$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ced4112-3f87-3644-b991-99ff69b18b89.roa File: 5ced4112-3f87-3644-b991-99ff69b18b89.roa (raw, json) Hash identifier: aLIC0CIfUsldW0XJEYFDhX9ABTg41aISBfJQuqpN1Dg= Subject key identifier: E3:3C:34:4F:51:FE:3C:DF:85:24:0D:B5:E2:9D:CE:F6:BB:0C:F8:CA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B36CB8E0BC933DEE69D0CCD40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ced4112-3f87-3644-b991-99ff69b18b89.roa Signing time: Tue 16 Sep 2025 13:31:29 +0000 ROA not before: Tue 16 Sep 2025 13:31:29 +0000 ROA not after: Mon 15 Dec 2025 14:31:29 +0000 asID: 9009 IP address blocks: 172.111.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:cb:8e:0b:c9:33:de:e6:9d:0c:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 16 13:31:29 2025 GMT Not After : Dec 15 14:31:29 2025 GMT Subject: CN=0c902b86-d93d-4fa2-9345-ca7cc2a20a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8c:5d:66:8a:01:dd:a9:f5:f7:c2:b6:c4:45: 77:6c:78:9c:04:bd:50:4c:43:a8:7b:6a:fc:c6:9c: 1a:ad:81:19:38:6d:52:f9:76:22:57:54:f0:fe:7f: 50:63:b9:68:20:95:95:83:d0:33:52:68:63:6d:c7: 8d:f2:94:3c:90:ad:e3:f3:d8:8e:81:8e:01:43:fe: f2:8a:5b:57:4c:d2:21:82:06:b5:0b:75:78:ff:86: 6d:a3:c4:ea:39:54:fc:b2:4b:7d:cf:6e:c7:35:9c: 86:db:3a:a3:c6:3f:d6:ac:a3:ef:c6:d8:f2:38:72: c7:f8:09:93:66:44:f4:b5:44:01:c2:de:a6:57:26: f7:5a:cc:35:d1:9e:2a:7d:b9:ca:6c:df:94:3c:9f: 4c:10:62:58:b5:04:43:0c:e5:fd:90:43:55:8c:34: d3:c6:a9:6e:1a:28:8b:2a:a4:92:ef:a6:f6:74:91: 89:fd:85:56:ba:a6:2d:2b:22:3d:bc:07:07:d7:d6: ab:61:e9:f1:2f:37:06:b2:60:77:cf:21:d3:09:a5: ba:e3:79:52:59:7f:cd:57:c1:ff:ef:eb:e0:cc:ea: a3:09:b9:75:ec:0f:5a:a8:67:00:8d:09:cf:e8:d8: e8:7d:25:2a:58:a6:6c:85:f2:cd:75:58:40:d8:a3: e3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3C:34:4F:51:FE:3C:DF:85:24:0D:B5:E2:9D:CE:F6:BB:0C:F8:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ced4112-3f87-3644-b991-99ff69b18b89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:08:b2:7e:55:2c:45:68:50:aa:96:a4:37:93:e8:e6:74:27: 8c:64:07:03:41:d2:e5:ac:6c:09:2c:8e:b8:49:8c:9b:92:9b: 46:93:e4:e2:26:50:ad:ea:73:c1:91:ee:af:33:60:d8:b6:7f: f1:f3:2c:98:5e:1a:25:ef:ed:f5:cf:54:19:e9:7e:89:bc:21: 97:f7:be:ae:bb:ca:d6:4e:f2:db:0c:dc:1c:06:51:58:e5:02: 16:7d:2c:9a:3f:1b:e3:3b:5c:5d:9b:90:32:f4:fa:72:3d:d7: cf:2e:f3:a9:3a:73:88:63:e0:86:1b:e6:ce:9f:6c:cc:25:b2: 2f:c3:6b:42:d7:80:48:79:15:33:75:73:89:63:27:16:29:57: 75:93:e1:ee:a0:98:c7:24:93:e0:57:e6:3f:23:d6:42:ad:05: d4:00:13:68:0e:ec:26:0c:fa:17:b1:9d:fb:c7:02:68:1c:a7: b9:af:b3:71:4c:72:b7:d2:de:50:fb:92:ee:bf:bf:8d:b8:9e: 3b:19:ad:0f:bd:92:f9:0a:1e:aa:e3:0b:07:fb:71:e9:41:d8: eb:7c:56:8a:65:46:b6:aa:b6:1a:83:15:b7:cb:f7:16:32:09: 48:8a:43:5e:19:c8:fc:87:27:6d:b0:6a:99:63:15:e9:27:dc: c3:85:01:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2y44LyTPe5p0MzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDkxNjEzMzEyOVoXDTI1MTIxNTE0MzEyOVowLzEtMCsGA1UEAxMk MGM5MDJiODYtZDkzZC00ZmEyLTkzNDUtY2E3Y2MyYTIwYTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYxdZooB3an198K2xEV3bHicBL1QTEOoe2r8 xpwarYEZOG1S+XYiV1Tw/n9QY7loIJWVg9AzUmhjbceN8pQ8kK3j89iOgY4BQ/7y iltXTNIhgga1C3V4/4Zto8TqOVT8skt9z27HNZyG2zqjxj/WrKPvxtjyOHLH+AmT ZkT0tUQBwt6mVyb3Wsw10Z4qfbnKbN+UPJ9MEGJYtQRDDOX9kENVjDTTxqluGiiL KqSS76b2dJGJ/YVWuqYtKyI9vAcH19arYenxLzcGsmB3zyHTCaW643lSWX/NV8H/ 7+vgzOqjCbl17A9aqGcAjQnP6NjofSUqWKZshfLNdVhA2KPjewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOM8NE9R/jzfhSQNteKdzva7DPjKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNWNlZDQxMTItM2Y4Ny0z NjQ0LWI5OTEtOTlmZjY5YjE4Yjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0Isn5VLEVoUKqWpDeT6OZ0J4xkBwNB0uWsbAksjrhJjJuSm0aT5OIm UK3qc8GR7q8zYNi2f/HzLJheGiXv7fXPVBnpfom8IZf3vq67ytZO8tsM3BwGUVjl AhZ9LJo/G+M7XF2bkDL0+nI9188u86k6c4hj4IYb5s6fbMwlsi/Da0LXgEh5FTN1 c4ljJxYpV3WT4e6gmMckk+BX5j8j1kKtBdQAE2gO7CYM+hexnfvHAmgcp7mvs3FM crfS3lD7ku6/v424njsZrQ+9kvkKHqrjCwf7celB2Ot8VoplRraqthqDFbfL9xYy CUiKQ14ZyPyHJ22wapljFekn3MOFAco= -----END CERTIFICATE-----Generated at Sun Oct 19 07:08:03 2025 by rpki-client