$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4bb37a6c-860d-3b0e-84c6-51847d2cc0e0.roa File: 4bb37a6c-860d-3b0e-84c6-51847d2cc0e0.roa (raw, json) Hash identifier: +u23SNfh2p82VBMECfsvfJx36NHSSAB8NnRHiPikxn4= Subject key identifier: 77:90:7E:F3:BF:6D:1B:72:51:78:19:0D:39:E3:A3:1D:DA:8E:39:95 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AEE269D984CAD9312C44710C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4bb37a6c-860d-3b0e-84c6-51847d2cc0e0.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 9009 IP address blocks: 172.111.211.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:9d:98:4c:ad:93:12:c4:47:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=6bd8014a-e95c-48f1-9b74-ef65a979d021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cc:00:c5:13:da:19:62:74:72:a4:ce:ac:7b: 0e:ab:c3:b3:cf:e2:e6:0a:36:bb:cb:82:18:5a:15: 0c:18:03:17:8e:54:9e:48:e6:3b:92:00:98:08:3a: 2f:8b:5c:73:66:98:bf:1e:a6:66:52:a6:fc:c2:b4: 86:5d:29:d8:50:d7:f0:60:ea:55:1b:b9:14:e2:04: f1:3b:f1:bb:cc:a1:ed:f1:a8:df:e8:8b:da:f7:71: bf:30:d0:a1:4d:a7:c3:a4:4e:43:18:b5:00:14:59: aa:2b:df:99:b8:04:cc:9a:a0:bb:eb:70:0f:ae:74: 6b:a1:38:49:8c:41:a3:21:0f:0b:e1:81:a0:a7:47: a2:56:27:2c:4a:da:2b:5c:98:4c:a8:5f:12:ca:8d: ca:cd:80:bd:68:b8:91:1c:36:2b:23:5e:88:a5:06: ed:34:1c:09:54:56:a3:04:e4:a2:1c:15:6e:92:48: 9b:b5:4c:07:68:7b:44:f7:5b:11:f8:60:25:f6:1d: 99:94:51:51:a7:66:8a:ec:f9:a6:6c:ac:bd:d4:e9: 49:e3:2d:28:4c:67:09:78:6b:c4:87:b6:a1:ae:e7: 3f:1a:02:dd:4c:05:2b:6e:60:00:89:18:9c:ee:5d: 7a:43:51:dd:0d:20:42:81:e9:42:47:b6:bf:49:3f: 55:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:90:7E:F3:BF:6D:1B:72:51:78:19:0D:39:E3:A3:1D:DA:8E:39:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4bb37a6c-860d-3b0e-84c6-51847d2cc0e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.211.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:c5:5f:6f:97:3d:f3:64:b3:47:4c:7d:c5:25:ba:3e:e8:40: 74:75:a2:3c:d0:78:5c:83:03:4f:99:d4:30:e2:73:f6:28:05: 17:58:cc:fd:11:99:e2:0e:a8:be:9a:83:ed:f3:bd:5c:9a:de: ae:81:ea:8b:63:eb:7f:9b:c8:19:01:a7:7a:32:cd:32:4d:a4: 3c:d9:8b:e5:5e:61:12:4e:48:f8:45:0d:01:e7:f8:db:6e:98: cf:50:85:d1:17:b2:c3:3a:ac:98:7e:a9:8d:5d:1b:74:4e:2b: 06:16:49:a8:3c:b6:6d:7c:50:26:4c:41:e1:df:a9:d3:32:a6: 9e:3a:8d:6d:dc:80:db:5a:41:4c:c8:7c:54:56:f9:52:12:36: 00:1b:ba:a4:6b:0f:a9:3e:f5:93:6d:c3:6e:57:c0:19:d6:c8: 66:cf:14:37:e8:5a:eb:30:84:52:3d:be:fc:cb:4e:db:3c:70: 2f:ce:34:54:af:e3:50:2c:7e:b0:de:e7:5b:8f:f6:42:50:08: 09:52:85:9c:f1:eb:be:73:2a:ad:f2:3d:47:22:9e:ec:6f:1a: 68:52:f2:13:e7:f2:36:0c:02:2c:30:ef:8d:bf:18:a4:33:21: a5:fc:9b:5f:96:55:75:8f:ab:3f:d0:34:17:d2:6a:c3:48:c7: c0:43:52:b4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEruJp2YTK2TEsRHEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk NmJkODAxNGEtZTk1Yy00OGYxLTliNzQtZWY2NWE5NzlkMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiswAxRPaGWJ0cqTOrHsOq8Ozz+LmCja7y4IY WhUMGAMXjlSeSOY7kgCYCDovi1xzZpi/HqZmUqb8wrSGXSnYUNfwYOpVG7kU4gTx O/G7zKHt8ajf6Iva93G/MNChTafDpE5DGLUAFFmqK9+ZuATMmqC763APrnRroThJ jEGjIQ8L4YGgp0eiVicsStorXJhMqF8Syo3KzYC9aLiRHDYrI16IpQbtNBwJVFaj BOSiHBVukkibtUwHaHtE91sR+GAl9h2ZlFFRp2aK7PmmbKy91OlJ4y0oTGcJeGvE h7ahruc/GgLdTAUrbmAAiRic7l16Q1HdDSBCgelCR7a/ST9VNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHeQfvO/bRtyUXgZDTnjox3ajjmVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGJiMzdhNmMtODYwZC0z YjBlLTg0YzYtNTE4NDdkMmNjMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG/TADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBuxV9vlz3zZLNHTH3FJbo+6EB0daI80HhcgwNPmdQw4nP2KAUXWMz9 EZniDqi+moPt871cmt6ugeqLY+t/m8gZAad6Ms0yTaQ82YvlXmESTkj4RQ0B5/jb bpjPUIXRF7LDOqyYfqmNXRt0TisGFkmoPLZtfFAmTEHh36nTMqaeOo1t3IDbWkFM yHxUVvlSEjYAG7qkaw+pPvWTbcNuV8AZ1shmzxQ36FrrMIRSPb78y07bPHAvzjRU r+NQLH6w3udbj/ZCUAgJUoWc8eu+cyqt8j1HIp7sbxpoUvIT5/I2DAIsMO+Nvxik MyGl/JtfllV1j6s/0DQX0mrDSMfAQ1K0 -----END CERTIFICATE-----Generated at Sat Aug 23 06:47:44 2025 by rpki-client