$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fa4baba2-ad13-39ff-a4ba-82e0196bc80d.roa File: fa4baba2-ad13-39ff-a4ba-82e0196bc80d.roa (raw, json) Hash identifier: jyiV6LmioclMWAocrWvNDJ7W0zN4VNWGX3vlS7Pmpk0= Subject key identifier: 59:8A:E1:2F:40:D4:30:0C:19:F4:E8:AD:AD:24:5C:63:06:18:B6:81 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6E5AAD58560510415D100 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fa4baba2-ad13-39ff-a4ba-82e0196bc80d.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 172.111.71.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:e5:aa:d5:85:60:51:04:15:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=75b59923-5889-4cdf-8807-797250634035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:eb:04:49:ee:e4:b4:35:a3:16:0f:14:6c:94: fc:b0:6f:8d:c9:bd:9f:b8:b1:6c:73:ad:b2:9b:a5: 91:6e:10:8b:59:53:0e:33:8d:be:00:25:34:74:e6: f8:e6:84:37:c6:c9:b7:4c:a3:17:e3:a9:7c:7c:18: be:bd:64:a8:b2:f9:5e:e4:26:76:4a:f7:e3:06:c5: 76:23:27:57:b4:da:d1:24:73:8d:c4:be:c3:aa:41: 6c:25:27:86:a7:e5:e1:08:b1:21:c5:87:c4:c2:4c: fd:f1:ce:87:aa:24:36:a5:54:b2:7c:26:f4:07:64: 9f:a7:b8:bd:97:6a:d0:85:ac:9c:79:f2:b4:81:d3: 69:64:70:99:1b:98:6b:22:af:0b:b6:04:4e:05:11: 5a:89:e0:51:ec:f9:72:07:09:40:d6:e5:f9:ba:3a: 62:d1:e9:0b:29:96:8e:b0:c5:19:a3:ed:2d:ff:d6: 40:cb:08:c3:2b:64:10:a0:20:26:80:cf:22:7e:91: 9f:dd:92:00:d5:5c:8d:b5:40:d7:f6:9a:27:2c:62: 44:d5:6f:a7:fb:ac:7d:67:ef:68:79:96:3d:9b:03: c9:c3:35:61:43:ce:45:78:a2:15:2d:eb:90:7b:8b: 43:87:76:00:14:90:11:91:40:81:d5:49:b1:c5:ef: 4b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8A:E1:2F:40:D4:30:0C:19:F4:E8:AD:AD:24:5C:63:06:18:B6:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fa4baba2-ad13-39ff-a4ba-82e0196bc80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.71.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a7:09:6d:91:16:43:51:da:68:a0:86:4e:e3:0c:1c:5b:f6: f0:52:ba:7d:e1:96:24:5b:1d:27:c7:17:ce:6a:87:5e:fa:6e: db:c1:25:bf:47:f4:d6:84:62:00:99:78:03:05:c8:fd:e6:65: 2b:91:00:a5:6f:91:76:5b:da:c6:88:eb:20:af:a9:d8:6a:eb: 4d:c1:73:be:7d:b6:db:ea:01:60:92:9b:2e:26:ef:b9:27:27: 03:35:7d:20:08:93:f3:78:c5:42:aa:a2:df:98:08:94:45:33: 2c:6f:92:8e:c3:6e:eb:6f:b9:90:c8:5d:9b:45:e7:81:82:a2: 6d:f7:59:46:b0:21:0e:70:0e:35:47:53:a3:b1:6d:42:8a:ac: 69:77:cb:d4:c4:93:19:df:52:e2:57:94:c3:92:a2:54:43:8d: 89:75:0f:09:9b:ac:d2:d0:97:e1:ab:b7:74:39:6b:d4:67:86: a2:0a:8a:af:4c:8a:f8:73:df:11:3a:89:da:de:76:14:08:21: 96:75:ec:a0:d4:10:05:02:22:d2:b5:c0:eb:38:75:8e:4d:d7: ab:e3:b6:cb:06:96:ce:76:08:d5:30:08:e7:29:d3:6a:70:f6: 3f:b0:81:c8:ea:64:07:56:33:a3:e2:3d:c2:e9:46:56:f7:a1: ad:12:78:e9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1uWq1YVgUQQV0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NzViNTk5MjMtNTg4OS00Y2RmLTg4MDctNzk3MjUwNjM0MDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqusESe7ktDWjFg8UbJT8sG+Nyb2fuLFsc62y m6WRbhCLWVMOM42+ACU0dOb45oQ3xsm3TKMX46l8fBi+vWSosvle5CZ2SvfjBsV2 IydXtNrRJHONxL7DqkFsJSeGp+XhCLEhxYfEwkz98c6HqiQ2pVSyfCb0B2Sfp7i9 l2rQhaycefK0gdNpZHCZG5hrIq8LtgROBRFaieBR7PlyBwlA1uX5ujpi0ekLKZaO sMUZo+0t/9ZAywjDK2QQoCAmgM8ifpGf3ZIA1VyNtUDX9ponLGJE1W+n+6x9Z+9o eZY9mwPJwzVhQ85FeKIVLeuQe4tDh3YAFJARkUCB1Umxxe9LzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFmK4S9A1DAMGfTora0kXGMGGLaBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZmE0YmFiYTItYWQxMy0z OWZmLWE0YmEtODJlMDE5NmJjODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG9HADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBpwltkRZDUdpooIZO4wwcW/bwUrp94ZYkWx0nxxfOaode+m7bwSW/ R/TWhGIAmXgDBcj95mUrkQClb5F2W9rGiOsgr6nYautNwXO+fbbb6gFgkpsuJu+5 JycDNX0gCJPzeMVCqqLfmAiURTMsb5KOw27rb7mQyF2bReeBgqJt91lGsCEOcA41 R1OjsW1Ciqxpd8vUxJMZ31LiV5TDkqJUQ42JdQ8Jm6zS0Jfhq7d0OWvUZ4aiCoqv TIr4c98ROona3nYUCCGWdeyg1BAFAiLStcDrOHWOTder47bLBpbOdgjVMAjnKdNq cPY/sIHI6mQHVjOj4j3C6UZW96GtEnjp -----END CERTIFICATE-----Generated at Thu Oct 9 05:46:12 2025 by rpki-client