$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a60e4a6c-30fc-300a-af4c-e5a9dab2a0ac.roa File: a60e4a6c-30fc-300a-af4c-e5a9dab2a0ac.roa (raw, json) Hash identifier: sBaWDRWsx+lSxZCahGCzBl9WkKstBOAnibGzKiGr4jI= Subject key identifier: 0E:CD:FC:A8:7A:D2:AC:19:82:63:C6:88:04:4C:E1:52:E9:17:FF:89 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B15365CABB424949C2CE6EB00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a60e4a6c-30fc-300a-af4c-e5a9dab2a0ac.roa Signing time: Thu 04 Sep 2025 12:49:12 +0000 ROA not before: Thu 04 Sep 2025 12:49:12 +0000 ROA not after: Wed 03 Dec 2025 13:49:12 +0000 asID: 208185 IP address blocks: 172.111.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:36:5c:ab:b4:24:94:9c:2c:e6:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 4 12:49:12 2025 GMT Not After : Dec 3 13:49:12 2025 GMT Subject: CN=fd981d91-5d35-45e1-85fb-b681438fed7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a3:94:65:7b:1d:4d:82:ca:01:4e:7b:ce:0e: 3d:b8:81:ea:f8:dd:ff:e4:c7:05:86:f2:c1:b9:5b: 9f:f6:8c:90:02:d1:e9:27:e5:0d:6d:88:c4:fa:39: 1e:85:3b:3b:d0:7f:81:a3:8e:6e:22:4a:1d:73:fe: ac:e4:fa:75:aa:47:40:b8:4f:5a:89:2b:f8:41:f1: fb:75:b3:d9:ca:f7:30:c4:13:c2:a4:80:de:85:85: 47:20:34:3d:4a:4a:33:30:21:e1:de:7b:c2:b6:cf: 5b:32:d7:dd:b5:68:a7:9e:95:53:b8:ce:3e:d5:db: 5b:64:a6:6c:b3:7f:05:78:75:d5:1c:2c:1e:7a:58: 96:d6:c4:20:15:8d:5c:f0:9f:3a:c1:05:06:1b:5c: bc:0f:d0:fd:d4:fc:07:c7:1f:7e:9f:e9:7f:db:07: a8:dd:04:03:26:12:56:c7:2f:49:44:c0:9c:28:a5: e1:63:b2:d2:18:63:97:8f:41:e5:70:df:86:cd:3e: 28:81:fc:ac:81:66:e9:cf:77:23:f0:4c:ee:ec:d2: 31:3c:7c:90:18:4b:3b:bf:3a:62:73:1c:90:30:8e: a4:2f:fa:c0:0e:4c:ea:22:49:96:c3:2d:9d:88:7b: b3:40:81:d9:32:0c:c2:51:ed:f8:11:67:86:2e:17: c2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CD:FC:A8:7A:D2:AC:19:82:63:C6:88:04:4C:E1:52:E9:17:FF:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a60e4a6c-30fc-300a-af4c-e5a9dab2a0ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:44:10:42:bb:40:69:8f:aa:c8:c4:2f:ec:c9:cd:bf:f7:92: 19:34:61:35:49:44:43:ea:78:a9:c7:23:35:7d:6e:11:da:4e: 2d:b8:6d:81:00:30:b7:b6:f1:9e:9a:78:53:d3:ab:36:e1:3e: 6d:fd:15:4b:5a:ce:72:b3:ca:1e:9f:19:d1:2f:d9:39:e6:e7: c5:22:2b:fc:5f:bd:04:ac:1e:8b:c2:cf:e7:b1:15:ab:e9:58: 18:da:23:9d:eb:02:62:be:d2:24:2a:d1:68:74:58:ca:ba:12: ca:5d:ab:89:32:9e:aa:80:cd:da:37:06:b9:84:4d:89:ce:e9: d6:9b:2f:f8:32:00:c1:97:b8:be:58:e3:fe:54:f7:eb:93:23: e3:36:09:1f:07:b3:7e:ab:77:c9:ed:f0:0b:03:1f:63:3a:81: c7:71:fa:9e:44:fa:e4:d9:af:b1:89:8e:50:e5:09:f4:d1:6e: cb:9e:3d:d8:5e:60:63:14:8f:a3:f5:f3:c6:00:0b:d5:1c:6d: 16:c2:73:20:06:f9:64:6d:ba:16:fa:16:2d:f8:e6:1f:fa:67: e4:b9:49:98:c8:66:e0:04:c5:f6:cf:a9:45:30:7f:9b:70:39: dd:85:c1:83:ce:5f:a6:1f:35:27:f0:9b:30:4e:1d:44:d2:2e: d1:5d:ac:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVNlyrtCSUnCzm6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDkwNDEyNDkxMloXDTI1MTIwMzEzNDkxMlowLzEtMCsGA1UEAxMk ZmQ5ODFkOTEtNWQzNS00NWUxLTg1ZmItYjY4MTQzOGZlZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaOUZXsdTYLKAU57zg49uIHq+N3/5McFhvLB uVuf9oyQAtHpJ+UNbYjE+jkehTs70H+Bo45uIkodc/6s5Pp1qkdAuE9aiSv4QfH7 dbPZyvcwxBPCpIDehYVHIDQ9SkozMCHh3nvCts9bMtfdtWinnpVTuM4+1dtbZKZs s38FeHXVHCweeliW1sQgFY1c8J86wQUGG1y8D9D91PwHxx9+n+l/2weo3QQDJhJW xy9JRMCcKKXhY7LSGGOXj0HlcN+GzT4ogfysgWbpz3cj8Ezu7NIxPHyQGEs7vzpi cxyQMI6kL/rADkzqIkmWwy2diHuzQIHZMgzCUe34EWeGLhfCWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7N/Kh60qwZgmPGiARM4VLpF/+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTYwZTRhNmMtMzBmYy0z MDBhLWFmNGMtZTVhOWRhYjJhMGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADREEEK7QGmPqsjEL+zJzb/3khk0YTVJREPqeKnHIzV9bhHaTi24bYEA MLe28Z6aeFPTqzbhPm39FUtaznKzyh6fGdEv2Tnm58UiK/xfvQSsHovCz+exFavp WBjaI53rAmK+0iQq0Wh0WMq6Espdq4kynqqAzdo3BrmETYnO6dabL/gyAMGXuL5Y 4/5U9+uTI+M2CR8Hs36rd8nt8AsDH2M6gcdx+p5E+uTZr7GJjlDlCfTRbsuePdhe YGMUj6P188YAC9UcbRbCcyAG+WRtuhb6Fi345h/6Z+S5SZjIZuAExfbPqUUwf5tw Od2FwYPOX6YfNSfwmzBOHUTSLtFdrLQ= -----END CERTIFICATE-----Generated at Sun Sep 7 08:54:50 2025 by rpki-client