$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc79bc4c-225c-3a7a-a652-cf31f0e216b2.roa File: dc79bc4c-225c-3a7a-a652-cf31f0e216b2.roa (raw, json) Hash identifier: AdsR+mQhW5z/kpmAohgf5ZZTNezFAYwPSl4Aqknbh0o= Subject key identifier: 89:66:01:18:80:63:1A:73:6A:85:2E:A8:C3:F8:E9:E8:BC:0A:B3:9F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AD3A126C3B1AF4EA00909F120 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc79bc4c-225c-3a7a-a652-cf31f0e216b2.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 9009 IP address blocks: 172.111.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:26:c3:b1:af:4e:a0:09:09:f1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=7fb4f2c1-9988-487b-8ee9-128b535a2309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:40:cb:a1:f5:b1:21:bc:99:84:56:43:fb:61: 72:11:82:2d:fb:1b:f7:b3:40:58:d3:9a:ba:e2:aa: 45:69:10:5b:32:f0:39:f2:79:b7:27:b2:2f:e9:d0: 1e:a8:d6:f5:32:8e:b1:13:68:91:a8:7b:37:04:89: d4:dc:f8:37:c4:61:8a:f4:b2:cb:2a:0a:5d:6a:fe: ed:50:9d:b1:da:3c:b3:95:4c:c0:54:f4:a5:60:f2: 79:92:72:c6:73:6a:5d:64:ac:68:cd:c1:93:4e:d0: 09:73:ad:69:42:bf:85:db:79:44:cf:62:2a:1e:c5: 1b:27:41:29:1c:9d:64:5c:83:a9:56:5b:b8:53:be: 6c:c4:d2:e8:af:9e:2a:e8:f7:24:ce:0b:86:b3:40: 2b:4a:85:f8:0d:0b:ec:4c:93:1f:3a:2e:dd:66:c6: 94:3f:82:7d:16:e2:04:d7:71:24:ae:cd:94:f1:1a: 8e:89:7a:77:40:31:89:f2:3f:9a:50:9a:72:5b:0d: 90:f7:16:62:10:be:cc:b5:c8:e9:c1:1f:3d:01:17: 82:68:27:90:0c:41:2b:5e:1b:ae:14:f2:1a:31:c0: 99:ce:68:55:2b:6a:c7:e3:05:cf:e3:80:1c:9d:1c: ac:b1:2b:b8:8b:26:c9:0b:0b:6d:a6:51:ef:af:e1: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:66:01:18:80:63:1A:73:6A:85:2E:A8:C3:F8:E9:E8:BC:0A:B3:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc79bc4c-225c-3a7a-a652-cf31f0e216b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:8d:00:98:52:03:e1:0a:8e:54:b8:f7:81:ca:a0:05:9d:82: e4:20:ef:9b:83:48:71:bf:07:2c:55:fa:8f:aa:b0:53:4e:07: 5b:7d:3b:f2:85:b9:20:62:e1:c1:61:34:af:0d:ab:70:53:bb: 78:cc:06:6a:de:70:78:ab:9f:6e:9c:ba:64:e4:ad:a5:08:d1: 6d:92:b3:56:bb:8b:9a:a9:3d:cb:d0:e1:d3:20:ee:d6:54:26: 93:b2:57:60:a7:a9:79:0c:3d:f1:42:3f:ec:a9:e9:4c:4b:4b: 8b:fe:50:54:4b:d5:eb:e0:36:9d:0f:83:4e:c7:ff:94:51:58: 12:5c:9c:3f:d5:2f:93:39:b2:46:00:43:e3:49:10:ef:a1:3c: 55:75:e4:39:3f:80:6d:cb:b1:10:14:61:f9:d8:f8:cd:ee:d3: db:0b:26:17:ff:8b:71:ef:d8:5d:0b:b8:00:f4:56:ab:55:69: ce:42:1e:d6:cb:fb:25:e1:3c:83:63:03:dc:da:c8:27:3f:12: 3d:48:4f:0b:75:4e:78:a3:32:4a:3c:2d:dd:6a:6b:de:1f:64: c0:4d:4a:e5:ec:8b:da:f1:f3:fd:43:93:89:fd:45:dc:36:f0: f9:b8:d2:01:df:1f:89:8d:8d:da:f9:fd:a1:52:4e:e0:95:72: 54:01:46:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToSbDsa9OoAkJ8SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk N2ZiNGYyYzEtOTk4OC00ODdiLThlZTktMTI4YjUzNWEyMzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUDLofWxIbyZhFZD+2FyEYIt+xv3s0BY05q6 4qpFaRBbMvA58nm3J7Iv6dAeqNb1Mo6xE2iRqHs3BInU3Pg3xGGK9LLLKgpdav7t UJ2x2jyzlUzAVPSlYPJ5knLGc2pdZKxozcGTTtAJc61pQr+F23lEz2IqHsUbJ0Ep HJ1kXIOpVlu4U75sxNLor54q6PckzguGs0ArSoX4DQvsTJMfOi7dZsaUP4J9FuIE 13Ekrs2U8RqOiXp3QDGJ8j+aUJpyWw2Q9xZiEL7MtcjpwR89AReCaCeQDEErXhuu FPIaMcCZzmhVK2rH4wXP44AcnRyssSu4iybJCwttplHvr+HHuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlmARiAYxpzaoUuqMP46ei8CrOfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGM3OWJjNGMtMjI1Yy0z YTdhLWE2NTItY2YzMWYwZTIxNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuNAJhSA+EKjlS494HKoAWdguQg75uDSHG/ByxV+o+qsFNOB1t9O/KF uSBi4cFhNK8Nq3BTu3jMBmrecHirn26cumTkraUI0W2Ss1a7i5qpPcvQ4dMg7tZU JpOyV2CnqXkMPfFCP+yp6UxLS4v+UFRL1evgNp0Pg07H/5RRWBJcnD/VL5M5skYA Q+NJEO+hPFV15Dk/gG3LsRAUYfnY+M3u09sLJhf/i3Hv2F0LuAD0VqtVac5CHtbL +yXhPINjA9zayCc/Ej1ITwt1TnijMko8Ld1qa94fZMBNSuXsi9rx8/1Dk4n9Rdw2 8Pm40gHfH4mNjdr5/aFSTuCVclQBRko= -----END CERTIFICATE-----Generated at Sat Aug 23 08:14:55 2025 by rpki-client