$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9f2bb3a1-2b92-3f95-acaa-a132ebaedbe5.roa File: 9f2bb3a1-2b92-3f95-acaa-a132ebaedbe5.roa (raw, json) Hash identifier: ctY/d7PpfE6uBJDROt3iiqS3uPLi8uQ/uju0ZrRSkKY= Subject key identifier: 6F:B6:68:40:94:E4:2F:B7:1D:5A:C0:5E:CD:F3:0A:73:6F:28:B1:88 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B5DC4F8906C89416B3B1FBA00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9f2bb3a1-2b92-3f95-acaa-a132ebaedbe5.roa Signing time: Tue 30 Sep 2025 12:34:45 +0000 ROA not before: Tue 30 Sep 2025 12:34:45 +0000 ROA not after: Mon 29 Dec 2025 13:34:45 +0000 asID: 9304 IP address blocks: 172.111.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:c4:f8:90:6c:89:41:6b:3b:1f:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 30 12:34:45 2025 GMT Not After : Dec 29 13:34:45 2025 GMT Subject: CN=8fe6bb9c-8a19-4cf1-a95e-6c5435e33ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:74:33:8a:e3:a4:5e:d7:13:41:b6:22:b8:12: c1:99:0b:69:07:9b:cb:0f:4b:85:30:6e:4d:c6:74: 6e:51:02:ab:84:e8:d7:4a:36:a8:09:31:ba:93:7d: cc:a8:6f:a4:31:14:0c:7e:3a:59:20:d8:ed:aa:03: 8d:43:4f:42:70:d2:18:36:a6:f7:27:d3:62:2e:52: 23:e6:14:bf:b0:86:e5:af:70:d2:31:8a:c2:ba:92: 0b:88:81:32:d2:d9:b1:05:2a:8a:90:80:c0:b3:c5: 48:ae:ca:6e:cd:d6:c2:0d:35:a4:d5:8c:52:85:6e: 75:e9:74:47:11:fc:6e:46:b4:fb:00:4d:8e:19:83: 5a:ce:1b:6c:05:1f:3e:3d:b8:94:c0:f9:0a:41:f6: 95:1e:ff:75:f3:32:5d:09:2c:42:5c:60:ac:9c:ca: 2d:6c:0f:b1:01:9c:58:8b:80:01:d7:2c:df:bc:76: b5:31:40:59:b3:df:56:07:fa:bd:63:1c:bf:a8:12: 5c:bc:25:cd:f5:61:92:2d:ba:be:54:fe:88:e1:bd: ab:cc:1e:68:82:d2:23:d8:63:bd:24:96:7c:cc:26: 4b:2a:3c:7b:65:d3:10:b3:a6:95:71:d6:af:27:65: 3a:06:33:d2:74:b5:e0:49:51:b5:80:cf:a1:32:c8: e3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B6:68:40:94:E4:2F:B7:1D:5A:C0:5E:CD:F3:0A:73:6F:28:B1:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9f2bb3a1-2b92-3f95-acaa-a132ebaedbe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:dd:7c:e2:32:16:5c:7b:66:0a:30:d8:5b:80:85:91:fd:ff: 43:4b:dd:9a:0b:26:c2:5c:f4:5d:d3:6c:15:73:b9:9e:d8:2f: 51:e1:30:16:f3:db:a2:b3:f9:e5:ce:6d:9c:29:00:9e:1a:42: 09:ca:f1:0f:32:90:a3:a6:87:98:78:37:56:0c:ca:95:69:8f: 13:a0:a7:5d:69:46:9a:c9:c9:74:cc:3b:e6:a4:61:70:a3:a3: f9:dc:03:3b:ec:e8:76:dd:95:0d:29:e2:64:1f:d7:4c:fd:83: 9b:75:3a:4e:d5:5a:e8:7d:f9:fa:eb:fd:f9:82:9a:09:07:83: ee:23:ec:13:f4:80:f3:07:f2:3f:e1:e4:0a:f4:59:28:e2:6a: 79:23:8a:1b:91:3d:cd:90:a2:c2:1c:d9:13:05:1a:d4:98:5f: 24:7e:38:b8:16:fb:e2:39:8a:76:1b:13:4c:e2:1a:96:44:5f: f0:d1:a5:2d:65:3c:43:61:34:f4:da:09:dd:e8:8e:52:57:04: 93:c6:66:88:cd:93:29:ea:c0:05:aa:9a:47:14:82:be:02:3c: f5:1b:92:1f:d7:59:74:30:1a:f1:35:6a:1d:74:9c:10:10:fa: 07:13:88:89:4b:cf:f0:4f:7f:be:fb:a9:d1:d5:45:83:6d:dc: d2:f6:39:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtdxPiQbIlBazsfugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDkzMDEyMzQ0NVoXDTI1MTIyOTEzMzQ0NVowLzEtMCsGA1UEAxMk OGZlNmJiOWMtOGExOS00Y2YxLWE5NWUtNmM1NDM1ZTMzYWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXQziuOkXtcTQbYiuBLBmQtpB5vLD0uFMG5N xnRuUQKrhOjXSjaoCTG6k33MqG+kMRQMfjpZINjtqgONQ09CcNIYNqb3J9NiLlIj 5hS/sIblr3DSMYrCupILiIEy0tmxBSqKkIDAs8VIrspuzdbCDTWk1YxShW516XRH EfxuRrT7AE2OGYNazhtsBR8+PbiUwPkKQfaVHv918zJdCSxCXGCsnMotbA+xAZxY i4AB1yzfvHa1MUBZs99WB/q9Yxy/qBJcvCXN9WGSLbq+VP6I4b2rzB5ogtIj2GO9 JJZ8zCZLKjx7ZdMQs6aVcdavJ2U6BjPSdLXgSVG1gM+hMsjjDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+2aECU5C+3HVrAXs3zCnNvKLGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWYyYmIzYTEtMmI5Mi0z Zjk1LWFjYWEtYTEzMmViYWVkYmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABndfOIyFlx7Zgow2FuAhZH9/0NL3ZoLJsJc9F3TbBVzuZ7YL1HhMBbz 26Kz+eXObZwpAJ4aQgnK8Q8ykKOmh5h4N1YMypVpjxOgp11pRprJyXTMO+akYXCj o/ncAzvs6HbdlQ0p4mQf10z9g5t1Ok7VWuh9+frr/fmCmgkHg+4j7BP0gPMH8j/h 5Ar0WSjiankjihuRPc2QosIc2RMFGtSYXyR+OLgW++I5inYbE0ziGpZEX/DRpS1l PENhNPTaCd3ojlJXBJPGZojNkynqwAWqmkcUgr4CPPUbkh/XWXQwGvE1ah10nBAQ +gcTiIlLz/BPf777qdHVRYNt3NL2ObU= -----END CERTIFICATE-----Generated at Sun Oct 19 18:34:29 2025 by rpki-client