$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831e684b-3865-3f29-a227-911e4062b52f.roa File: 831e684b-3865-3f29-a227-911e4062b52f.roa (raw, json) Hash identifier: d9Moj0GZ0v24aL+2YisKh13mZcuch51cyUnKlYZCnho= Subject key identifier: 95:FF:A1:1D:60:BF:02:77:4F:01:F0:58:A7:13:B1:31:88:B2:11:97 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584ADECBBFDB59E07FEA7334BD80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831e684b-3865-3f29-a227-911e4062b52f.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 9009 IP address blocks: 172.111.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:bf:db:59:e0:7f:ea:73:34:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=4215b6ff-ff13-4d41-b7e0-91392df38d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3a:3f:a0:84:20:2a:a8:a3:2e:51:d8:8e:68: b4:9a:a8:98:04:ac:e1:17:00:44:93:e7:8d:52:4a: f6:ec:97:0b:f3:13:8b:8d:33:9e:a5:d6:92:77:15: 66:a9:ad:fd:be:fc:b6:86:7d:b6:f1:4b:49:5d:40: 6f:98:19:6b:30:ed:d7:f3:fe:8e:2b:69:39:66:c9: 37:cd:34:1e:dd:ec:9f:af:84:ad:fa:a4:67:12:60: c5:55:48:95:33:0e:f7:26:fe:7b:16:92:9b:5f:60: b1:8d:6d:83:05:a3:8f:15:d2:8f:e5:fc:ca:5c:e8: 3b:e0:96:3f:41:bc:af:4c:1a:ce:c1:92:1e:b5:54: 13:39:15:b8:58:05:77:97:29:6f:22:e4:36:d4:d2: 9a:b0:d6:67:2d:f0:cb:df:2e:35:8b:a7:77:ab:61: 7a:94:9e:42:c1:ad:31:d9:96:27:9f:e6:1f:f2:63: 2c:5c:47:e6:da:3b:08:0e:39:6b:75:2a:2b:a8:69: 76:a3:f0:57:ba:7f:93:c8:2c:09:91:30:71:18:01: f5:d0:37:ac:8b:26:1e:25:49:ff:af:d3:77:85:c8: 64:0f:48:1e:2e:6e:f2:33:de:78:f6:09:70:f4:b7: 1c:24:0b:78:5a:fc:b9:4b:c1:ad:e8:2a:e6:44:2e: 1b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FF:A1:1D:60:BF:02:77:4F:01:F0:58:A7:13:B1:31:88:B2:11:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/831e684b-3865-3f29-a227-911e4062b52f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:93:d6:86:4e:33:ed:99:9d:df:1c:5f:b0:3f:7d:b4:8f:db: 08:0e:fe:cf:13:0a:99:4d:36:9f:63:ef:66:81:fa:d5:9b:0d: 80:3b:a3:cb:e1:9e:ee:b1:04:52:b2:12:72:eb:a9:1b:4d:12: 65:09:26:f8:90:2f:00:19:7d:d6:5c:1d:21:43:b0:f7:7e:38: c6:0c:a9:8e:ac:53:29:76:08:ee:94:f6:06:4b:e3:b4:fb:91: d0:51:e4:f6:d2:0f:c6:5b:03:9f:3f:df:1d:bf:94:78:80:24: 18:a7:11:67:76:c9:ad:2d:e8:12:0d:17:83:54:50:96:42:df: 54:e4:19:93:29:11:d8:9d:cd:e7:94:25:3a:14:72:0a:85:e8: b6:d8:5f:52:1e:8d:02:51:31:b2:8c:18:88:62:b7:fd:d8:c4: 31:a4:c7:11:54:fe:4d:fe:0d:23:f0:18:92:89:4d:7d:11:1f: c7:14:3a:72:48:9c:15:ad:74:dc:a5:89:2e:f7:76:88:c2:8e: 03:56:d2:04:81:6a:6c:ff:f0:d3:1d:f7:41:fa:4f:84:eb:07: 55:a1:36:44:f8:05:be:0c:3b:88:ab:58:01:22:23:69:87:87: 02:4a:6c:5d:93:f3:33:8b:e1:30:59:7c:04:c8:d0:41:a0:24: 44:ac:78:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey7/bWeB/6nM0vYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk NDIxNWI2ZmYtZmYxMy00ZDQxLWI3ZTAtOTEzOTJkZjM4ZDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojo/oIQgKqijLlHYjmi0mqiYBKzhFwBEk+eN Ukr27JcL8xOLjTOepdaSdxVmqa39vvy2hn228UtJXUBvmBlrMO3X8/6OK2k5Zsk3 zTQe3eyfr4St+qRnEmDFVUiVMw73Jv57FpKbX2CxjW2DBaOPFdKP5fzKXOg74JY/ QbyvTBrOwZIetVQTORW4WAV3lylvIuQ21NKasNZnLfDL3y41i6d3q2F6lJ5Cwa0x 2ZYnn+Yf8mMsXEfm2jsIDjlrdSorqGl2o/BXun+TyCwJkTBxGAH10DesiyYeJUn/ r9N3hchkD0geLm7yM9549glw9LccJAt4Wvy5S8Gt6CrmRC4bIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJX/oR1gvwJ3TwHwWKcTsTGIshGXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODMxZTY4NGItMzg2NS0z ZjI5LWEyMjctOTExZTQwNjJiNTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiT1oZOM+2Znd8cX7A/fbSP2wgO/s8TCplNNp9j72aB+tWbDYA7o8vh nu6xBFKyEnLrqRtNEmUJJviQLwAZfdZcHSFDsPd+OMYMqY6sUyl2CO6U9gZL47T7 kdBR5PbSD8ZbA58/3x2/lHiAJBinEWd2ya0t6BINF4NUUJZC31TkGZMpEdidzeeU JToUcgqF6LbYX1IejQJRMbKMGIhit/3YxDGkxxFU/k3+DSPwGJKJTX0RH8cUOnJI nBWtdNyliS73dojCjgNW0gSBamz/8NMd90H6T4TrB1WhNkT4Bb4MO4irWAEiI2mH hwJKbF2T8zOL4TBZfATI0EGgJESsePU= -----END CERTIFICATE-----Generated at Sat Aug 23 08:28:37 2025 by rpki-client