$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa File: f3a11e3c-29b8-3899-a1d3-970745a11a14.roa (raw, json) Hash identifier: wxhX2x//S6P9NlTH55N1PL5Wyc8hVokO+0kmIeyD09o= Subject key identifier: B2:B1:F9:99:6E:7D:14:A7:AF:7E:D9:EE:87:AA:A3:EF:8C:50:23:AE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B6A61EEC7D6975A8B59627AC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 16509 IP address blocks: 172.111.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:ee:c7:d6:97:5a:8b:59:62:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=2d84df16-46d6-40de-aa81-8013954a5cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:68:bc:f9:f1:95:39:20:22:24:b1:13:04:9d: 7d:4d:d2:ee:7f:25:01:49:88:ad:96:5b:d4:8b:48: bb:ad:a2:3f:8b:1e:ff:1e:85:da:b9:55:f9:27:49: 0a:71:40:72:2f:5f:89:b1:8e:ca:af:6d:a9:2b:e6: ad:a6:1f:04:25:06:53:43:41:1c:a6:e1:c5:d3:45: f9:cb:38:e6:ce:fc:0e:94:c4:20:80:c2:b1:ce:8b: 00:81:a7:ec:3f:54:e4:06:3b:99:be:e4:f1:1b:53: 7e:69:34:2f:69:a1:25:16:91:54:c8:a8:0e:e2:50: fb:b5:a0:e0:6e:81:30:0a:73:3b:28:52:2c:7e:ac: 46:da:37:41:f5:b9:3c:bd:de:04:99:6a:a0:7b:85: 06:66:15:e6:00:82:9b:47:02:75:11:91:28:5d:2a: 6b:9e:47:75:10:2a:6a:94:4c:42:2e:3c:d8:4c:a4: de:88:7e:00:f0:c4:22:2d:1a:0e:ee:4b:6b:98:be: 73:3f:9a:f3:bc:37:b7:01:e9:51:ae:a7:58:93:54: 84:5b:97:17:5b:36:f8:e9:b6:c2:91:d0:b3:c9:b8: f9:c2:f7:59:19:b6:0c:3f:68:f4:ef:06:84:41:0c: 12:ef:72:6a:9d:45:bb:ef:bd:11:cc:f4:78:25:6e: 9c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B1:F9:99:6E:7D:14:A7:AF:7E:D9:EE:87:AA:A3:EF:8C:50:23:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f3a11e3c-29b8-3899-a1d3-970745a11a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:d1:b2:71:9e:ef:0a:37:d4:a5:19:aa:40:76:e4:94:42:9d: 8a:a1:bb:ed:0b:90:83:75:5e:04:b4:c0:64:f2:48:fa:51:67: ae:dd:d8:71:fa:ef:ef:49:38:1c:eb:08:f8:0b:ee:c5:58:c2: b6:e6:89:23:ed:f9:2a:03:50:02:4a:9d:05:51:d6:8a:41:35: ff:32:fd:b0:88:e7:3c:72:be:5f:62:8c:40:1d:23:12:c6:6d: c1:f2:da:2e:b8:45:fb:f9:f9:f0:f2:15:ed:6e:58:41:4e:11: 9a:31:7e:64:ae:dd:e5:eb:79:dc:c0:d0:f1:1b:87:94:21:ad: fa:c0:93:6a:a9:0c:57:19:bb:ee:98:ca:14:83:24:68:96:b9: 3d:ab:34:df:e4:fa:aa:bd:45:24:de:54:02:af:93:9d:0d:a0: fc:f4:8d:da:12:21:70:45:2b:d7:69:86:1c:f6:53:91:6d:f0: d0:84:2a:92:e3:47:f2:83:7e:75:6d:0e:e7:91:20:4e:4c:f5: d7:3e:36:80:6c:20:0c:76:35:ea:09:3e:c2:5c:a5:f2:1f:f7: ec:87:4b:e1:6e:9d:4c:2e:af:11:5f:07:62:5f:98:13:01:1d: ba:c0:7e:db:c2:e3:d0:2d:53:b5:46:f6:a0:fa:07:fd:f4:ec: c1:f9:1a:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYe7H1pdai1liesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MmQ4NGRmMTYtNDZkNi00MGRlLWFhODEtODAxMzk1NGE1Y2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2i8+fGVOSAiJLETBJ19TdLufyUBSYitllvU i0i7raI/ix7/HoXauVX5J0kKcUByL1+JsY7Kr22pK+atph8EJQZTQ0EcpuHF00X5 yzjmzvwOlMQggMKxzosAgafsP1TkBjuZvuTxG1N+aTQvaaElFpFUyKgO4lD7taDg boEwCnM7KFIsfqxG2jdB9bk8vd4EmWqge4UGZhXmAIKbRwJ1EZEoXSprnkd1ECpq lExCLjzYTKTeiH4A8MQiLRoO7ktrmL5zP5rzvDe3AelRrqdYk1SEW5cXWzb46bbC kdCzybj5wvdZGbYMP2j07waEQQwS73JqnUW7770RzPR4JW6cNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKx+ZlufRSnr37Z7oeqo++MUCOuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjNhMTFlM2MtMjliOC0z ODk5LWExZDMtOTcwNzQ1YTExYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfRsnGe7wo31KUZqkB25JRCnYqhu+0LkIN1XgS0wGTySPpRZ67d2HH6 7+9JOBzrCPgL7sVYwrbmiSPt+SoDUAJKnQVR1opBNf8y/bCI5zxyvl9ijEAdIxLG bcHy2i64Rfv5+fDyFe1uWEFOEZoxfmSu3eXredzA0PEbh5QhrfrAk2qpDFcZu+6Y yhSDJGiWuT2rNN/k+qq9RSTeVAKvk50NoPz0jdoSIXBFK9dphhz2U5Ft8NCEKpLj R/KDfnVtDueRIE5M9dc+NoBsIAx2NeoJPsJcpfIf9+yHS+FunUwurxFfB2JfmBMB HbrAftvC49AtU7VG9qD6B/307MH5Goc= -----END CERTIFICATE-----Generated at Mon Oct 20 07:49:45 2025 by rpki-client