$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a3080539-3c4c-3354-a2fa-f14eb2c31b10.roa File: a3080539-3c4c-3354-a2fa-f14eb2c31b10.roa (raw, json) Hash identifier: DfrNUS3L3UJqEJW7WVS0z9cd3+qpGFMdQCuoWc0Pt2U= Subject key identifier: 1C:14:CB:25:17:A4:A9:6B:29:7A:DA:4A:00:16:85:91:E0:D0:CE:CA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B94E30DD5047EAA5618E0DF40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a3080539-3c4c-3354-a2fa-f14eb2c31b10.roa Signing time: Mon 20 Oct 2025 06:24:49 +0000 ROA not before: Mon 20 Oct 2025 06:24:49 +0000 ROA not after: Sun 18 Jan 2026 07:24:49 +0000 asID: 214025 IP address blocks: 172.111.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:e3:0d:d5:04:7e:aa:56:18:e0:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 20 06:24:49 2025 GMT Not After : Jan 18 07:24:49 2026 GMT Subject: CN=fc9b3e0a-f0b7-4325-a398-dec8739ccb91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7b:a6:4a:ca:61:2d:a9:56:92:bb:f6:64:be: 9e:16:40:96:f8:59:fa:d5:2f:a4:45:86:30:4e:e1: 80:d0:e5:17:26:2d:ac:e7:ae:d6:24:6b:48:93:0e: 3c:06:7b:b5:90:bf:ad:04:e8:f5:cf:ab:c9:11:41: e7:69:57:ff:4d:14:8a:c1:3b:72:04:14:04:fb:17: 71:9f:3c:e2:5d:c9:69:b1:eb:c9:1f:4b:68:47:84: 6a:af:41:34:cf:d9:cd:16:a8:cf:82:14:59:13:79: da:a7:2d:12:d3:0a:d0:11:de:d3:0c:0c:72:99:a6: b6:33:0c:13:6d:14:20:99:db:c8:cb:ad:5c:c4:f4: 5b:a9:14:77:1c:dc:45:79:0c:ed:dc:4c:2f:70:d3: 5a:73:77:e5:c0:fb:a5:5f:52:a2:44:fc:8f:9d:5c: 1b:9d:13:45:37:1e:db:60:dd:8d:f4:ac:ea:07:15: 4e:43:93:f4:13:f5:2a:0b:d8:67:bf:7c:00:15:7a: 86:9d:48:4d:0e:3c:2f:c8:f7:2f:54:a9:8f:b0:6f: ca:e0:e6:dc:ce:b6:6e:42:18:28:9d:97:7c:45:4f: da:c9:2b:35:6f:11:66:ae:03:e3:27:87:00:21:a2: fd:c8:d9:ab:90:d9:33:e7:79:d9:46:1e:69:e8:62: 9a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:14:CB:25:17:A4:A9:6B:29:7A:DA:4A:00:16:85:91:E0:D0:CE:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a3080539-3c4c-3354-a2fa-f14eb2c31b10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f9:d9:28:f5:23:99:e9:db:58:2f:77:e0:1b:bc:9b:4d:7b: 53:45:62:80:48:f2:a3:ae:76:02:31:fe:5f:d3:18:50:5a:2a: 79:16:fd:e5:80:9a:a9:76:4f:79:9d:7f:3e:1c:c2:7a:35:92: 25:3a:c1:9d:64:95:c7:09:4c:6b:f7:ca:36:70:be:d8:41:74: 96:a1:71:3b:48:b3:06:67:33:30:ed:48:d2:65:90:39:72:3e: 9c:b5:ce:21:d8:a2:41:3e:1e:25:64:04:33:85:5e:5d:79:a9: 9f:f9:2b:e6:a1:82:1b:0b:c8:64:df:48:34:c7:00:24:cd:de: d0:b9:0b:02:30:ea:e4:1a:24:a8:e1:60:d8:b9:1c:89:9d:f9: d0:82:2c:e7:41:9c:cb:e8:14:24:5f:2a:1c:d3:4d:25:d8:f5: 41:94:51:5b:0d:39:11:60:58:b1:19:cf:f6:4e:40:84:10:16: 6e:3b:d6:9f:ba:0f:68:36:c5:ba:c3:59:fb:70:15:15:4b:68: f2:00:47:a6:46:88:cb:10:91:16:1f:d4:3b:87:c9:63:99:51: ac:cd:e8:66:66:ee:ad:fd:e4:eb:56:e9:00:a0:ec:f9:6a:02: ff:16:57:c2:66:43:70:cc:12:1d:a3:f3:b9:3a:9f:3a:29:9c: ec:33:a7:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuU4w3VBH6qVhjg30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyMDA2MjQ0OVoXDTI2MDExODA3MjQ0OVowLzEtMCsGA1UEAxMk ZmM5YjNlMGEtZjBiNy00MzI1LWEzOTgtZGVjODczOWNjYjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHumSsphLalWkrv2ZL6eFkCW+Fn61S+kRYYw TuGA0OUXJi2s567WJGtIkw48Bnu1kL+tBOj1z6vJEUHnaVf/TRSKwTtyBBQE+xdx nzziXclpsevJH0toR4Rqr0E0z9nNFqjPghRZE3napy0S0wrQEd7TDAxymaa2MwwT bRQgmdvIy61cxPRbqRR3HNxFeQzt3EwvcNNac3flwPulX1KiRPyPnVwbnRNFNx7b YN2N9KzqBxVOQ5P0E/UqC9hnv3wAFXqGnUhNDjwvyPcvVKmPsG/K4ObczrZuQhgo nZd8RU/aySs1bxFmrgPjJ4cAIaL9yNmrkNkz53nZRh5p6GKaPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwUyyUXpKlrKXraSgAWhZHg0M7KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTMwODA1MzktM2M0Yy0z MzU0LWEyZmEtZjE0ZWIyYzMxYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADL52Sj1I5np21gvd+AbvJtNe1NFYoBI8qOudgIx/l/TGFBaKnkW/eWA mql2T3mdfz4cwno1kiU6wZ1klccJTGv3yjZwvthBdJahcTtIswZnMzDtSNJlkDly Ppy1ziHYokE+HiVkBDOFXl15qZ/5K+ahghsLyGTfSDTHACTN3tC5CwIw6uQaJKjh YNi5HImd+dCCLOdBnMvoFCRfKhzTTSXY9UGUUVsNORFgWLEZz/ZOQIQQFm471p+6 D2g2xbrDWftwFRVLaPIAR6ZGiMsQkRYf1DuHyWOZUazN6GZm7q395OtW6QCg7Plq Av8WV8JmQ3DMEh2j87k6nzopnOwzp7s= -----END CERTIFICATE-----Generated at Mon Oct 20 15:29:41 2025 by rpki-client