$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/10d46dab-a98f-3893-9898-9d1ddec15622.roa File: 10d46dab-a98f-3893-9898-9d1ddec15622.roa (raw, json) Hash identifier: qSjqrRipslR0mglDEfhD2vfbrK5c13qxVEEMuTXBj8U= Subject key identifier: 89:7C:22:3E:28:9A:0C:89:D0:D3:25:92:68:F4:D1:90:44:EF:11:44 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B00E59A57B60544F91418E780 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/10d46dab-a98f-3893-9898-9d1ddec15622.roa Signing time: Thu 28 Aug 2025 06:10:19 +0000 ROA not before: Thu 28 Aug 2025 06:10:19 +0000 ROA not after: Wed 26 Nov 2025 07:10:19 +0000 asID: 9009 IP address blocks: 172.111.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:e5:9a:57:b6:05:44:f9:14:18:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 28 06:10:19 2025 GMT Not After : Nov 26 07:10:19 2025 GMT Subject: CN=2c4f7c2b-0ada-4cff-89c0-e60d02095c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d9:82:2c:72:24:e5:2e:41:ab:54:cb:39:19: 1e:7b:81:f6:9f:81:c5:75:11:6b:af:5a:ba:80:e8: 9d:9d:fd:cc:3c:1a:20:46:3b:e7:8a:3c:58:45:7d: 2e:57:73:b0:19:ee:9b:53:08:fb:8a:8d:82:c1:80: 45:5d:2c:f6:9c:75:5a:07:f7:96:cf:df:4e:f5:64: 81:66:b2:2c:20:a7:f8:8b:a4:12:85:19:f6:e1:bd: 4c:51:89:b9:69:e2:ca:a3:de:c5:d9:76:8e:2f:68: a6:cb:37:75:01:82:ad:e2:25:8e:be:bf:9a:5b:a2: fe:27:0e:66:18:91:57:b7:6c:ff:ca:51:75:ed:16: 9a:ec:e8:45:40:c6:f8:33:32:70:58:39:46:4e:80: 71:bd:a3:49:89:b3:91:88:2b:32:19:92:b2:e9:41: 33:57:01:a8:90:71:f2:f1:95:77:4b:da:bb:e0:10: de:7a:41:82:0f:ed:e7:19:18:f9:f5:be:c2:b0:8c: 73:89:b6:31:4d:53:9e:c0:ea:93:ae:e6:c2:87:18: 00:1a:93:14:aa:1b:cb:d0:ca:ba:27:39:5b:b8:d1: 72:31:94:e0:6a:a0:a9:2a:61:b4:7c:10:01:3d:88: b1:21:23:00:98:6f:4f:8f:e4:fb:94:c7:4a:71:81: c1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7C:22:3E:28:9A:0C:89:D0:D3:25:92:68:F4:D1:90:44:EF:11:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/10d46dab-a98f-3893-9898-9d1ddec15622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:5a:d1:4d:13:18:48:b0:5a:33:84:7c:c2:91:0f:11:77:5b: 5f:30:5f:28:be:d7:f9:c3:12:c8:34:28:d5:4b:1e:f7:0d:fb: ec:c9:40:c3:de:25:f2:8a:dc:ea:af:6b:34:02:75:d7:dc:7a: c0:cf:56:f8:7e:fc:cc:65:28:19:fc:bf:0f:11:2c:2c:1d:0d: 7a:b3:37:a9:f6:64:4a:c8:60:8d:f1:8d:52:a7:0a:c8:17:a6: 40:9f:32:55:4d:b2:8b:db:87:70:71:1a:75:60:1c:4f:17:c8: 4d:7d:74:46:3c:3e:9b:9f:21:e5:4a:2b:48:49:97:76:77:71: 6b:fa:40:7a:ec:34:5c:80:6a:79:c1:9d:a3:17:11:55:59:0e: 83:8d:e9:15:54:00:72:b4:96:15:b4:7c:18:ed:53:35:0e:87: cb:03:2e:ed:03:7c:4a:8c:46:a3:50:91:09:b8:cb:fd:01:d9: aa:32:41:61:56:14:b2:99:73:e3:76:84:00:1e:d0:da:a1:44: 5e:f5:d8:36:ae:8c:62:9e:6b:79:ce:54:ee:ea:e2:55:dd:4d: a8:fa:4d:d7:ab:4b:dc:e4:ce:85:6f:dd:bd:94:1b:ba:85:9a: e8:90:42:27:4a:19:69:ae:f4:3d:c0:ec:95:6e:d6:3d:c9:b1: e6:5a:57:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsA5ZpXtgVE+RQY54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyODA2MTAxOVoXDTI1MTEyNjA3MTAxOVowLzEtMCsGA1UEAxMk MmM0ZjdjMmItMGFkYS00Y2ZmLTg5YzAtZTYwZDAyMDk1YzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdmCLHIk5S5Bq1TLORkee4H2n4HFdRFrr1q6 gOidnf3MPBogRjvnijxYRX0uV3OwGe6bUwj7io2CwYBFXSz2nHVaB/eWz99O9WSB ZrIsIKf4i6QShRn24b1MUYm5aeLKo97F2XaOL2imyzd1AYKt4iWOvr+aW6L+Jw5m GJFXt2z/ylF17Raa7OhFQMb4MzJwWDlGToBxvaNJibORiCsyGZKy6UEzVwGokHHy 8ZV3S9q74BDeekGCD+3nGRj59b7CsIxzibYxTVOewOqTrubChxgAGpMUqhvL0Mq6 JzlbuNFyMZTgaqCpKmG0fBABPYixISMAmG9Pj+T7lMdKcYHBFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIl8Ij4omgyJ0NMlkmj00ZBE7xFEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTBkNDZkYWItYTk4Zi0z ODkzLTk4OTgtOWQxZGRlYzE1NjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBa0U0TGEiwWjOEfMKRDxF3W18wXyi+1/nDEsg0KNVLHvcN++zJQMPe JfKK3OqvazQCddfcesDPVvh+/MxlKBn8vw8RLCwdDXqzN6n2ZErIYI3xjVKnCsgX pkCfMlVNsovbh3BxGnVgHE8XyE19dEY8PpufIeVKK0hJl3Z3cWv6QHrsNFyAannB naMXEVVZDoON6RVUAHK0lhW0fBjtUzUOh8sDLu0DfEqMRqNQkQm4y/0B2aoyQWFW FLKZc+N2hAAe0NqhRF712DaujGKea3nOVO7q4lXdTaj6TderS9zkzoVv3b2UG7qF muiQQidKGWmu9D3A7JVu1j3JseZaV+A= -----END CERTIFICATE-----Generated at Fri Sep 5 04:43:42 2025 by rpki-client