$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b4bf18af-251b-31f9-917b-1c663c1a6951.roa File: b4bf18af-251b-31f9-917b-1c663c1a6951.roa (raw, json) Hash identifier: 8pUZSYByne15PJwFnfONkjj9NQDPNm0oXAEHQc3SQv0= Subject key identifier: CA:AA:D2:B9:C6:D9:29:A5:FF:92:AB:E1:1B:50:93:12:1F:4F:CD:AD Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B86F8F0BE2A8E56BF8D656A40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b4bf18af-251b-31f9-917b-1c663c1a6951.roa Signing time: Wed 15 Oct 2025 06:47:36 +0000 ROA not before: Wed 15 Oct 2025 06:47:36 +0000 ROA not after: Tue 13 Jan 2026 07:47:36 +0000 asID: 213990 IP address blocks: 172.111.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:f8:f0:be:2a:8e:56:bf:8d:65:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 15 06:47:36 2025 GMT Not After : Jan 13 07:47:36 2026 GMT Subject: CN=f19aabbd-dea4-4bf4-a020-f85557f33089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:26:a5:b0:e9:57:d5:3e:f7:37:78:33:a5:f0: e3:55:aa:e3:d8:e1:7b:a4:1a:9e:b9:23:55:9b:3d: 90:72:ce:b5:cc:95:52:07:1c:a5:8e:37:53:b7:b2: 86:bb:1c:56:00:b4:4b:f4:bb:86:39:3b:70:49:a0: 68:54:e1:be:cc:1f:13:e3:66:75:97:a0:32:ac:18: c7:9f:75:4f:4f:74:42:75:a8:82:31:f0:6b:cb:05: 96:52:c7:a8:e8:46:d8:a8:6a:50:61:89:08:3c:e1: 20:e9:fc:2f:68:03:7f:7c:ff:19:f6:ac:5b:e9:d9: df:b2:56:76:b3:ec:98:d9:b5:18:7c:54:25:ec:2f: 39:46:95:50:f4:e5:b3:e8:03:e7:60:18:ca:e1:dc: 85:4d:f8:9b:be:9b:58:db:7f:8d:6c:52:9b:51:cd: 42:47:dd:14:4e:88:ee:e8:a1:3c:d3:74:c1:52:87: b9:8f:8a:25:33:2e:22:e4:53:68:1f:1b:1c:06:27: 81:e3:a8:38:6f:ea:94:fa:bf:7c:cb:64:7d:f4:a5: 96:2c:d7:51:2c:55:10:c7:e5:e9:4f:60:9e:bb:55: 71:4a:6c:20:96:82:40:82:6b:d4:76:ae:44:0d:9c: f9:80:0f:70:e1:05:21:0b:1b:08:17:16:aa:ce:4e: 99:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AA:D2:B9:C6:D9:29:A5:FF:92:AB:E1:1B:50:93:12:1F:4F:CD:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b4bf18af-251b-31f9-917b-1c663c1a6951.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:e8:95:2b:dd:f0:9f:22:fe:57:4a:34:f0:f2:a6:f3:43:55: 8f:a1:81:b2:5a:35:3c:73:35:e4:7f:a2:be:84:74:bd:76:1e: ad:e8:7c:de:94:34:c9:02:38:b8:11:e2:60:db:24:ce:6d:43: 42:b9:20:e9:4f:bc:68:af:d5:7f:84:47:10:e1:34:f4:2d:d6: aa:67:bf:21:7a:48:b7:c1:3f:a1:65:9c:e7:34:aa:88:f4:48: 5f:42:da:31:92:5c:b0:11:19:df:d8:1b:5f:81:57:87:2b:d9: 5b:c8:07:e6:a2:4c:d2:4d:83:75:cd:94:55:d0:db:00:3c:25: 67:28:80:33:92:8f:de:af:2e:a9:9a:e8:e4:7f:56:da:bf:08: 57:39:4f:69:05:f2:2a:8c:b0:02:4e:77:24:ce:59:13:1c:e8: c1:c6:7c:1a:05:b3:0b:d1:7a:d8:81:95:03:1c:71:e5:04:c9: d1:84:42:21:52:b4:33:ea:5b:30:58:13:ac:d6:15:3e:0c:95: a7:f9:7d:a7:8c:0f:b1:f5:4f:0c:12:1b:9e:24:f5:04:6d:fa: 26:ad:e7:95:4d:93:40:fb:00:29:31:b2:42:15:40:61:8f:a5: 98:6c:74:70:da:ae:d5:61:8c:aa:74:d1:db:b7:c6:dc:ef:6c: d1:72:2d:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuG+PC+Ko5Wv41lakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxNTA2NDczNloXDTI2MDExMzA3NDczNlowLzEtMCsGA1UEAxMk ZjE5YWFiYmQtZGVhNC00YmY0LWEwMjAtZjg1NTU3ZjMzMDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjialsOlX1T73N3gzpfDjVarj2OF7pBqeuSNV mz2Qcs61zJVSBxyljjdTt7KGuxxWALRL9LuGOTtwSaBoVOG+zB8T42Z1l6AyrBjH n3VPT3RCdaiCMfBrywWWUseo6EbYqGpQYYkIPOEg6fwvaAN/fP8Z9qxb6dnfslZ2 s+yY2bUYfFQl7C85RpVQ9OWz6APnYBjK4dyFTfibvptY23+NbFKbUc1CR90UToju 6KE803TBUoe5j4olMy4i5FNoHxscBieB46g4b+qU+r98y2R99KWWLNdRLFUQx+Xp T2Ceu1VxSmwgloJAgmvUdq5EDZz5gA9w4QUhCxsIFxaqzk6Z6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqq0rnG2Sml/5Kr4RtQkxIfT82tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjRiZjE4YWYtMjUxYi0z MWY5LTkxN2ItMWM2NjNjMWE2OTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzolSvd8J8i/ldKNPDypvNDVY+hgbJaNTxzNeR/or6EdL12Hq3ofN6U NMkCOLgR4mDbJM5tQ0K5IOlPvGiv1X+ERxDhNPQt1qpnvyF6SLfBP6FlnOc0qoj0 SF9C2jGSXLARGd/YG1+BV4cr2VvIB+aiTNJNg3XNlFXQ2wA8JWcogDOSj96vLqma 6OR/Vtq/CFc5T2kF8iqMsAJOdyTOWRMc6MHGfBoFswvRetiBlQMcceUEydGEQiFS tDPqWzBYE6zWFT4Mlaf5faeMD7H1TwwSG54k9QRt+iat55VNk0D7ACkxskIVQGGP pZhsdHDartVhjKp00du3xtzvbNFyLY0= -----END CERTIFICATE-----Generated at Sun Oct 19 22:58:37 2025 by rpki-client