$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa File: 901d7078-5ae0-31f8-a837-37437b50a24f.roa (raw, json) Hash identifier: CZbdNJroZRxSBY4/XBMIH7rxYlaIdw7m463SlBRdU00= Subject key identifier: 3D:93:63:1A:8F:D1:AA:AD:1B:B7:F7:04:74:75:1F:5A:15:88:1D:6D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B715CA0D37B5F200F9D909D40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 3223 IP address blocks: 172.111.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a0:d3:7b:5f:20:0f:9d:90:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=53138309-167e-4a35-a169-16a2fab52c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:25:a7:85:ed:f0:85:3f:4d:8e:ec:89:e2:39: 5f:d3:19:8b:69:38:b5:15:07:45:9c:ea:39:82:d6: 81:26:8f:eb:15:fd:d9:f5:b8:47:ff:30:33:ba:31: e3:bf:6a:d1:51:4b:b1:0e:f2:03:04:90:31:26:1b: e2:15:26:62:84:1c:81:25:e4:f2:37:97:ef:e9:d2: b3:df:4a:08:58:dc:5a:4e:ff:36:e8:68:34:8b:98: 37:6f:a5:6f:3a:2f:ee:60:a9:ef:c0:25:4d:d7:90: e7:f2:ee:44:ab:03:9d:35:53:27:d7:b2:09:fe:2a: a3:5d:ed:21:76:a7:cd:f6:63:2a:34:0d:cf:01:e0: 71:ee:e0:2e:d4:d0:74:80:f3:85:bd:96:af:ba:63: 86:a7:3e:01:92:68:d2:e2:c6:5f:38:31:2d:99:39: 3e:6a:74:72:1e:77:42:9e:f9:e8:b1:7e:93:c2:e0: 0b:b0:c2:30:ad:79:04:d0:33:4e:40:a7:f6:2d:c8: d0:c2:1a:f7:ad:87:e2:24:68:35:b4:6f:8e:d8:f1: d4:14:81:5d:c8:9c:ce:60:d8:87:3e:6e:30:18:3c: 89:61:a9:23:ab:0a:4c:53:0c:55:4a:07:82:c6:db: e7:06:5d:33:ac:3d:56:5b:83:31:ce:d6:6f:5d:2a: f4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:93:63:1A:8F:D1:AA:AD:1B:B7:F7:04:74:75:1F:5A:15:88:1D:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/901d7078-5ae0-31f8-a837-37437b50a24f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:9f:71:e8:70:56:16:a4:c3:32:f8:b7:a6:85:f0:d9:45:6d: e3:8f:fc:1b:86:91:fd:d1:df:ed:01:ad:68:a5:85:6c:3d:d7: 49:ab:11:0d:0b:88:b4:03:8f:2d:7d:45:6d:cb:81:cd:8a:5c: 27:70:1d:06:6d:e2:85:04:ad:8e:26:40:12:af:17:8e:2d:b9: 2c:17:90:78:15:44:53:c8:f4:65:4d:d7:4b:01:e2:87:b1:41: a7:17:9d:c9:2f:bc:55:6b:86:b2:95:ad:b0:5d:21:d7:8f:a9: 6c:24:44:28:39:ee:24:f4:c2:30:e6:9a:02:d6:0a:fc:c3:0b: fd:07:94:5a:b1:a0:cd:d9:0e:2d:86:06:25:15:46:8b:04:29: 89:cc:27:be:4c:3d:ae:2d:df:bd:5b:e1:22:30:20:55:03:7b: ed:5d:d3:42:58:2e:8a:af:07:99:f9:23:04:4d:d6:5a:99:ad: 84:7f:21:13:56:7c:e2:72:1a:c8:0d:97:ff:76:9e:2b:3e:7c: 4b:5a:a7:41:76:6e:df:3a:9f:dd:e3:d6:4a:42:13:6a:f9:98: 63:06:d5:a5:0f:c3:a0:54:33:68:68:d9:e8:49:49:4f:91:38: 98:7e:66:e2:b8:65:84:e4:8e:26:11:0d:ab:70:55:60:92:85: 42:3d:d4:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKDTe18gD52QnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NTMxMzgzMDktMTY3ZS00YTM1LWExNjktMTZhMmZhYjUyYzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyWnhe3whT9NjuyJ4jlf0xmLaTi1FQdFnOo5 gtaBJo/rFf3Z9bhH/zAzujHjv2rRUUuxDvIDBJAxJhviFSZihByBJeTyN5fv6dKz 30oIWNxaTv826Gg0i5g3b6VvOi/uYKnvwCVN15Dn8u5EqwOdNVMn17IJ/iqjXe0h dqfN9mMqNA3PAeBx7uAu1NB0gPOFvZavumOGpz4BkmjS4sZfODEtmTk+anRyHndC nvnosX6TwuALsMIwrXkE0DNOQKf2LcjQwhr3rYfiJGg1tG+O2PHUFIFdyJzOYNiH Pm4wGDyJYakjqwpMUwxVSgeCxtvnBl0zrD1WW4MxztZvXSr0+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2TYxqP0aqtG7f3BHR1H1oViB1tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTAxZDcwNzgtNWFlMC0z MWY4LWE4MzctMzc0MzdiNTBhMjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOfcehwVhakwzL4t6aF8NlFbeOP/BuGkf3R3+0BrWilhWw910mrEQ0L iLQDjy19RW3Lgc2KXCdwHQZt4oUErY4mQBKvF44tuSwXkHgVRFPI9GVN10sB4oex QacXnckvvFVrhrKVrbBdIdePqWwkRCg57iT0wjDmmgLWCvzDC/0HlFqxoM3ZDi2G BiUVRosEKYnMJ75MPa4t371b4SIwIFUDe+1d00JYLoqvB5n5IwRN1lqZrYR/IRNW fOJyGsgNl/92nis+fEtap0F2bt86n93j1kpCE2r5mGMG1aUPw6BUM2ho2ehJSU+R OJh+ZuK4ZYTkjiYRDatwVWCShUI91BI= -----END CERTIFICATE-----Generated at Mon Oct 20 10:17:27 2025 by rpki-client