$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0d40a379-e0fd-36f4-b0c0-87f4bbf32da2.roa File: 0d40a379-e0fd-36f4-b0c0-87f4bbf32da2.roa (raw, json) Hash identifier: xdPnRSxHT2o/hipdmTXLRcRekNSQ/uLIZVI0BBbtvKY= Subject key identifier: 2B:AE:AD:45:2D:90:78:51:1D:68:AC:C6:A2:EA:36:7F:F0:03:7E:4F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B36CAF411FB0CE38EDC412420 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0d40a379-e0fd-36f4-b0c0-87f4bbf32da2.roa Signing time: Tue 16 Sep 2025 13:30:17 +0000 ROA not before: Tue 16 Sep 2025 13:30:17 +0000 ROA not after: Mon 15 Dec 2025 14:30:17 +0000 asID: 9009 IP address blocks: 172.111.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:ca:f4:11:fb:0c:e3:8e:dc:41:24:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 16 13:30:17 2025 GMT Not After : Dec 15 14:30:17 2025 GMT Subject: CN=a23ef257-3985-417c-b416-3934f27e1925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ae:ff:2b:d8:40:02:41:28:08:72:f4:53:81: 2f:f0:ca:a6:e5:0b:91:a4:e7:5c:14:35:1e:5d:32: 49:40:8c:db:55:26:05:d0:5b:c7:4d:65:41:d3:7c: cc:d4:89:e2:09:1c:ee:13:cb:68:e7:4a:45:1a:4b: b4:2c:07:64:a2:01:29:17:2b:ef:9c:e8:05:98:a9: 67:91:74:30:93:a2:6b:f9:c9:d1:08:a4:e6:c6:56: c0:7f:4b:a5:c2:be:30:2b:ed:a1:a4:ed:5f:40:f7: e1:f0:67:90:90:4c:fe:81:10:b6:c4:5f:8c:e2:10: cc:8e:95:2b:fe:58:ed:68:14:40:91:4f:be:3a:5a: 10:33:c0:35:94:b5:05:b6:26:49:2b:44:36:56:be: 9f:e8:42:a8:f3:f5:71:65:c6:04:e1:97:f7:70:f7: 5f:55:3a:1f:53:4f:7f:d7:39:2a:e2:0d:92:f1:ee: e6:61:ea:c5:c6:3e:5d:35:7f:67:b4:02:53:aa:93: 5a:32:03:1b:95:1b:b0:5b:73:8a:83:18:18:89:37: d2:dd:d3:76:e5:0c:34:83:68:0f:e3:2b:e6:73:11: fc:56:2a:e0:63:56:4b:39:d6:9a:a3:74:4e:52:e9: 11:ab:5c:19:3b:09:a7:6d:2a:3e:b4:10:85:74:9b: ae:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AE:AD:45:2D:90:78:51:1D:68:AC:C6:A2:EA:36:7F:F0:03:7E:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0d40a379-e0fd-36f4-b0c0-87f4bbf32da2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ab:5d:57:d2:2b:61:72:77:1e:a6:cf:3a:79:27:12:b4:16: 49:61:63:65:84:7d:c5:9b:1e:45:77:04:e3:34:2e:ba:02:e1: 0e:01:a0:6b:34:ab:bf:27:19:09:49:d4:96:a4:39:46:ea:66: 73:42:29:6a:db:46:5b:c1:ba:4c:cd:b2:ce:ba:c4:f5:2f:7c: 89:2e:5b:8c:3a:91:3a:60:de:f9:02:19:70:42:f1:75:cc:e7: bf:bc:14:ef:1d:ae:09:8f:dd:3c:5d:48:9f:94:3a:0e:e5:02: 2b:9e:2d:ff:be:94:15:bc:df:a0:4e:b7:ca:61:f5:b4:9f:99: 39:50:f8:69:83:83:84:13:81:36:fe:48:58:61:4f:3a:eb:7c: 35:dc:16:6f:cf:ca:a5:73:df:7b:8f:c8:3d:30:f6:f9:e9:52: 94:33:d4:db:2a:59:3f:ab:c3:9d:27:cc:21:f3:be:97:b0:48: a9:9d:ad:6c:83:a5:84:39:de:76:ff:67:96:00:bd:7d:59:f3: 24:43:3f:32:59:9a:9f:54:f4:17:f8:5d:b4:07:41:c4:34:07: 90:05:be:2f:e7:e4:40:1a:d1:e9:1a:11:bf:3d:51:d0:ee:fe: cf:45:7b:ef:3e:1c:ba:df:1e:32:52:2c:74:54:15:6d:e0:33: a0:4a:e5:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2yvQR+wzjjtxBJCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDkxNjEzMzAxN1oXDTI1MTIxNTE0MzAxN1owLzEtMCsGA1UEAxMk YTIzZWYyNTctMzk4NS00MTdjLWI0MTYtMzkzNGYyN2UxOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq7/K9hAAkEoCHL0U4Ev8Mqm5QuRpOdcFDUe XTJJQIzbVSYF0FvHTWVB03zM1IniCRzuE8to50pFGku0LAdkogEpFyvvnOgFmKln kXQwk6Jr+cnRCKTmxlbAf0ulwr4wK+2hpO1fQPfh8GeQkEz+gRC2xF+M4hDMjpUr /ljtaBRAkU++OloQM8A1lLUFtiZJK0Q2Vr6f6EKo8/VxZcYE4Zf3cPdfVTofU09/ 1zkq4g2S8e7mYerFxj5dNX9ntAJTqpNaMgMblRuwW3OKgxgYiTfS3dN25Qw0g2gP 4yvmcxH8VirgY1ZLOdaao3ROUukRq1wZOwmnbSo+tBCFdJuuqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuurUUtkHhRHWisxqLqNn/wA35PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGQ0MGEzNzktZTBmZC0z NmY0LWIwYzAtODdmNGJiZjMyZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2rXVfSK2Fydx6mzzp5JxK0FklhY2WEfcWbHkV3BOM0LroC4Q4BoGs0 q78nGQlJ1JakOUbqZnNCKWrbRlvBukzNss66xPUvfIkuW4w6kTpg3vkCGXBC8XXM 57+8FO8drgmP3TxdSJ+UOg7lAiueLf++lBW836BOt8ph9bSfmTlQ+GmDg4QTgTb+ SFhhTzrrfDXcFm/PyqVz33uPyD0w9vnpUpQz1NsqWT+rw50nzCHzvpewSKmdrWyD pYQ53nb/Z5YAvX1Z8yRDPzJZmp9U9Bf4XbQHQcQ0B5AFvi/n5EAa0ekaEb89UdDu /s9Fe+8+HLrfHjJSLHRUFW3gM6BK5ew= -----END CERTIFICATE-----Generated at Sun Oct 19 07:05:55 2025 by rpki-client