9:47:1e:9c:43:4f:cf:8c:52: a5:39:87:47:41:31:fd:84:af:81:1e:b2:7d:de:b4:00:b6:0a: 51:42:cd:83:d8:0e:d2:94:45:a0:72:b7:48:a1:a3:04:36:ba: e1:cb:e1:b7:32:c6:2c:49:08:cc:ae:a9:08:2d:13:45:b4:79: e8:d3:85:f3:a7:9e:66:e5:b4:31:4d:d4:fc:b3:1a:91:03:6f: e1:e9:a0:7b:93:49:b2:48:6a:83:0a:09:16:d3:54:1d:26:f5: 0d:90:bb:07:b2:4d:2d:b1:49:c4:3a:c7:b6:32:70:c8:55:7b: b1:c0:23:ba:16:b8:73:d2:75:d1:4c:fb:4c:8d:9f:19:fe:d6: 59:53:d5:42:ca:68:74:8b:4d:e3:55:57:9f:37:4f:ac:09:bc: aa:f9:da:82:1e:13:71:70:76:fb:21:b1:5a:da:29:50:a9:b6: cb:b3:4c:d6:d5:69:a7:1d:b9:41:20:58:b3:51:82:9e:4e:b4: 86:d3:b8:07:96:5a:d6:64:eb:20:4d:90:b5:c4:b5:07:b4:c6: 87:25:49:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYe6LIoQGLRFtUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YjMxNGQ2OWYtNzYzMC00YmRhLTg1MGEtZGNjNTM1YWYxODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/77/KDRmniGT7TW7FwK/Z85+QlKw0+aJPs+ VVukiuXfwQ/LZi9uRYrAmmY9AB0aLtH1bbHb0Dl9UC1Ht0SwZlBAPjjbkRuc0Owb QsOsXUP403SuZPnRFSwhFDRmsdSM2p82MpamVV9NMv1qbLqvpSmiGdNA2q2moitl qGoyNhxETTkNahVN6Xy+q7LhKPsl/WmYoW45U6H4gEQ2rA8EzH/EA6YcM/zo/5eu RF8XB7ffoCAtEouODkbMRXJTpU3l7+XkazS9uM1p2FJSz7AGSm0LZQkJBUSUPbWL /mzku+2zLUZTzQIU69CVcC1TKk84uDupJPpE6xXXczy7HVg9iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNM9nZfVQNe6FihWQxI7RigcJmumMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDhhZmRlZTMtNjMyMy0z ODU2LWI1NjktNmEwYmFkMGVmYjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVTzhzad1Sg1B2qNB+AnvwZ7khnEFbpRcXnCo+fMEd0WVsJptFTTs5n +DBqvblHHpxDT8+MUqU5h0dBMf2Er4Eesn3etAC2ClFCzYPYDtKURaByt0ihowQ2 uuHL4bcyxixJCMyuqQgtE0W0eejThfOnnmbltDFN1PyzGpEDb+HpoHuTSbJIaoMK CRbTVB0m9Q2QuweyTS2xScQ6x7YycMhVe7HAI7oWuHPSddFM+0yNnxn+1llT1ULK aHSLTeNVV583T6wJvKr52oIeE3FwdvshsVraKVCptsuzTNbVaacduUEgWLNRgp5O tIbTuAeWWtZk6yBNkLXEtQe0xoclST0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:56:43 2025 by rpki-client