$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa File: c9a346b1-e60d-3223-91d4-e14b1326a280.roa (raw, json) Hash identifier: 0GOR7Eq0RDVqzSBzgdsADP8ntHn0K/KnGkWeuaymcAk= Subject key identifier: 2C:0E:82:6C:8A:E6:2F:79:EF:D9:B7:CC:A0:E3:3F:85:A3:95:73:B3 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AF0F141275EECE4E7BA454C00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 212238 IP address blocks: 172.111.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:41:27:5e:ec:e4:e7:ba:45:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=627923d7-79ed-4563-8df4-a75896729132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:af:dc:8c:a1:5b:13:27:48:9e:a8:23:85:65: af:e1:4c:a7:e5:7b:d5:f5:fc:7c:f9:5c:e3:0d:cd: b4:be:93:f6:0c:f3:bd:7b:b5:f9:10:76:06:15:09: 4b:84:aa:65:48:63:c0:49:32:2b:de:f5:81:88:ed: 6b:6f:ed:8a:0f:e3:eb:36:5c:b5:67:6d:fa:ec:ef: 02:67:af:d8:4e:77:5f:0a:c2:13:a6:4c:de:e7:96: 86:2c:e3:7e:92:64:49:44:be:8f:f2:94:b2:27:05: 41:71:4b:0d:8f:d5:f2:c3:b4:d0:07:db:99:d3:42: 51:21:29:72:c1:f8:27:08:fa:bb:41:dd:d5:99:01: 9e:ae:c2:c6:86:eb:de:5f:06:77:5b:eb:fd:77:d1: d1:ca:a2:16:ec:9f:f1:16:4a:a2:e9:2f:60:b2:c6: ef:43:36:69:d9:30:f6:13:25:a0:08:f4:d0:55:a1: f0:0e:00:4e:0c:bf:9c:61:db:97:f8:91:3d:4f:df: 86:64:19:a4:45:55:a5:5d:90:6f:13:7b:f5:3b:3a: ad:53:fd:46:d9:bf:de:75:06:d0:ab:31:09:f0:58: 63:3e:1c:46:67:d8:99:e1:f8:c9:64:1f:88:68:d1: ed:5b:63:c4:a0:4f:24:61:df:0f:50:fe:07:0b:9a: c3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0E:82:6C:8A:E6:2F:79:EF:D9:B7:CC:A0:E3:3F:85:A3:95:73:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9a346b1-e60d-3223-91d4-e14b1326a280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:91:1c:c5:81:90:8a:11:73:4a:ea:ee:af:b9:d1:22:ba:a0: 23:c8:08:7f:d6:6b:03:52:04:7d:27:72:1d:68:a6:5b:32:4d: 8a:59:f9:09:8a:e0:ca:b4:64:e9:92:a9:f3:38:ce:cd:fa:4b: bf:54:d8:ba:48:a8:e6:90:b0:f3:99:a2:67:92:be:dc:f0:97: 4c:a1:ea:75:35:27:78:86:b9:58:c2:0d:46:7c:45:27:0e:e8: 73:af:a8:3b:5c:b0:0d:0c:60:75:11:bb:a1:ab:4f:b7:ef:9f: af:b5:1d:24:88:28:b4:f3:20:dd:48:fb:fe:52:65:14:db:97: 17:1b:d9:08:2f:01:22:8e:85:d7:c2:5c:7a:8c:18:7f:a1:60: 6f:ff:1f:78:05:8f:81:e3:b0:d8:90:de:9a:c3:48:b6:fe:66: 71:4f:88:cb:9c:41:99:a8:38:fa:19:26:82:51:8c:56:ff:a5: 06:b6:db:f5:3f:43:8f:bc:4b:8c:ef:40:8e:1f:b4:85:5e:81: ed:f1:40:3a:0c:0e:55:ab:8f:89:d0:80:4f:1b:e4:bd:76:98: 61:74:7f:9a:13:2f:00:e6:42:b1:98:0f:18:10:d8:f7:f4:79: aa:2b:4e:e2:27:7b:86:c6:a9:9c:3e:be:a1:3b:cd:ab:fc:e0: 78:7a:10:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UEnXuzk57pFTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NjI3OTIzZDctNzllZC00NTYzLThkZjQtYTc1ODk2NzI5MTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq/cjKFbEydInqgjhWWv4Uyn5XvV9fx8+Vzj Dc20vpP2DPO9e7X5EHYGFQlLhKplSGPASTIr3vWBiO1rb+2KD+PrNly1Z2367O8C Z6/YTndfCsITpkze55aGLON+kmRJRL6P8pSyJwVBcUsNj9Xyw7TQB9uZ00JRISly wfgnCPq7Qd3VmQGersLGhuveXwZ3W+v9d9HRyqIW7J/xFkqi6S9gssbvQzZp2TD2 EyWgCPTQVaHwDgBODL+cYduX+JE9T9+GZBmkRVWlXZBvE3v1OzqtU/1G2b/edQbQ qzEJ8FhjPhxGZ9iZ4fjJZB+IaNHtW2PEoE8kYd8PUP4HC5rDewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwOgmyK5i9579m3zKDjP4WjlXOzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzlhMzQ2YjEtZTYwZC0z MjIzLTkxZDQtZTE0YjEzMjZhMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeRHMWBkIoRc0rq7q+50SK6oCPICH/WawNSBH0nch1oplsyTYpZ+QmK 4Mq0ZOmSqfM4zs36S79U2LpIqOaQsPOZomeSvtzwl0yh6nU1J3iGuVjCDUZ8RScO 6HOvqDtcsA0MYHURu6GrT7fvn6+1HSSIKLTzIN1I+/5SZRTblxcb2QgvASKOhdfC XHqMGH+hYG//H3gFj4HjsNiQ3prDSLb+ZnFPiMucQZmoOPoZJoJRjFb/pQa22/U/ Q4+8S4zvQI4ftIVege3xQDoMDlWrj4nQgE8b5L12mGF0f5oTLwDmQrGYDxgQ2Pf0 eaorTuIne4bGqZw+vqE7zav84Hh6EDY= -----END CERTIFICATE-----Generated at Sat Aug 23 15:55:43 2025 by rpki-client