$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89c763ab-13dd-3b24-8c22-2a785ba3be64.roa File: 89c763ab-13dd-3b24-8c22-2a785ba3be64.roa (raw, json) Hash identifier: 3KLHho/OjOuZMbe70j7/Nm30G6BThgLv9D3JG+xG6g4= Subject key identifier: 5D:04:25:62:16:19:9B:2D:96:5F:DD:9C:B7:E9:4A:AF:CE:AE:8D:F7 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B87B21F91D1A61330BECE0AE0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89c763ab-13dd-3b24-8c22-2a785ba3be64.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 9009 IP address blocks: 172.111.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:1f:91:d1:a6:13:30:be:ce:0a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=e4d20a30-ff3e-42f6-be07-9d74a00b9548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0b:6d:bf:c3:32:ce:34:5a:0d:5a:54:52:51: f4:d0:c2:81:e3:4d:3f:c2:4c:11:90:51:4b:2e:69: 79:9e:06:44:79:22:72:26:99:9b:e4:ff:e9:16:64: 0f:80:54:c6:1c:03:09:e6:ea:b3:9e:8b:d3:d3:1c: 94:70:df:de:76:bb:15:e3:35:6f:3b:de:b8:be:6d: 77:a2:ed:a0:52:3f:47:ae:68:26:41:05:9a:29:50: 41:99:ae:05:05:08:fc:4c:fe:2f:80:8d:52:e2:8d: 90:f6:c8:fd:56:ee:8b:36:b3:22:1e:ff:2b:60:76: a8:d1:c5:74:0d:f2:92:e5:cf:e2:cb:d8:ef:fe:11: 77:93:b4:f7:67:d7:90:f8:ea:89:02:7e:92:99:ff: 13:cb:54:2d:97:fc:de:93:0e:b1:3c:3f:93:54:c8: 91:e3:e4:ba:bd:62:b3:ed:03:ab:38:98:06:ac:0f: ef:c7:77:13:91:d4:69:4e:5c:97:dd:38:19:10:96: 54:d5:27:31:8c:94:fb:9a:41:33:74:b1:0d:1c:81: 27:25:74:71:54:2c:ed:e1:91:e7:da:71:41:8e:40: 6d:3e:4e:6e:bb:95:b8:40:61:cd:df:3a:ee:3c:48: 8e:e5:a2:c9:b1:fd:09:c8:8b:7f:89:6a:76:2a:34: 40:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:04:25:62:16:19:9B:2D:96:5F:DD:9C:B7:E9:4A:AF:CE:AE:8D:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89c763ab-13dd-3b24-8c22-2a785ba3be64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:19:f7:da:a8:e9:cd:b1:09:dd:38:a4:a2:e5:75:5d:4c:d1: 5c:73:11:c4:ba:cc:a0:32:f0:99:9f:00:ab:ef:37:40:d2:b4: 3c:3d:e3:47:4f:e6:d1:5d:ca:1e:e1:1e:16:c5:30:50:bb:9e: fe:e7:f6:c2:26:86:37:f0:1e:a9:6f:ea:b4:7d:ce:79:22:9c: ee:f9:a8:b0:f3:be:86:7d:e4:13:46:7f:fc:0f:52:b7:c1:4d: 97:ef:ba:29:b7:37:c4:4d:0e:74:08:c1:a7:b9:16:21:e5:70: 36:fb:e7:91:7f:6e:73:e9:a3:b0:c9:e6:96:19:66:c0:97:d6: 9f:3b:bd:94:04:f3:45:0b:c5:cd:74:83:cb:71:31:2c:37:06: 45:21:66:a1:77:1a:a3:0c:b4:c5:db:b0:4d:12:e6:0e:d1:13: e0:f7:be:e0:ac:28:f2:3f:9c:4d:f1:a6:97:08:09:02:10:f8: 3c:1e:8f:65:3c:f5:91:79:e6:f8:fc:93:77:22:3a:d7:f5:ab: 57:9d:d6:aa:5d:78:a6:50:d4:2c:64:b0:50:13:f4:40:76:58: 8f:85:03:33:6d:2a:69:8d:5c:b4:fc:2a:b0:9c:dd:e1:2e:b7: 7f:ed:30:0b:ef:80:79:fd:ff:50:3b:8b:08:7f:0c:7e:41:1d: f5:20:43:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsh+R0aYTML7OCuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ZTRkMjBhMzAtZmYzZS00MmY2LWJlMDctOWQ3NGEwMGI5NTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwttv8MyzjRaDVpUUlH00MKB400/wkwRkFFL Lml5ngZEeSJyJpmb5P/pFmQPgFTGHAMJ5uqznovT0xyUcN/edrsV4zVvO964vm13 ou2gUj9HrmgmQQWaKVBBma4FBQj8TP4vgI1S4o2Q9sj9Vu6LNrMiHv8rYHao0cV0 DfKS5c/iy9jv/hF3k7T3Z9eQ+OqJAn6Smf8Ty1Qtl/zekw6xPD+TVMiR4+S6vWKz 7QOrOJgGrA/vx3cTkdRpTlyX3TgZEJZU1ScxjJT7mkEzdLENHIEnJXRxVCzt4ZHn 2nFBjkBtPk5uu5W4QGHN3zruPEiO5aLJsf0JyIt/iWp2KjRAEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0EJWIWGZstll/dnLfpSq/Oro33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODljNzYzYWItMTNkZC0z YjI0LThjMjItMmE3ODViYTNiZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEZ99qo6c2xCd04pKLldV1M0VxzEcS6zKAy8JmfAKvvN0DStDw940dP 5tFdyh7hHhbFMFC7nv7n9sImhjfwHqlv6rR9znkinO75qLDzvoZ95BNGf/wPUrfB TZfvuim3N8RNDnQIwae5FiHlcDb755F/bnPpo7DJ5pYZZsCX1p87vZQE80ULxc10 g8txMSw3BkUhZqF3GqMMtMXbsE0S5g7RE+D3vuCsKPI/nE3xppcICQIQ+Dwej2U8 9ZF55vj8k3ciOtf1q1ed1qpdeKZQ1CxksFAT9EB2WI+FAzNtKmmNXLT8KrCc3eEu t3/tMAvvgHn9/1A7iwh/DH5BHfUgQ2M= -----END CERTIFICATE-----Generated at Mon Oct 20 02:10:14 2025 by rpki-client