$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa File: a2b1e817-581b-3613-bff0-519b62d2c6f2.roa (raw, json) Hash identifier: fNSNX/8d6lmdHsiGEZgW0dlKthnodDSIsY4jJqHCqdQ= Subject key identifier: 9C:A9:CE:06:6B:CE:65:BE:6F:19:B7:A4:FC:AF:41:57:77:C3:4D:37 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AF0F1407B8539F36785400C00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 9009 IP address blocks: 172.111.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:40:7b:85:39:f3:67:85:40:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=a5d193ce-01d1-4a6e-89dd-0133873458a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:48:d6:18:7c:df:27:58:e2:5c:43:9e:df:04: d9:e5:9c:11:47:34:98:b8:52:ea:0c:a6:5f:46:9a: d3:8e:3e:c2:06:76:7b:27:6b:4a:45:83:e5:c3:fb: ac:87:8b:2c:65:55:5e:5c:0d:e4:51:1a:22:57:44: 4c:82:ac:1f:e9:cd:cb:fe:04:79:a0:aa:5e:83:d2: 13:49:16:c9:83:04:2f:df:2c:53:d2:ca:0b:66:7e: 19:5e:3d:c3:35:50:2f:a3:fe:e8:d0:73:c5:b7:f8: 91:36:97:58:f5:ed:7d:43:1d:d4:bd:78:5b:39:17: ae:09:1c:7a:b3:c4:34:cf:5b:3e:c9:86:e9:3b:7a: cc:25:37:e8:d3:98:d1:6b:b1:e8:b6:3a:f5:dc:30: a6:4e:30:8d:b3:6d:51:b1:ea:f1:8d:51:ff:5c:64: 7b:70:c6:5b:c3:a5:46:79:8c:70:c4:93:5b:b0:15: 78:61:83:99:a3:c0:bb:fb:0f:70:61:50:ab:96:13: c7:23:90:0c:23:6c:18:30:06:e7:71:7a:32:06:74: ef:5f:34:6d:8a:d0:77:94:37:c0:33:c7:79:fd:23: bf:92:ea:4f:01:6f:33:7c:48:11:64:d6:50:21:61: 7a:a8:28:6e:c8:f0:c6:41:6d:1b:d1:c8:88:e3:a3: 38:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A9:CE:06:6B:CE:65:BE:6F:19:B7:A4:FC:AF:41:57:77:C3:4D:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2b1e817-581b-3613-bff0-519b62d2c6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:28:ac:7f:02:93:15:09:2a:af:c1:63:b2:b3:70:af:91:7f: 36:5a:03:a7:b9:cb:36:84:db:76:ef:94:f6:29:f3:a5:34:0f: d9:e2:a3:76:45:e4:38:e2:93:a8:cd:f5:49:d1:82:7f:14:02: 56:97:af:74:f9:bc:39:18:01:04:b7:56:ed:16:43:95:57:89: 4a:54:99:8f:ee:d8:6e:d7:15:fc:d8:b2:8f:e8:40:19:50:93: 29:78:02:67:ac:87:97:ed:14:fe:44:a2:0b:42:2a:3c:de:1e: b2:b7:bb:93:a2:4d:f4:e3:29:dc:7c:11:ba:e8:14:5c:6a:e6: a9:cf:bf:a5:41:84:e5:e8:be:a4:8b:44:20:5a:5d:0e:2e:64: eb:86:61:d8:ff:d6:c5:59:e4:b6:9e:37:b2:78:f8:fc:42:61: ee:45:2d:6f:0e:4a:a7:45:89:3d:65:75:ea:8a:a6:d6:8a:21: be:c0:5e:c8:1f:9e:f8:1c:07:39:9c:09:1d:43:df:aa:b6:94: 21:bc:7c:73:8f:72:86:2f:cc:b1:53:5a:b3:e4:b9:fb:62:ce: 92:21:03:0b:15:df:f1:bb:97:4e:33:a8:12:88:f2:31:ba:38: f5:59:dd:2d:2c:3f:91:c5:bf:85:18:c5:a3:5c:7b:43:bb:ba: 83:f8:8c:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UB7hTnzZ4VADAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YTVkMTkzY2UtMDFkMS00YTZlLTg5ZGQtMDEzMzg3MzQ1OGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUjWGHzfJ1jiXEOe3wTZ5ZwRRzSYuFLqDKZf RprTjj7CBnZ7J2tKRYPlw/ush4ssZVVeXA3kURoiV0RMgqwf6c3L/gR5oKpeg9IT SRbJgwQv3yxT0soLZn4ZXj3DNVAvo/7o0HPFt/iRNpdY9e19Qx3UvXhbOReuCRx6 s8Q0z1s+yYbpO3rMJTfo05jRa7Hotjr13DCmTjCNs21RserxjVH/XGR7cMZbw6VG eYxwxJNbsBV4YYOZo8C7+w9wYVCrlhPHI5AMI2wYMAbncXoyBnTvXzRtitB3lDfA M8d5/SO/kupPAW8zfEgRZNZQIWF6qChuyPDGQW0b0ciI46M4QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJypzgZrzmW+bxm3pPyvQVd3w003MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTJiMWU4MTctNTgxYi0z NjEzLWJmZjAtNTE5YjYyZDJjNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcorH8CkxUJKq/BY7KzcK+RfzZaA6e5yzaE23bvlPYp86U0D9nio3ZF 5Djik6jN9UnRgn8UAlaXr3T5vDkYAQS3Vu0WQ5VXiUpUmY/u2G7XFfzYso/oQBlQ kyl4Amesh5ftFP5EogtCKjzeHrK3u5OiTfTjKdx8EbroFFxq5qnPv6VBhOXovqSL RCBaXQ4uZOuGYdj/1sVZ5LaeN7J4+PxCYe5FLW8OSqdFiT1ldeqKptaKIb7AXsgf nvgcBzmcCR1D36q2lCG8fHOPcoYvzLFTWrPkuftizpIhAwsV3/G7l04zqBKI8jG6 OPVZ3S0sP5HFv4UYxaNce0O7uoP4jGY= -----END CERTIFICATE-----Generated at Sat Aug 23 08:16:09 2025 by rpki-client