$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d91bce70-3338-3cff-bbfc-6badcdad4df1.roa File: d91bce70-3338-3cff-bbfc-6badcdad4df1.roa (raw, json) Hash identifier: mvStw40lJCsrNUYghxKKPlU5COkijbJGzgI7OmMgyj0= Subject key identifier: 09:72:2C:B5:C1:41:1A:BA:BD:9B:D3:F0:64:32:6B:CF:76:6C:D0:90 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6E55D52D4B0DCC0B4EA00 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d91bce70-3338-3cff-bbfc-6badcdad4df1.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 172.111.66.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:e5:5d:52:d4:b0:dc:c0:b4:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=c161e4c1-018d-4b8f-8882-2e1b185c0c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a6:bd:bb:29:73:72:9c:57:ca:5b:93:39:b1: 66:84:4b:c8:fd:1c:b6:57:78:c6:3f:66:b5:a9:b6: 1b:5e:2b:0e:ac:cd:d6:12:f9:b6:f1:66:0d:9b:1d: e3:38:14:32:13:77:da:a5:ba:e7:08:85:58:80:02: 83:59:dd:05:66:80:3c:41:04:5b:b4:9f:1b:71:76: 8f:e1:85:b3:d2:46:37:6e:b0:2f:a2:31:78:d8:c0: b2:ad:7f:84:10:b3:bf:12:66:06:b7:ad:07:29:c4: 5a:11:9a:48:cc:75:1a:08:7c:2c:a7:6e:46:df:24: 2b:21:fc:bd:69:9a:54:9c:33:4b:ee:b6:be:40:98: 19:2e:51:8e:b2:a4:2e:18:86:fb:8b:76:33:d8:b4: bc:ec:62:39:55:1c:6e:d3:74:4b:f3:bc:29:cc:62: 57:a6:8c:fe:6b:c4:64:28:15:85:ff:ee:72:7b:55: 4a:45:42:15:57:93:79:86:c9:76:c4:d5:7b:8f:81: 5d:ca:03:de:13:69:e6:91:8c:9d:3d:a7:fe:c1:b4: 23:be:b8:12:52:5f:0d:c0:ab:da:d9:fd:89:ef:63: e2:92:67:d0:ed:ad:c2:e6:b9:de:eb:25:bc:b1:f2: 91:3b:1f:6c:35:cf:85:0d:97:2a:7d:99:aa:bf:ed: 3d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:72:2C:B5:C1:41:1A:BA:BD:9B:D3:F0:64:32:6B:CF:76:6C:D0:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d91bce70-3338-3cff-bbfc-6badcdad4df1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.66.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:31:05:8c:98:ee:fa:cd:53:b8:fe:d4:49:40:ad:f1:b8:f8: 9e:10:62:71:5b:62:b0:e8:89:72:06:28:f3:7d:19:57:91:91: ac:74:73:9b:71:ad:6c:9b:d7:1e:6d:fb:71:67:d4:4a:3a:3b: b7:3c:c3:4c:28:3c:ee:5e:eb:72:8d:f1:d7:dc:dd:8a:36:8c: 0f:94:c8:ec:b0:21:61:10:61:bb:c1:35:48:15:4d:20:ba:e4: 0b:13:80:b1:b5:ea:53:6a:6f:c8:b8:e5:e0:7d:2f:99:a9:67: f1:39:f1:cc:fc:13:74:e6:f3:f8:12:c3:dd:7a:76:b6:6a:20: 4f:b9:f1:14:5e:5e:95:23:87:1d:75:fe:68:e7:e5:f6:07:f4: 17:8f:f7:a1:eb:aa:4a:e7:ad:90:99:b8:2d:e2:7f:e6:5a:ed: 4f:9b:2b:02:8b:9b:9d:13:36:ea:28:c1:ee:2b:fd:8d:8b:65: 36:67:22:16:2a:d8:08:8d:15:7f:93:2e:7a:0e:43:1a:d5:ce: b9:cf:d9:1e:aa:25:a3:08:e0:89:f7:45:2c:fd:c3:29:f0:de: bd:76:18:d4:f1:85:28:dc:2b:6b:ac:3b:4a:f2:c4:9e:3e:4a: 13:0c:7d:10:fc:8c:d5:ca:1b:f2:62:6a:7e:19:94:c7:48:c8: 15:ad:a1:03 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1uVdUtSw3MC06gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YzE2MWU0YzEtMDE4ZC00YjhmLTg4ODItMmUxYjE4NWMwYzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaa9uylzcpxXyluTObFmhEvI/Ry2V3jGP2a1 qbYbXisOrM3WEvm28WYNmx3jOBQyE3fapbrnCIVYgAKDWd0FZoA8QQRbtJ8bcXaP 4YWz0kY3brAvojF42MCyrX+EELO/EmYGt60HKcRaEZpIzHUaCHwsp25G3yQrIfy9 aZpUnDNL7ra+QJgZLlGOsqQuGIb7i3Yz2LS87GI5VRxu03RL87wpzGJXpoz+a8Rk KBWF/+5ye1VKRUIVV5N5hsl2xNV7j4FdygPeE2nmkYydPaf+wbQjvrgSUl8NwKva 2f2J72PikmfQ7a3C5rne6yW8sfKROx9sNc+FDZcqfZmqv+098wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAlyLLXBQRq6vZvT8GQya892bNCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZDkxYmNlNzAtMzMzOC0z Y2ZmLWJiZmMtNmJhZGNkYWQ0ZGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG9CgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB9MQWMmO76zVO4/tRJQK3xuPieEGJxW2Kw6IlyBijzfRlXkZGsdHOb ca1sm9cebftxZ9RKOju3PMNMKDzuXutyjfHX3N2KNowPlMjssCFhEGG7wTVIFU0g uuQLE4CxtepTam/IuOXgfS+ZqWfxOfHM/BN05vP4EsPdena2aiBPufEUXl6VI4cd df5o5+X2B/QXj/eh66pK562Qmbgt4n/mWu1PmysCi5udEzbqKMHuK/2Ni2U2ZyIW KtgIjRV/ky56DkMa1c65z9keqiWjCOCJ90Us/cMp8N69dhjU8YUo3CtrrDtK8sSe PkoTDH0Q/IzVyhvyYmp+GZTHSMgVraED -----END CERTIFICATE-----Generated at Thu Oct 9 05:46:13 2025 by rpki-client