$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ad73bca1-d948-35ed-8e5d-f426e7221782.roa File: ad73bca1-d948-35ed-8e5d-f426e7221782.roa (raw, json) Hash identifier: 7agJy8nxjzsufsGct7M+xI6emS5K/eorpsgg7nszr9w= Subject key identifier: F0:2E:45:CF:28:27:C4:8D:6D:44:63:4D:47:6D:27:05:7C:75:1D:62 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B4F81B9A89E303D4724E058C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ad73bca1-d948-35ed-8e5d-f426e7221782.roa Signing time: Thu 25 Sep 2025 09:57:56 +0000 ROA not before: Thu 25 Sep 2025 09:57:56 +0000 ROA not after: Wed 24 Dec 2025 10:57:56 +0000 asID: 21859 IP address blocks: 172.111.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:81:b9:a8:9e:30:3d:47:24:e0:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 25 09:57:56 2025 GMT Not After : Dec 24 10:57:56 2025 GMT Subject: CN=08f6113b-6fdc-4f2b-bc06-5f95cec2328e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:86:27:30:22:10:56:ab:5c:78:77:9c:92:f2: d7:97:25:74:95:3b:33:1d:68:34:6e:5d:43:4a:56: a1:33:e8:6d:62:ca:fb:c3:34:42:0e:29:75:ad:9c: 76:0b:9f:3a:4b:6c:03:c5:72:e9:5d:5c:f6:71:1c: f2:09:9e:58:00:87:b9:19:29:98:94:2d:09:c6:a4: ef:4b:a5:e6:0f:59:46:c2:b2:4f:b5:2d:01:81:39: ba:3f:cb:9c:12:a1:47:e4:d4:1a:67:05:cb:f7:dc: cc:4a:16:30:66:d2:7a:37:6c:81:92:9b:68:87:32: 0a:f6:eb:08:f5:40:a4:8e:1f:93:99:cf:98:d4:20: c9:3f:77:89:57:7c:94:1a:e6:82:55:6a:0f:77:12: 72:08:23:b3:9d:b7:fd:2e:ca:2e:62:d2:7b:16:ec: 63:68:2c:04:85:53:64:8d:e9:b4:e3:4b:65:f3:02: 6c:03:49:8c:50:0a:35:93:c1:87:5c:20:63:47:bc: 06:11:db:8d:79:4b:81:0b:71:c2:97:11:37:c9:50: e3:08:20:ff:07:72:39:0b:cb:36:a1:39:27:ba:97: a5:7d:ed:fa:63:95:32:9e:6d:d0:6c:7e:ae:a4:32: 2b:52:72:11:36:39:d0:30:ff:a7:8d:76:44:f7:a7: 90:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2E:45:CF:28:27:C4:8D:6D:44:63:4D:47:6D:27:05:7C:75:1D:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ad73bca1-d948-35ed-8e5d-f426e7221782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:23:9b:45:e8:8c:72:e6:a0:39:b6:62:4c:bc:5d:6d:9e:b3: 6f:e5:bd:37:5a:f1:f7:99:d6:05:24:b2:1b:de:32:29:2d:cc: 9d:2d:fb:a5:cd:b2:2e:54:e5:c5:35:38:52:d5:ab:39:9b:fa: 9c:9e:19:13:7d:9d:de:da:a8:eb:a0:e6:d2:b8:94:9f:44:d2: 85:fb:b3:50:94:25:3c:4f:05:e3:cd:05:0a:26:76:ad:e6:02: 55:04:9d:2b:07:e2:fc:2c:f2:9e:73:02:d1:ce:fa:42:25:60: ad:bd:54:50:97:bc:c8:9f:1a:23:72:25:40:73:78:ab:7e:e3: 78:4c:66:5f:93:7f:92:47:20:86:52:c7:d0:b7:ea:fa:2a:74: e8:1e:a5:5f:12:45:e1:b4:49:22:47:18:78:be:00:23:8b:86: d0:e8:4e:3d:50:f1:66:52:17:b6:3d:de:34:3c:e7:ef:40:f1: c6:e9:38:fa:77:4e:1f:9d:6d:09:0b:5a:f6:ca:f9:2f:1a:63: c9:35:9d:53:19:f6:5f:93:6f:71:4d:75:92:03:3a:02:41:a7: fc:5c:b6:09:ff:40:83:05:40:ac:8f:50:13:a5:d7:07:f7:ab: 6f:39:9e:ea:e9:55:9e:b5:c4:ba:78:ec:d0:bd:0b:7d:86:21: d2:b1:b0:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtPgbmonjA9RyTgWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDkyNTA5NTc1NloXDTI1MTIyNDEwNTc1NlowLzEtMCsGA1UEAxMk MDhmNjExM2ItNmZkYy00ZjJiLWJjMDYtNWY5NWNlYzIzMjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoYnMCIQVqtceHeckvLXlyV0lTszHWg0bl1D SlahM+htYsr7wzRCDil1rZx2C586S2wDxXLpXVz2cRzyCZ5YAIe5GSmYlC0JxqTv S6XmD1lGwrJPtS0BgTm6P8ucEqFH5NQaZwXL99zMShYwZtJ6N2yBkptohzIK9usI 9UCkjh+Tmc+Y1CDJP3eJV3yUGuaCVWoPdxJyCCOznbf9LsouYtJ7FuxjaCwEhVNk jem040tl8wJsA0mMUAo1k8GHXCBjR7wGEduNeUuBC3HClxE3yVDjCCD/B3I5C8s2 oTknupelfe36Y5Uynm3QbH6upDIrUnIRNjnQMP+njXZE96eQUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAuRc8oJ8SNbURjTUdtJwV8dR1iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWQ3M2JjYTEtZDk0OC0z NWVkLThlNWQtZjQyNmU3MjIxNzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYjm0XojHLmoDm2Yky8XW2es2/lvTda8feZ1gUkshveMiktzJ0t+6XN si5U5cU1OFLVqzmb+pyeGRN9nd7aqOug5tK4lJ9E0oX7s1CUJTxPBePNBQomdq3m AlUEnSsH4vws8p5zAtHO+kIlYK29VFCXvMifGiNyJUBzeKt+43hMZl+Tf5JHIIZS x9C36voqdOgepV8SReG0SSJHGHi+ACOLhtDoTj1Q8WZSF7Y93jQ85+9A8cbpOPp3 Th+dbQkLWvbK+S8aY8k1nVMZ9l+Tb3FNdZIDOgJBp/xctgn/QIMFQKyPUBOl1wf3 q285nurpVZ61xLp47NC9C32GIdKxsFg= -----END CERTIFICATE-----Generated at Sun Oct 19 22:58:34 2025 by rpki-client