$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/120889cf-3bc1-3496-9cbb-d024cb471fd6.roa File: 120889cf-3bc1-3496-9cbb-d024cb471fd6.roa (raw, json) Hash identifier: V9rxj7xsOnEciKw+jIoxuIMWBBXd/f1km1FAVikE0sQ= Subject key identifier: B7:E2:AD:DB:33:9B:36:44:A2:BB:C1:32:3B:1F:E8:D6:59:36:68:15 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B36EF9468438B854BA114A50C Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/120889cf-3bc1-3496-9cbb-d024cb471fd6.roa Signing time: Tue 16 Sep 2025 14:44:04 +0000 ROA not before: Tue 16 Sep 2025 14:44:04 +0000 ROA not after: Mon 15 Dec 2025 15:44:04 +0000 asID: 9009 IP address blocks: 172.111.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:ef:94:68:43:8b:85:4b:a1:14:a5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 16 14:44:04 2025 GMT Not After : Dec 15 15:44:04 2025 GMT Subject: CN=efda7970-dc48-4c6f-895a-a46b3e361667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:38:0d:f2:13:35:50:0a:57:2e:ac:51:f9:fb: c7:cc:95:c8:d8:f5:fa:15:87:8a:9b:3c:51:5a:a0: 7d:39:28:ff:c7:33:5b:15:a5:47:cd:4e:e1:d6:1d: 16:44:d3:ca:9d:4e:22:af:67:53:2c:1b:c1:54:c4: 60:8f:70:5a:6e:ce:63:e2:d9:7a:f7:5f:1a:9f:91: d4:f4:8d:da:7e:ce:24:20:88:97:5e:53:4d:24:fb: 0b:6c:d6:4b:1b:35:bd:89:c5:59:6b:72:92:19:d9: a3:22:95:86:17:28:3a:5b:7d:18:6a:57:f1:f5:a1: 2a:8f:f6:de:11:18:d9:6a:cd:01:4d:2f:05:2e:eb: 28:d8:3a:df:53:fe:0e:42:18:90:70:8c:ce:f9:3a: 10:97:98:3f:9f:42:fb:e4:b2:84:55:5a:54:cb:66: 0d:82:e1:2d:2e:f5:04:63:49:2a:44:04:6d:d6:e6: de:17:c5:50:1f:9e:68:09:fa:4f:7d:a3:1f:0b:9d: f3:61:07:46:4f:15:e5:77:14:2c:da:c7:1d:bd:35: 11:25:58:2b:70:82:39:48:d9:88:58:33:2b:5f:fd: 0a:bf:15:fc:64:c5:cb:63:59:d9:15:e0:ea:fd:a3: fe:d0:f4:26:70:d7:b6:05:9b:0f:73:4b:65:66:94: 82:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E2:AD:DB:33:9B:36:44:A2:BB:C1:32:3B:1F:E8:D6:59:36:68:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/120889cf-3bc1-3496-9cbb-d024cb471fd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:af:39:a3:1f:61:b3:12:33:15:bb:71:a0:a2:67:c3:bd:a3: 5f:1f:e1:30:86:79:0c:99:2e:77:e7:6d:9d:23:d9:60:d9:2c: 4c:4b:7e:cc:31:8f:17:98:6f:20:ae:7a:97:62:46:7c:03:c3: 10:e6:8e:c4:ff:e9:a5:bb:e9:29:a0:92:54:0d:21:52:6c:8a: 90:f9:47:bb:e6:54:fe:3f:1e:3b:97:e7:1c:92:e3:d7:dd:25: 17:91:a2:2c:24:2f:dd:b2:85:17:79:3e:00:3c:8f:92:83:a3: bf:f1:df:6f:e3:dd:05:6b:fc:3e:bd:c9:6f:2c:bc:1f:58:9b: 33:be:ba:e1:7e:56:75:e6:a1:9c:01:b5:15:4f:34:ec:4e:d4: 26:81:ad:ad:ed:bc:5e:67:2f:c2:6d:b2:15:ff:bd:98:ff:e0: 09:ac:08:d3:c4:e8:6a:59:a1:2f:8c:2a:d7:9a:ac:a5:07:40: ee:c1:e0:75:2d:f7:44:37:4e:80:40:fe:57:02:b8:11:17:bb: ba:10:02:0b:e6:78:27:a4:ce:e7:62:99:25:b6:d1:9d:0b:31: 05:48:9c:a3:93:bd:46:50:ae:ab:da:e1:db:53:aa:58:10:4b: 7b:2e:e0:1b:45:d9:94:5c:9d:bc:16:1c:cd:06:c8:0f:76:4e: 22:4f:d6:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs275RoQ4uFS6EUpQwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDkxNjE0NDQwNFoXDTI1MTIxNTE1NDQwNFowLzEtMCsGA1UEAxMk ZWZkYTc5NzAtZGM0OC00YzZmLTg5NWEtYTQ2YjNlMzYxNjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDgN8hM1UApXLqxR+fvHzJXI2PX6FYeKmzxR WqB9OSj/xzNbFaVHzU7h1h0WRNPKnU4ir2dTLBvBVMRgj3Babs5j4tl6918an5HU 9I3afs4kIIiXXlNNJPsLbNZLGzW9icVZa3KSGdmjIpWGFyg6W30Yalfx9aEqj/be ERjZas0BTS8FLuso2DrfU/4OQhiQcIzO+ToQl5g/n0L75LKEVVpUy2YNguEtLvUE Y0kqRARt1ubeF8VQH55oCfpPfaMfC53zYQdGTxXldxQs2scdvTURJVgrcII5SNmI WDMrX/0KvxX8ZMXLY1nZFeDq/aP+0PQmcNe2BZsPc0tlZpSCKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfirdszmzZEorvBMjsf6NZZNmgVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTIwODg5Y2YtM2JjMS0z NDk2LTljYmItZDAyNGNiNDcxZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqvOaMfYbMSMxW7caCiZ8O9o18f4TCGeQyZLnfnbZ0j2WDZLExLfswx jxeYbyCuepdiRnwDwxDmjsT/6aW76SmgklQNIVJsipD5R7vmVP4/HjuX5xyS49fd JReRoiwkL92yhRd5PgA8j5KDo7/x32/j3QVr/D69yW8svB9YmzO+uuF+VnXmoZwB tRVPNOxO1CaBra3tvF5nL8JtshX/vZj/4AmsCNPE6GpZoS+MKtearKUHQO7B4HUt 90Q3ToBA/lcCuBEXu7oQAgvmeCekzudimSW20Z0LMQVInKOTvUZQrqva4dtTqlgQ S3su4BtF2ZRcnbwWHM0GyA92TiJP1qs= -----END CERTIFICATE-----Generated at Sun Oct 19 07:05:54 2025 by rpki-client