$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/275398f0-2a11-341b-ba14-f98c52425d4f.roa File: 275398f0-2a11-341b-ba14-f98c52425d4f.roa (raw, json) Hash identifier: oWY4RuWfu6cZgMe4ROXO+7I59EuWiJeHzBb/F5lN8c0= Subject key identifier: F4:C9:18:C4:0D:4E:C0:B9:47:DD:31:61:34:29:B4:B7:95:E1:35:36 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B8C6546D67E8A1F14D7D24BC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/275398f0-2a11-341b-ba14-f98c52425d4f.roa Signing time: Fri 17 Oct 2025 05:24:56 +0000 ROA not before: Fri 17 Oct 2025 05:24:56 +0000 ROA not after: Thu 15 Jan 2026 06:24:56 +0000 asID: 208185 IP address blocks: 172.111.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8c:65:46:d6:7e:8a:1f:14:d7:d2:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 17 05:24:56 2025 GMT Not After : Jan 15 06:24:56 2026 GMT Subject: CN=6c65b291-a1fc-44ad-81c3-651236deb56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:07:05:d7:7b:53:05:03:ea:bc:e6:26:c9:87: 80:26:c3:cd:2a:fd:5b:c5:a8:1d:81:ce:59:22:67: 51:9e:54:0c:a3:d8:9c:d7:a0:18:01:c0:eb:fd:66: cb:18:ab:c4:1b:4a:a0:48:8c:fa:7a:b5:15:a0:c2: 31:10:d2:95:31:1e:35:8b:75:92:61:0d:c4:af:10: 5f:48:e8:ce:69:60:62:d6:5c:ee:37:1d:c5:39:d9: b8:b5:85:1d:f0:18:ed:b4:a7:73:c9:8c:3e:0b:ad: ba:8a:2b:4e:82:59:02:f1:84:a8:3e:9f:de:50:46: 23:65:dd:94:9b:6b:c0:8e:5a:0a:77:4b:23:7d:fc: a4:0e:10:c8:92:ea:d7:a0:7c:e6:0a:06:01:52:01: da:6a:5a:d6:0a:38:0a:41:5b:9f:fc:e5:16:4d:d7: 88:a3:33:20:db:b6:64:45:a2:fe:20:2d:67:ca:cd: 25:0b:64:c3:39:4b:6f:93:c1:be:72:fb:4b:e4:9e: aa:4c:e9:7f:8e:bb:02:2d:a8:a6:3e:76:b5:0b:f1: d0:84:97:02:9b:b0:1e:61:e9:b6:6f:eb:9a:c4:98: 7d:ec:d4:37:b5:a7:c0:98:3f:49:fd:19:de:18:17: df:86:92:3e:25:85:1d:fa:94:de:fe:0c:6e:2d:19: 5d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C9:18:C4:0D:4E:C0:B9:47:DD:31:61:34:29:B4:B7:95:E1:35:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/275398f0-2a11-341b-ba14-f98c52425d4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:5d:eb:a9:bf:ee:98:8f:8c:92:e1:c9:13:cd:47:c5:90:b2: 85:16:db:29:45:7e:86:41:2e:94:99:8b:c6:97:23:93:f9:f1: 08:85:94:69:37:24:33:f5:53:e5:5e:99:ca:86:e3:91:44:44: cd:8b:a1:92:dc:d5:9d:2c:28:50:2f:0a:c6:de:0d:02:8c:5e: 66:f8:44:cf:32:d1:1d:ee:d8:60:7f:26:77:f8:0b:6b:c0:e4: fd:d8:16:f8:2a:6e:32:a2:67:e1:c7:25:b3:c9:d0:b9:f8:b8: 9b:41:d1:8b:a8:87:61:30:5e:0a:37:af:55:df:0c:30:2d:3b: 8c:d4:ac:48:8b:48:09:13:a1:03:cb:49:df:4b:a8:32:e6:94: a5:da:50:78:20:7d:87:78:b9:6c:83:5e:a2:42:61:7f:85:bb: f6:2a:29:12:72:a8:67:1b:db:79:26:37:b5:63:62:08:ac:74: c6:bc:94:5d:88:3f:9a:87:4e:0a:a6:a4:c9:40:40:52:3e:43: ec:93:20:77:12:e6:43:c4:c7:f2:4e:a0:e8:70:35:1c:2a:a8: 51:87:1d:68:5f:95:00:31:fa:97:b6:c2:29:11:f9:ff:bf:d8: 4e:f9:0f:79:fb:4c:8b:24:e1:ad:e8:06:05:bc:0c:97:cf:57: df:cf:8b:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuMZUbWfoofFNfSS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxNzA1MjQ1NloXDTI2MDExNTA2MjQ1NlowLzEtMCsGA1UEAxMk NmM2NWIyOTEtYTFmYy00NGFkLTgxYzMtNjUxMjM2ZGViNTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwcF13tTBQPqvOYmyYeAJsPNKv1bxagdgc5Z ImdRnlQMo9ic16AYAcDr/WbLGKvEG0qgSIz6erUVoMIxENKVMR41i3WSYQ3ErxBf SOjOaWBi1lzuNx3FOdm4tYUd8BjttKdzyYw+C626iitOglkC8YSoPp/eUEYjZd2U m2vAjloKd0sjffykDhDIkurXoHzmCgYBUgHaalrWCjgKQVuf/OUWTdeIozMg27Zk RaL+IC1nys0lC2TDOUtvk8G+cvtL5J6qTOl/jrsCLaimPna1C/HQhJcCm7AeYem2 b+uaxJh97NQ3tafAmD9J/RneGBffhpI+JYUd+pTe/gxuLRldzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTJGMQNTsC5R90xYTQptLeV4TU2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjc1Mzk4ZjAtMmExMS0z NDFiLWJhMTQtZjk4YzUyNDI1ZDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1d66m/7piPjJLhyRPNR8WQsoUW2ylFfoZBLpSZi8aXI5P58QiFlGk3 JDP1U+VemcqG45FERM2LoZLc1Z0sKFAvCsbeDQKMXmb4RM8y0R3u2GB/Jnf4C2vA 5P3YFvgqbjKiZ+HHJbPJ0Ln4uJtB0Yuoh2EwXgo3r1XfDDAtO4zUrEiLSAkToQPL Sd9LqDLmlKXaUHggfYd4uWyDXqJCYX+Fu/YqKRJyqGcb23kmN7VjYgisdMa8lF2I P5qHTgqmpMlAQFI+Q+yTIHcS5kPEx/JOoOhwNRwqqFGHHWhflQAx+pe2wikR+f+/ 2E75D3n7TIsk4a3oBgW8DJfPV9/PiyQ= -----END CERTIFICATE-----Generated at Tue Oct 21 14:52:57 2025 by rpki-client