$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61f99816-0f71-3a20-b0c2-c71efbc69bf7.roa File: 61f99816-0f71-3a20-b0c2-c71efbc69bf7.roa (raw, json) Hash identifier: CxDIU6+gmL01Ip89JabqKXio41QaOW55f0s3/BnC/5U= Subject key identifier: 68:65:C7:42:9C:0F:25:04:83:E3:E5:33:EA:53:6D:40:8D:05:7E:CC Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AE9F66FFBEDB9532AFB94DF00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61f99816-0f71-3a20-b0c2-c71efbc69bf7.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 9009 IP address blocks: 172.111.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6f:fb:ed:b9:53:2a:fb:94:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=bfd641ee-80ff-4ca9-b0ab-8186fc656044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:99:3a:b7:80:52:6c:2f:45:cd:2c:9e:bb:82: 70:bf:4e:5b:90:ad:57:7e:6f:bd:07:58:64:9e:db: f2:ec:fe:5e:04:03:76:ac:93:99:5a:d3:be:69:f0: f7:e0:cf:b7:7b:92:4f:c5:5c:ca:c2:e8:a3:97:b6: 9b:db:10:6a:23:e9:c7:92:04:ee:53:09:dc:cf:57: da:c4:fb:0d:20:d3:e3:7f:2c:3c:b9:39:e9:20:b1: 45:d3:dd:e6:42:b7:3c:13:b2:a9:c6:d1:25:75:7e: ae:fc:ee:04:32:a7:61:3f:bd:28:99:f5:01:8e:91: 0e:4e:29:14:12:52:e4:6a:19:69:cc:74:38:98:9c: 3e:ff:ed:f0:8e:bc:98:3d:37:62:14:f8:ff:1e:8e: 12:10:7a:69:3c:b1:cc:d8:d4:49:82:73:d3:ec:d4: e9:59:de:83:1f:06:4d:94:d5:87:03:c3:37:6e:58: 84:c4:82:d2:61:b9:0a:61:83:55:ca:81:a3:c4:d2: eb:7d:af:71:b3:52:c4:d5:51:70:ec:98:35:82:20: 4d:d0:85:05:71:a9:ff:43:d9:ff:c2:ae:3a:05:dc: 45:36:ba:03:93:7d:83:ae:94:ee:4a:e1:3c:2b:4e: 70:a4:ce:94:25:ef:4d:b8:94:eb:9d:24:55:49:66: 51:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:65:C7:42:9C:0F:25:04:83:E3:E5:33:EA:53:6D:40:8D:05:7E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61f99816-0f71-3a20-b0c2-c71efbc69bf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ec:24:35:c5:52:98:50:7c:f0:ce:0e:8b:e9:97:34:a1:7e: 25:85:96:1b:d2:5f:c7:d0:93:e7:86:8b:03:af:f8:5a:61:36: 2f:4b:3f:43:ed:bf:10:fb:5a:37:60:f8:33:94:ab:43:01:43: f5:6b:49:59:67:17:17:39:75:68:d6:d3:9a:59:95:2c:fb:f8: 56:32:2c:9e:a7:ad:2b:af:d1:ad:e9:4e:75:f1:99:3a:d9:28: e0:64:4f:87:21:d5:88:2a:99:21:90:6d:f2:13:15:b4:36:16: 94:36:b3:cc:4e:ca:b4:38:38:b9:b3:4a:86:d7:e0:14:ec:1e: 7f:d4:67:f0:07:f6:9e:9d:9a:b7:ed:d1:0f:4a:7e:8c:b8:69: 9f:80:d6:2d:86:9c:b2:69:4e:75:43:6d:21:99:11:97:88:e6: a6:16:66:29:cb:3a:f4:53:1e:ee:7f:08:e5:9d:d4:10:34:79: 71:34:93:70:2c:7f:25:7d:ef:e8:2d:48:9e:79:36:f9:8f:c4: 3a:5f:c2:e3:42:28:dd:68:f9:04:af:f1:20:e0:62:84:6e:b1: 85:b7:56:61:23:bd:ef:f3:22:40:54:5c:d6:03:bd:1d:b7:b6: 63:a2:97:87:4b:3f:87:06:d5:53:dc:7d:78:92:8b:fb:28:ab: 00:91:e2:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9m/77blTKvuU3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk YmZkNjQxZWUtODBmZi00Y2E5LWIwYWItODE4NmZjNjU2MDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5k6t4BSbC9FzSyeu4Jwv05bkK1Xfm+9B1hk ntvy7P5eBAN2rJOZWtO+afD34M+3e5JPxVzKwuijl7ab2xBqI+nHkgTuUwncz1fa xPsNINPjfyw8uTnpILFF093mQrc8E7KpxtEldX6u/O4EMqdhP70omfUBjpEOTikU ElLkahlpzHQ4mJw+/+3wjryYPTdiFPj/Ho4SEHppPLHM2NRJgnPT7NTpWd6DHwZN lNWHA8M3bliExILSYbkKYYNVyoGjxNLrfa9xs1LE1VFw7Jg1giBN0IUFcan/Q9n/ wq46BdxFNroDk32DrpTuSuE8K05wpM6UJe9NuJTrnSRVSWZRZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhlx0KcDyUEg+PlM+pTbUCNBX7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjFmOTk4MTYtMGY3MS0z YTIwLWIwYzItYzcxZWZiYzY5YmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7sJDXFUphQfPDODovplzShfiWFlhvSX8fQk+eGiwOv+FphNi9LP0Pt vxD7Wjdg+DOUq0MBQ/VrSVlnFxc5dWjW05pZlSz7+FYyLJ6nrSuv0a3pTnXxmTrZ KOBkT4ch1YgqmSGQbfITFbQ2FpQ2s8xOyrQ4OLmzSobX4BTsHn/UZ/AH9p6dmrft 0Q9Kfoy4aZ+A1i2GnLJpTnVDbSGZEZeI5qYWZinLOvRTHu5/COWd1BA0eXE0k3As fyV97+gtSJ55NvmPxDpfwuNCKN1o+QSv8SDgYoRusYW3VmEjve/zIkBUXNYDvR23 tmOil4dLP4cG1VPcfXiSi/soqwCR4ik= -----END CERTIFICATE-----Generated at Sat Aug 23 06:49:14 2025 by rpki-client