$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8c4b65fb-eb70-3028-9f58-de8f80565386.roa File: 8c4b65fb-eb70-3028-9f58-de8f80565386.roa (raw, json) Hash identifier: /WOE3EnfXoaobX26NABGKp9IPAc6zYcFAt4S1s+C7UM= Subject key identifier: 1D:47:0F:E2:14:38:5E:7F:AD:9B:D2:4F:AD:6D:AE:23:6E:83:7C:53 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6DDC1014BA3D74C0DECC0 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8c4b65fb-eb70-3028-9f58-de8f80565386.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 172.111.121.32/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:dd:c1:01:4b:a3:d7:4c:0d:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=52981aa3-d0a2-40da-8d59-d9f2d5a3e26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:86:74:94:51:c4:c1:3f:31:2e:e5:c4:70:d2: b3:79:1c:bc:3f:b3:96:d6:27:f0:66:21:b3:49:cc: 54:c4:4a:3d:0a:de:3c:33:a3:07:cc:b5:bd:22:56: f2:26:86:fc:83:cc:00:a0:f4:45:81:95:75:43:e5: 9f:99:5e:fa:e9:fe:a5:60:43:20:b6:66:6e:7b:80: 2c:b3:f5:4c:cb:b1:ac:b3:8c:ab:c1:aa:25:2b:0c: ad:78:44:b4:25:c4:e5:84:d6:e5:7d:aa:04:0b:93: df:32:ec:05:59:7f:6f:13:cb:8f:80:b4:bb:f2:5a: 47:49:05:9f:7f:9b:9d:ad:19:1a:71:e2:96:91:d9: e0:9d:1e:ee:fd:f6:7d:46:f7:48:d1:ad:e7:de:a7: 7d:a1:9d:b9:5e:d4:d8:28:1a:e1:6e:dd:32:8f:9a: 66:81:c3:a7:c6:15:a5:53:14:0b:ea:d5:ab:61:6b: 7b:6c:40:41:1d:93:6a:03:82:dd:10:79:72:8a:87: 40:cf:69:16:13:b6:2a:98:91:8a:66:7c:70:7e:00: 77:64:9d:51:0f:3d:4c:18:d4:a2:fd:c8:4f:be:0a: 9c:88:d8:b5:4f:5b:7b:fd:41:a9:96:30:4b:a4:dc: b3:33:55:bf:3a:c6:80:e0:8c:ad:d7:aa:91:13:41: 4c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:47:0F:E2:14:38:5E:7F:AD:9B:D2:4F:AD:6D:AE:23:6E:83:7C:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8c4b65fb-eb70-3028-9f58-de8f80565386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.121.32/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b7:f4:0c:a7:55:ab:eb:0f:15:5f:4e:d5:76:c1:43:ec:c8: 75:12:95:dd:a9:ad:f0:38:c1:05:e8:8a:e0:54:15:39:c1:2e: a6:01:1a:1b:39:bd:0d:b3:23:1b:0e:6e:4c:76:34:0c:ac:f3: 67:1c:25:23:31:da:d2:58:92:f7:ca:f2:29:5b:ee:18:f6:5b: 0d:84:d5:ed:a1:12:b6:2a:c7:81:d5:6d:0c:5b:23:2b:c4:7e: b7:ff:14:d3:aa:26:da:44:82:37:98:34:f8:36:e1:f3:0d:60: 1c:85:2b:5b:b1:a0:c3:c9:14:f2:4f:ff:6b:38:1a:03:dd:ce: ec:38:26:68:39:bb:bb:8d:ca:0b:f5:63:a6:fb:8d:3b:0c:6b: b7:ed:19:08:36:f4:2d:37:92:1f:e2:3d:c8:16:0b:7d:5f:f7: 75:cf:71:5d:47:c3:af:e9:cd:3e:7f:96:fa:25:34:12:91:a1: f2:42:9e:0c:c3:d0:2b:6a:64:cc:95:88:c3:f9:fe:55:50:23: 96:0f:c5:2e:1a:a7:10:16:d3:e7:09:51:83:ec:05:35:a5:b1: 89:96:83:8d:0b:8b:48:3e:be:8d:92:3d:88:85:81:6a:ae:cc: 23:0c:c7:40:fc:5b:d3:97:c3:46:be:8d:ea:9a:26:30:8c:a8: 6b:36:3d:fd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1t3BAUuj10wN7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NTI5ODFhYTMtZDBhMi00MGRhLThkNTktZDlmMmQ1YTNlMjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4Z0lFHEwT8xLuXEcNKzeRy8P7OW1ifwZiGz ScxUxEo9Ct48M6MHzLW9IlbyJob8g8wAoPRFgZV1Q+WfmV766f6lYEMgtmZue4As s/VMy7Gss4yrwaolKwyteES0JcTlhNblfaoEC5PfMuwFWX9vE8uPgLS78lpHSQWf f5udrRkaceKWkdngnR7u/fZ9RvdI0a3n3qd9oZ25XtTYKBrhbt0yj5pmgcOnxhWl UxQL6tWrYWt7bEBBHZNqA4LdEHlyiodAz2kWE7YqmJGKZnxwfgB3ZJ1RDz1MGNSi /chPvgqciNi1T1t7/UGpljBLpNyzM1W/OsaA4Iyt16qRE0FMqwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB1HD+IUOF5/rZvST61triNug3xTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvOGM0YjY1ZmItZWI3MC0z MDI4LTlmNTgtZGU4ZjgwNTY1Mzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFrG95IDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA/t/QMp1Wr6w8VX07VdsFD7Mh1EpXdqa3wOMEF6IrgVBU5wS6mARob Ob0NsyMbDm5MdjQMrPNnHCUjMdrSWJL3yvIpW+4Y9lsNhNXtoRK2KseB1W0MWyMr xH63/xTTqibaRII3mDT4NuHzDWAchStbsaDDyRTyT/9rOBoD3c7sOCZoObu7jcoL 9WOm+407DGu37RkINvQtN5If4j3IFgt9X/d1z3FdR8Ov6c0+f5b6JTQSkaHyQp4M w9AramTMlYjD+f5VUCOWD8UuGqcQFtPnCVGD7AU1pbGJloONC4tIPr6Nkj2IhYFq rswjDMdA/FvTl8NGvo3qmiYwjKhrNj39 -----END CERTIFICATE-----Generated at Thu Oct 9 05:49:25 2025 by rpki-client