$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b5bfafed-64ea-37e8-b51f-79f4b9e86c93.roa File: b5bfafed-64ea-37e8-b51f-79f4b9e86c93.roa (raw, json) Hash identifier: WDRCNc5MnHckn1KjJLCE+jjCBSsR/6QCWuEUdulim54= Subject key identifier: A7:E3:A1:9A:D6:6A:51:FA:25:34:73:8D:A3:BD:98:93:C8:EE:A3:6A Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AEE269DA807CE96F0815A1680 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b5bfafed-64ea-37e8-b51f-79f4b9e86c93.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 9009 IP address blocks: 172.111.211.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:9d:a8:07:ce:96:f0:81:5a:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=d7fbf272-01ff-4a50-a45a-0f83dccf894b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:db:ef:c7:84:38:be:5a:6e:8d:5f:1f:d5:bf: 81:b6:c9:d8:15:42:01:b0:ab:28:49:59:2b:73:24: 6c:8e:93:23:84:ea:1c:bb:8b:59:55:cc:18:b2:f5: 93:b1:69:71:31:0f:bc:1d:0e:52:6f:39:c7:0d:32: be:74:f5:11:09:ed:22:47:ae:fb:18:f8:b3:3a:b5: 7c:e1:d2:90:c3:7b:ec:b3:93:99:7b:57:6f:27:82: e7:04:74:59:de:21:fc:47:82:e9:7b:8d:3b:22:3a: d9:8e:81:06:ac:90:b8:43:5f:e6:0a:f8:2a:c3:aa: 3d:ff:70:80:ec:f0:27:65:72:f6:64:54:f0:e3:9c: 86:83:b7:43:39:03:2e:cd:e4:55:1b:29:63:bd:02: 32:e6:41:d3:1c:46:d0:51:ce:3c:aa:f0:b2:7a:e9: ee:a3:99:75:0f:60:32:78:b2:78:d6:04:ba:8b:ef: 69:b5:27:21:88:c7:3e:52:c7:d5:ff:3c:ca:dc:29: 03:b0:26:dd:57:2f:82:6d:60:e6:b5:94:b6:98:a5: 78:0d:d9:45:28:eb:93:d9:5f:b7:b5:41:f6:76:fe: 20:b2:4c:db:e4:12:a2:1e:48:21:0c:a3:96:f0:90: ad:eb:3c:24:13:a6:db:d7:0f:11:c7:c6:92:fb:e3: 04:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E3:A1:9A:D6:6A:51:FA:25:34:73:8D:A3:BD:98:93:C8:EE:A3:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b5bfafed-64ea-37e8-b51f-79f4b9e86c93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.211.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:44:07:ad:18:5d:82:f4:41:8e:99:3c:05:90:65:ea:05:dc: 44:d7:ca:5a:bb:f3:06:f6:cf:12:b6:14:1f:a4:5d:41:f7:5f: 03:a6:42:3e:64:f3:67:e5:d3:d8:e3:0c:53:e1:a6:a4:3f:a1: 12:7d:ba:8a:c0:cb:6f:fd:f2:76:cb:92:aa:3d:b4:d8:2c:95: 44:a4:87:8a:06:12:4b:f3:6c:49:b4:b6:90:da:20:e4:be:b1: 94:29:0b:0a:f2:3c:eb:51:f6:aa:1b:e2:da:4f:cd:26:ca:09: 2f:d6:86:c0:58:61:4a:1e:09:85:1e:22:2d:06:7d:2f:b4:ce: 32:bc:5e:48:2f:cf:22:ef:a9:fc:e4:c6:13:ca:17:46:3d:c7: 60:80:5b:5d:ca:f8:e2:d4:5e:43:da:c8:a6:94:6d:27:9a:7b: 91:3c:71:3d:2f:5f:80:56:3f:89:d7:98:85:24:7d:2b:8a:d1: 50:26:4e:e6:07:17:84:83:ff:bb:1e:6d:c4:e0:6d:0b:e9:d8: 7c:91:0d:25:f4:40:20:94:f9:50:70:82:da:df:ad:ca:6d:22: 46:b1:9f:df:7d:bf:ea:2d:ca:44:de:57:6f:4b:2e:1f:9b:c1: d2:e2:f4:ae:6b:74:36:e5:ea:7c:a6:04:00:01:e3:49:bc:e0: 24:2f:34:64 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEruJp2oB86W8IFaFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk ZDdmYmYyNzItMDFmZi00YTUwLWE0NWEtMGY4M2RjY2Y4OTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidvvx4Q4vlpujV8f1b+BtsnYFUIBsKsoSVkr cyRsjpMjhOocu4tZVcwYsvWTsWlxMQ+8HQ5SbznHDTK+dPURCe0iR677GPizOrV8 4dKQw3vss5OZe1dvJ4LnBHRZ3iH8R4Lpe407IjrZjoEGrJC4Q1/mCvgqw6o9/3CA 7PAnZXL2ZFTw45yGg7dDOQMuzeRVGyljvQIy5kHTHEbQUc48qvCyeunuo5l1D2Ay eLJ41gS6i+9ptSchiMc+UsfV/zzK3CkDsCbdVy+CbWDmtZS2mKV4DdlFKOuT2V+3 tUH2dv4gskzb5BKiHkghDKOW8JCt6zwkE6bb1w8Rx8aS++MERQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKfjoZrWalH6JTRzjaO9mJPI7qNqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjViZmFmZWQtNjRlYS0z N2U4LWI1MWYtNzlmNGI5ZTg2YzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG/TgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBVRAetGF2C9EGOmTwFkGXqBdxE18pau/MG9s8SthQfpF1B918DpkI+ ZPNn5dPY4wxT4aakP6ESfbqKwMtv/fJ2y5KqPbTYLJVEpIeKBhJL82xJtLaQ2iDk vrGUKQsK8jzrUfaqG+LaT80mygkv1obAWGFKHgmFHiItBn0vtM4yvF5IL88i76n8 5MYTyhdGPcdggFtdyvji1F5D2simlG0nmnuRPHE9L1+AVj+J15iFJH0ritFQJk7m BxeEg/+7Hm3E4G0L6dh8kQ0l9EAglPlQcILa363KbSJGsZ/ffb/qLcpE3ldvSy4f m8HS4vSua3Q25ep8pgQAAeNJvOAkLzRk -----END CERTIFICATE-----Generated at Sat Aug 23 10:12:13 2025 by rpki-client