$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/823f8982-f3cb-3b80-9453-84562728b235.roa File: 823f8982-f3cb-3b80-9453-84562728b235.roa (raw, json) Hash identifier: ynDRMkKvtZ2Bm9PwltReCuyOaY5YIGdFkgpzqfOOVMU= Subject key identifier: 61:06:48:84:EE:15:D6:B8:EB:FB:61:5C:23:3A:DB:CE:2A:95:60:7F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B36CC0C31D9734D11132E5880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/823f8982-f3cb-3b80-9453-84562728b235.roa Signing time: Tue 16 Sep 2025 13:32:29 +0000 ROA not before: Tue 16 Sep 2025 13:32:29 +0000 ROA not after: Mon 15 Dec 2025 14:32:29 +0000 asID: 9009 IP address blocks: 172.111.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:cc:0c:31:d9:73:4d:11:13:2e:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 16 13:32:29 2025 GMT Not After : Dec 15 14:32:29 2025 GMT Subject: CN=62537bdb-05cb-45a4-8f46-c007724f132c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:c9:c6:6c:73:5b:d4:41:c5:e6:b6:7d:24: 6b:96:00:39:4f:6b:2c:57:3e:02:66:99:9b:82:78: 8f:9a:52:02:01:73:46:2b:5b:d4:45:e6:9b:7c:2b: d9:41:2f:12:86:b9:6b:ea:52:5f:41:e2:f6:a4:b3: 89:28:34:5a:04:d7:f4:eb:d7:bc:53:8c:a7:1f:97: b5:26:69:ac:46:58:1c:15:c3:6f:35:2e:24:3d:90: 7b:75:8d:b4:76:35:c2:94:75:a1:86:7e:13:6b:71: eb:43:42:42:c1:54:bc:bd:3d:91:84:ea:15:64:37: 1e:a5:fc:80:5e:4d:eb:6d:6f:c5:db:b0:d5:bd:15: b8:66:36:a3:33:f0:08:cd:36:cd:5f:b2:39:c4:b3: ba:c1:17:eb:39:f8:5e:7d:16:0c:e5:dc:58:4f:c2: cf:c4:c0:17:d8:6c:05:74:ce:75:6f:52:ee:83:e8: 80:0c:3c:b7:f7:94:ce:44:76:bd:bb:fa:29:2a:b3: d3:9d:f0:44:74:51:bb:9d:0b:13:a4:52:a2:23:d1: 91:45:99:06:60:c0:09:ef:dd:e8:4f:29:f7:d8:a4: a7:a5:af:b1:ec:83:16:dd:3a:d4:af:53:0c:82:1f: 35:7a:ed:56:bc:3f:3a:01:2a:c3:5e:24:59:97:cf: 98:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:06:48:84:EE:15:D6:B8:EB:FB:61:5C:23:3A:DB:CE:2A:95:60:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/823f8982-f3cb-3b80-9453-84562728b235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:51:80:ee:4f:b8:6c:9e:f2:8e:8b:3b:29:f6:a6:5c:bc:ea: a9:e9:9d:93:33:b3:cf:81:00:f3:d7:81:16:4b:71:52:22:24: f7:17:6f:c4:2e:0a:65:e5:f7:80:d6:8c:65:3e:58:16:a0:46: 32:71:d1:9f:bc:87:db:30:cc:f5:e1:1e:5f:b7:34:c4:b2:85: 95:3c:a5:a1:aa:d7:e1:74:1c:a5:e4:5f:00:ab:bd:75:af:e5: 42:30:e2:cf:b9:fb:4f:a1:da:e2:0a:87:f5:b8:57:c0:32:95: fa:a3:c4:4b:2b:91:75:5e:69:84:d1:c5:d0:f7:09:dd:82:ee: 53:c2:b4:ed:5c:38:6f:8e:a6:42:01:29:c1:4c:0f:e0:86:5a: 7e:04:36:d8:44:76:6b:de:04:9b:34:8a:91:25:1b:ae:99:bb: f2:44:d1:7b:9f:66:bc:1d:84:8f:ba:cf:aa:b6:9f:aa:5b:20: d7:4b:f7:b7:df:dd:7e:f7:f1:fa:e5:52:dd:b1:f0:87:10:13: d9:e2:fa:3d:fa:27:66:23:ba:da:44:3a:6e:01:08:d2:26:e4: c4:a9:de:1c:e2:cc:f0:ad:45:1d:db:41:2a:a9:7c:cd:80:98: 6a:38:fc:17:c2:2f:de:24:e9:d9:59:14:a1:d3:45:36:54:00: 8e:2d:11:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2zAwx2XNNERMuWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDkxNjEzMzIyOVoXDTI1MTIxNTE0MzIyOVowLzEtMCsGA1UEAxMk NjI1MzdiZGItMDVjYi00NWE0LThmNDYtYzAwNzcyNGYxMzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuizJxmxzW9RBxea2fSRrlgA5T2ssVz4CZpmb gniPmlICAXNGK1vUReabfCvZQS8Shrlr6lJfQeL2pLOJKDRaBNf069e8U4ynH5e1 JmmsRlgcFcNvNS4kPZB7dY20djXClHWhhn4Ta3HrQ0JCwVS8vT2RhOoVZDcepfyA Xk3rbW/F27DVvRW4ZjajM/AIzTbNX7I5xLO6wRfrOfhefRYM5dxYT8LPxMAX2GwF dM51b1Lug+iADDy395TORHa9u/opKrPTnfBEdFG7nQsTpFKiI9GRRZkGYMAJ793o Tyn32KSnpa+x7IMW3TrUr1MMgh81eu1WvD86ASrDXiRZl8+YgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEGSITuFda46/thXCM6284qlWB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODIzZjg5ODItZjNjYi0z YjgwLTk0NTMtODQ1NjI3MjhiMjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5RgO5PuGye8o6LOyn2ply86qnpnZMzs8+BAPPXgRZLcVIiJPcXb8Qu CmXl94DWjGU+WBagRjJx0Z+8h9swzPXhHl+3NMSyhZU8paGq1+F0HKXkXwCrvXWv 5UIw4s+5+0+h2uIKh/W4V8AylfqjxEsrkXVeaYTRxdD3Cd2C7lPCtO1cOG+OpkIB KcFMD+CGWn4ENthEdmveBJs0ipElG66Zu/JE0XufZrwdhI+6z6q2n6pbINdL97ff 3X738frlUt2x8IcQE9ni+j36J2YjutpEOm4BCNIm5MSp3hzizPCtRR3bQSqpfM2A mGo4/BfCL94k6dlZFKHTRTZUAI4tEYA= -----END CERTIFICATE-----Generated at Sun Oct 19 07:08:05 2025 by rpki-client