$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d718e811-5d3b-3e92-94a4-9ad6d104b712.roa File: d718e811-5d3b-3e92-94a4-9ad6d104b712.roa (raw, json) Hash identifier: EX/8P03CM1o+ebtosv8MCjzZQMYq6F0H8E683uGlmiA= Subject key identifier: 95:1C:C4:45:9D:30:B3:66:3B:20:9E:09:78:93:46:21:24:D5:7F:78 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B72C1EE410552707DE0545600 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d718e811-5d3b-3e92-94a4-9ad6d104b712.roa Signing time: Wed 08 Oct 2025 01:00:29 +0000 ROA not before: Wed 08 Oct 2025 01:00:29 +0000 ROA not after: Tue 06 Jan 2026 02:00:29 +0000 asID: 6939 IP address blocks: 172.111.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c1:ee:41:05:52:70:7d:e0:54:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 8 01:00:29 2025 GMT Not After : Jan 6 02:00:29 2026 GMT Subject: CN=efd3565b-800c-462b-a0af-2ccdc0d89c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fa:37:52:9f:f1:95:ab:8a:cb:ee:ae:d1:81: a6:2e:fc:b6:f1:ff:43:b0:f9:68:71:ed:c5:bf:37: 75:36:bd:6c:3a:cf:1a:30:84:1a:cf:5e:4d:b4:d8: 80:43:8d:70:64:88:95:c0:e7:03:4a:ea:81:e9:61: 74:bd:b0:59:71:48:83:6d:9a:e6:95:64:a0:2a:d2: 56:0a:72:41:19:ff:9a:a0:e2:8f:46:27:4b:d1:dd: e2:3e:e2:dc:bc:46:de:9f:de:41:2d:7d:df:99:38: 4c:81:28:df:8f:ed:05:54:93:a0:8c:b6:3e:e9:ec: 52:49:2b:b2:de:a1:51:59:26:1e:ed:61:72:32:de: 54:9f:e2:07:51:68:5a:0b:e4:e0:87:11:e7:7a:57: 10:f3:2f:3a:aa:3e:45:9f:57:02:9d:64:dc:38:15: 33:25:b8:ee:fd:e6:98:5b:dc:8c:11:d3:08:56:65: d9:75:68:7b:b3:54:6c:e8:ac:7c:fc:2e:0d:0d:f5: f8:da:b6:55:1f:a2:e1:a4:5b:9d:da:75:17:99:9e: ae:3b:26:5f:a1:e3:ea:5d:97:4d:73:01:9e:7c:16: a7:dd:d2:77:ee:4f:a6:a5:cb:8f:0e:22:db:b3:3e: 00:25:bb:3c:10:cc:df:65:95:4a:e3:5b:00:d4:e1: 31:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1C:C4:45:9D:30:B3:66:3B:20:9E:09:78:93:46:21:24:D5:7F:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d718e811-5d3b-3e92-94a4-9ad6d104b712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:48:b4:2d:4b:1f:c0:9c:07:1a:ad:1c:20:0c:de:8c:ff:5a: f3:a4:c9:c5:db:98:df:e0:8b:90:f7:ed:72:e7:46:72:17:79: fe:9e:c9:1a:39:b0:3e:52:bb:1a:57:f3:f3:eb:57:9d:cd:a0: fe:bb:90:fd:ad:f3:fb:5e:47:91:f6:ba:6a:61:2a:5d:9e:2c: 6a:19:4a:5d:35:84:75:b0:c6:b6:56:c3:d9:82:f5:6c:83:26: 06:95:06:30:49:12:50:76:d1:41:e0:1e:d5:89:03:1d:a4:28: 04:c3:81:18:57:7c:73:70:9c:89:55:53:9c:2a:c2:72:01:e6: 90:79:97:96:83:70:3b:ba:64:7b:6c:14:99:f3:71:6b:ff:24: 21:79:58:ef:55:11:cc:40:e3:16:37:0d:1f:b2:3b:60:37:2e: d8:90:e1:99:06:b1:ab:e2:64:7b:cb:b4:fc:fb:d4:91:6c:eb: 03:80:ef:54:d1:89:4e:65:fd:b1:a6:35:f8:36:62:a9:e9:f0: c1:ef:82:d3:38:d4:9e:b9:8a:d1:01:2d:fa:51:36:91:5c:ee: c4:02:25:dc:b9:fd:a5:ed:46:a4:89:7d:45:aa:8d:a8:a8:e6: 37:98:c7:db:19:d3:d1:68:43:bf:20:71:55:fb:c1:b0:ed:35: 7b:8d:01:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtywe5BBVJwfeBUVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk ZWZkMzU2NWItODAwYy00NjJiLWEwYWYtMmNjZGMwZDg5YzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPo3Up/xlauKy+6u0YGmLvy28f9DsPloce3F vzd1Nr1sOs8aMIQaz15NtNiAQ41wZIiVwOcDSuqB6WF0vbBZcUiDbZrmlWSgKtJW CnJBGf+aoOKPRidL0d3iPuLcvEben95BLX3fmThMgSjfj+0FVJOgjLY+6exSSSuy 3qFRWSYe7WFyMt5Un+IHUWhaC+TghxHnelcQ8y86qj5Fn1cCnWTcOBUzJbju/eaY W9yMEdMIVmXZdWh7s1Rs6Kx8/C4NDfX42rZVH6LhpFud2nUXmZ6uOyZfoePqXZdN cwGefBan3dJ37k+mpcuPDiLbsz4AJbs8EMzfZZVK41sA1OExbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUcxEWdMLNmOyCeCXiTRiEk1X94MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDcxOGU4MTEtNWQzYi0z ZTkyLTk0YTQtOWFkNmQxMDRiNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBItC1LH8CcBxqtHCAM3oz/WvOkycXbmN/gi5D37XLnRnIXef6eyRo5 sD5SuxpX8/PrV53NoP67kP2t8/teR5H2umphKl2eLGoZSl01hHWwxrZWw9mC9WyD JgaVBjBJElB20UHgHtWJAx2kKATDgRhXfHNwnIlVU5wqwnIB5pB5l5aDcDu6ZHts FJnzcWv/JCF5WO9VEcxA4xY3DR+yO2A3LtiQ4ZkGsaviZHvLtPz71JFs6wOA71TR iU5l/bGmNfg2Yqnp8MHvgtM41J65itEBLfpRNpFc7sQCJdy5/aXtRqSJfUWqjaio 5jeYx9sZ09FoQ78gcVX7wbDtNXuNAe4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:29 2025 by rpki-client