$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c3ada758-be41-3fc4-b13c-2d1df4788bd3.roa File: c3ada758-be41-3fc4-b13c-2d1df4788bd3.roa (raw, json) Hash identifier: JbMbmXsBHKd1RWtzfnGMRq1LwIpERuvLlgSUb1S75yk= Subject key identifier: 40:CC:39:BB:EE:FF:CD:05:5B:06:DE:89:0F:DA:B9:72:5B:6F:03:F2 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6E1FC1D95351480456AC0 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c3ada758-be41-3fc4-b13c-2d1df4788bd3.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 172.111.77.128/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:e1:fc:1d:95:35:14:80:45:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=1f71c11e-9158-445a-9748-92d069776f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:70:4f:f0:76:0a:79:1f:fb:40:4c:77:9f:d4: 2c:69:4c:d0:eb:d7:4e:1a:8d:91:81:20:3b:4f:8e: b1:25:35:77:95:f5:91:d8:73:f9:a0:6c:94:45:05: 3a:7b:7f:f4:6a:a9:7a:73:a2:34:79:ba:15:d0:3c: 3f:7f:2e:6d:f3:10:14:24:56:1b:4d:d9:df:2a:c5: df:e6:d0:0f:1b:11:15:6e:06:b2:4e:5f:af:b4:fd: c2:e0:f4:0c:db:5b:88:0e:e6:28:71:9d:a4:81:55: ed:39:5a:64:a3:28:0a:8a:3b:66:21:7b:1f:d3:ea: fd:f7:b9:21:fb:6b:85:9d:7b:a1:9e:17:99:dd:9e: 58:49:e6:2b:cb:35:a5:0b:97:42:38:83:8f:e5:2c: 50:34:6b:3e:c5:35:89:08:b8:72:88:27:bd:e2:7e: 6a:16:01:d8:5f:a0:55:4f:df:67:0a:bd:05:04:0f: c2:7c:20:de:c1:71:7d:44:e7:6b:7b:0e:77:c1:f0: f4:84:59:e1:58:b4:54:3e:4a:8e:47:f3:70:10:b7: 23:d5:47:50:a8:f5:03:cc:0f:fd:8d:62:ab:bd:95: 22:b1:ae:c2:d9:ef:c8:4e:8a:5f:2d:0e:49:c1:af: be:4e:38:dd:30:86:c4:a3:a5:6e:23:d0:d0:5d:10: e8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CC:39:BB:EE:FF:CD:05:5B:06:DE:89:0F:DA:B9:72:5B:6F:03:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c3ada758-be41-3fc4-b13c-2d1df4788bd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.77.128/26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:8f:69:10:cf:3f:66:78:8f:b5:25:c6:6c:50:4f:5d:e5:eb: 3f:2a:dc:ac:a0:8a:df:5e:a8:23:c7:f4:59:9d:e9:2a:db:de: fc:d1:db:59:5b:ae:23:38:0e:b2:6f:f5:0d:fb:cd:13:62:51: 85:be:2d:ca:bd:30:46:43:2b:07:2d:b3:de:f5:ce:8e:52:6a: 75:18:b0:55:83:89:5b:85:ac:c2:d7:f6:58:e0:c7:c7:04:f9: 6b:b2:42:a1:62:70:6c:e9:39:c8:59:3c:fe:78:c2:45:12:6c: b9:61:67:9d:84:65:83:9d:52:7c:4f:6e:e8:a1:1e:8d:9c:cf: 6c:ac:df:42:61:ff:b5:0f:bc:16:27:49:73:d5:61:f6:ba:7e: 7c:a8:05:7e:a3:39:07:03:24:f9:70:6b:de:93:27:cd:55:68: e3:19:88:f7:95:d9:c1:bf:e3:6f:76:e1:06:b0:f2:19:c0:45: b4:8f:3d:97:34:7d:9b:9c:29:37:4f:e6:e9:fb:eb:ad:ca:38: a7:b1:70:ea:42:fa:ac:76:9c:8e:0f:a8:4e:22:fd:83:a7:f3: 68:8f:64:86:83:5b:bc:1a:03:f9:f7:85:4c:77:bb:20:0b:38: 3d:11:b1:c3:bb:90:03:b5:25:c8:b8:9a:f7:01:43:64:2d:7f: 98:63:f9:d1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1uH8HZU1FIBFasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MWY3MWMxMWUtOTE1OC00NDVhLTk3NDgtOTJkMDY5Nzc2ZjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnBP8HYKeR/7QEx3n9QsaUzQ69dOGo2RgSA7 T46xJTV3lfWR2HP5oGyURQU6e3/0aql6c6I0eboV0Dw/fy5t8xAUJFYbTdnfKsXf 5tAPGxEVbgayTl+vtP3C4PQM21uIDuYocZ2kgVXtOVpkoygKijtmIXsf0+r997kh +2uFnXuhnheZ3Z5YSeYryzWlC5dCOIOP5SxQNGs+xTWJCLhyiCe94n5qFgHYX6BV T99nCr0FBA/CfCDewXF9ROdrew53wfD0hFnhWLRUPkqOR/NwELcj1UdQqPUDzA/9 jWKrvZUisa7C2e/ITopfLQ5Jwa++TjjdMIbEo6VuI9DQXRDoUQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEDMObvu/80FWwbeiQ/auXJbbwPyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYzNhZGE3NTgtYmU0MS0z ZmM0LWIxM2MtMmQxZGY0Nzg4YmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGrG9NgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDj2kQzz9meI+1JcZsUE9d5es/KtysoIrfXqgjx/RZnekq29780dtZ W64jOA6yb/UN+80TYlGFvi3KvTBGQysHLbPe9c6OUmp1GLBVg4lbhazC1/ZY4MfH BPlrskKhYnBs6TnIWTz+eMJFEmy5YWedhGWDnVJ8T27ooR6NnM9srN9CYf+1D7wW J0lz1WH2un58qAV+ozkHAyT5cGvekyfNVWjjGYj3ldnBv+NvduEGsPIZwEW0jz2X NH2bnCk3T+bp++utyjinsXDqQvqsdpyOD6hOIv2Dp/Noj2SGg1u8GgP594VMd7sg Czg9EbHDu5ADtSXIuJr3AUNkLX+YY/nR -----END CERTIFICATE-----Generated at Thu Oct 9 05:43:25 2025 by rpki-client