$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa File: e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa (raw, json) Hash identifier: IysRckC1NIRazVCDitCmDvYVUl6DhGOkt9M9ef6XmYk= Subject key identifier: B3:CB:99:65:60:49:6E:63:1D:14:2A:02:C0:79:67:87:E0:DE:3C:CC Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AF0F1409D2329132C5A49E980 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 212238 IP address blocks: 172.111.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:40:9d:23:29:13:2c:5a:49:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=8a5ae2ee-3f76-4652-8c7c-bdf2d82a0bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:08:7b:1a:98:a7:27:43:2b:d9:6c:fb:13:b1: ae:de:7e:9c:e9:2e:56:00:55:81:4b:0b:cb:69:24: 80:58:e2:7f:2e:fb:96:ea:d1:ff:4e:86:d1:d2:64: 9f:19:46:f8:c1:9f:59:d6:24:d4:93:c0:db:0b:73: cc:0a:2c:03:71:f4:6c:8d:80:46:4a:d0:cf:e3:d7: 37:12:a4:d7:82:3a:f3:53:f8:8d:6d:84:b1:13:ab: 23:9d:8c:8d:33:8c:d2:23:b4:70:19:02:31:8a:97: 06:86:9d:40:52:05:f4:25:48:ee:95:37:63:d4:15: 7a:a5:f7:b5:ab:c4:92:fd:8d:4b:07:52:39:6e:26: 9b:77:56:02:8a:e6:ae:6b:4b:a4:4a:7b:84:b2:62: 1e:c3:03:71:40:b5:98:45:4c:28:f1:87:d0:6f:7c: 63:a8:92:8b:e1:19:70:ef:7f:82:dd:d6:62:2f:92: 47:6d:ee:30:b8:81:c8:6a:48:f9:46:71:68:67:a0: 6f:0d:5e:73:c8:4d:33:b5:17:f0:0f:d2:3c:87:6c: 82:e5:3f:63:23:01:ab:2a:df:c1:3b:dc:b9:2b:eb: d9:05:99:a5:e6:22:d0:6a:48:61:cb:44:89:80:04: 4e:86:cc:4c:24:06:7d:10:f9:c6:97:0c:e9:c9:3c: f1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CB:99:65:60:49:6E:63:1D:14:2A:02:C0:79:67:87:E0:DE:3C:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:2d:22:0f:bb:f7:80:e8:5c:49:81:b4:b4:fd:7a:09:10:7a: f9:ba:55:d4:e9:33:48:b7:a1:89:a6:f7:5a:b9:97:ab:4e:b5: 4e:56:9a:1f:b6:c9:9c:44:8c:7e:45:6c:b9:b6:92:c8:54:fe: bd:bb:c5:20:7e:05:29:03:6b:c6:94:e5:c8:18:e0:b9:84:95: ee:de:0f:4c:26:3d:57:80:06:60:8d:fa:65:44:cc:05:c0:b4: c7:f6:1a:0f:0d:21:d4:ac:25:4f:0f:22:95:bb:f2:9b:59:24: c4:45:c3:f5:52:b9:10:ee:03:d2:81:a4:1b:69:b2:44:84:72: 73:5a:7a:00:83:b5:e7:59:b1:59:5f:1c:07:e7:54:44:54:28: 7f:5c:28:a5:0a:6f:81:8c:62:92:63:b9:4f:70:ef:a9:0e:d4: 73:3e:d8:81:8c:a7:87:46:47:15:81:c4:0b:b1:ef:da:69:b4: f0:eb:ca:19:54:a3:f2:05:f1:97:c8:9a:3c:5f:e3:11:a4:47: ea:e1:7a:07:57:4d:5c:7c:a3:bf:ca:79:58:cc:e3:f8:45:73: 2a:47:c1:c9:97:ad:ef:eb:ee:e8:8c:02:3d:66:6b:6b:35:0d: ad:6b:97:c6:4f:20:0f:50:d2:dc:8f:48:a2:49:6c:0b:e3:b1: e4:03:0d:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UCdIykTLFpJ6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk OGE1YWUyZWUtM2Y3Ni00NjUyLThjN2MtYmRmMmQ4MmEwYmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwh7GpinJ0Mr2Wz7E7Gu3n6c6S5WAFWBSwvL aSSAWOJ/LvuW6tH/TobR0mSfGUb4wZ9Z1iTUk8DbC3PMCiwDcfRsjYBGStDP49c3 EqTXgjrzU/iNbYSxE6sjnYyNM4zSI7RwGQIxipcGhp1AUgX0JUjulTdj1BV6pfe1 q8SS/Y1LB1I5biabd1YCiuaua0ukSnuEsmIewwNxQLWYRUwo8YfQb3xjqJKL4Rlw 73+C3dZiL5JHbe4wuIHIakj5RnFoZ6BvDV5zyE0ztRfwD9I8h2yC5T9jIwGrKt/B O9y5K+vZBZml5iLQakhhy0SJgAROhsxMJAZ9EPnGlwzpyTzxKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPLmWVgSW5jHRQqAsB5Z4fg3jzMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTg5NmIyYTUtMjljZC0z NDJmLWIxMmEtOGYxZmY3NmQwYTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYtIg+794DoXEmBtLT9egkQevm6VdTpM0i3oYmm91q5l6tOtU5Wmh+2 yZxEjH5FbLm2kshU/r27xSB+BSkDa8aU5cgY4LmEle7eD0wmPVeABmCN+mVEzAXA tMf2Gg8NIdSsJU8PIpW78ptZJMRFw/VSuRDuA9KBpBtpskSEcnNaegCDtedZsVlf HAfnVERUKH9cKKUKb4GMYpJjuU9w76kO1HM+2IGMp4dGRxWBxAux79pptPDryhlU o/IF8ZfImjxf4xGkR+rhegdXTVx8o7/KeVjM4/hFcypHwcmXre/r7uiMAj1ma2s1 Da1rl8ZPIA9Q0tyPSKJJbAvjseQDDWY= -----END CERTIFICATE-----Generated at Sat Aug 23 17:59:45 2025 by rpki-client