$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ba927c98-5c7c-3bfc-bd8e-769c10ebbf5b.roa File: ba927c98-5c7c-3bfc-bd8e-769c10ebbf5b.roa (raw, json) Hash identifier: so78aiqV1nNWKSMaeYDFVnO1EgSbNmCfTa6UEca58q8= Subject key identifier: 17:40:0B:11:0B:E2:F3:A9:23:AC:9A:32:03:3F:89:31:86:A8:71:80 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B3B6A4F2C89AD73A49A1268C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ba927c98-5c7c-3bfc-bd8e-769c10ebbf5b.roa Signing time: Thu 18 Sep 2025 05:14:36 +0000 ROA not before: Thu 18 Sep 2025 05:14:36 +0000 ROA not after: Wed 17 Dec 2025 06:14:36 +0000 asID: 212238 IP address blocks: 172.111.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3b:6a:4f:2c:89:ad:73:a4:9a:12:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 18 05:14:36 2025 GMT Not After : Dec 17 06:14:36 2025 GMT Subject: CN=9920b7f4-13c7-4325-805c-ce779d477cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:11:e3:c1:50:10:7f:6e:c2:db:ad:f0:81:5a: b7:9e:35:35:36:45:a0:83:13:44:36:49:3c:0c:f8: 78:fc:29:49:b0:27:22:1a:17:2c:74:a9:9b:0c:5a: 01:b2:ed:a2:fa:e5:23:42:0e:a0:c4:2d:46:40:bd: 58:e9:5f:51:57:b7:37:14:cf:76:59:e3:88:86:d5: dd:9c:95:09:c8:05:45:2a:cb:50:ee:f9:80:df:d1: ac:97:9e:38:81:27:2c:49:d2:aa:86:d7:a7:27:89: f7:10:67:3b:bc:6b:a2:f2:c7:e9:98:ee:a4:ac:e0: 35:ab:fa:cd:0b:82:91:b4:7a:0d:99:ba:31:3e:d5: f5:5a:7a:47:d6:38:8e:1d:a2:b4:3c:c4:a8:f6:86: 96:c0:c6:13:7a:0a:1a:fb:1c:56:fe:16:dd:ed:94: 22:f9:e9:a0:ad:d3:1b:d0:b5:e2:cc:98:01:79:26: d9:3a:29:41:ac:f0:64:95:7f:31:2c:29:a6:68:04: 9d:e6:0b:33:23:01:ca:92:47:0f:f5:64:a0:ce:09: e6:ae:35:2b:97:a6:ed:28:c3:ae:ff:86:79:78:34: be:60:2c:a8:0e:3c:91:48:1b:5b:e5:d6:f1:4e:8f: 55:7f:47:06:1b:84:d8:8a:b0:54:d3:41:29:f4:4e: cd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:40:0B:11:0B:E2:F3:A9:23:AC:9A:32:03:3F:89:31:86:A8:71:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ba927c98-5c7c-3bfc-bd8e-769c10ebbf5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9d:99:f2:45:69:a2:2a:91:8f:02:83:a4:94:f3:0a:dd:e7: 46:34:ec:45:ca:c3:3f:7a:d8:16:f1:26:5b:11:15:a0:98:d6: d3:be:c7:63:f3:b2:13:9a:14:7d:62:21:25:22:2e:83:3e:c0: 23:a7:b0:6a:4c:72:be:57:e0:eb:00:84:9a:bd:07:78:1a:b6: 6e:76:b3:3c:3e:bf:59:5c:07:f3:35:e0:87:91:f9:ed:25:d1: 2a:1e:a7:1e:08:9c:18:14:7b:85:06:a2:01:68:ef:16:5c:86: ec:0a:a6:14:42:fb:32:86:20:a7:99:02:17:63:c3:44:c2:12: 70:00:50:72:7b:26:ce:9c:e2:71:11:7b:96:39:56:7b:5e:11: 54:92:a9:45:07:a6:12:d5:52:f9:2c:68:b4:1a:8f:b3:26:ec: de:99:17:c3:53:f6:ed:93:58:99:89:26:ba:b5:c8:bb:cb:88: 53:62:c7:36:c8:67:f3:45:ed:68:63:0d:ab:a3:6a:eb:e3:93: f2:af:7a:45:c3:dc:0d:4a:0a:28:30:98:ad:f6:d2:b8:48:3f: fb:7a:35:df:d3:a8:86:a0:7c:a9:66:8a:fb:21:5b:68:12:98: 6d:20:4e:4a:a9:a4:d5:8a:41:1d:07:4d:44:ba:2f:49:cc:38: 42:e5:91:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs7ak8sia1zpJoSaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDkxODA1MTQzNloXDTI1MTIxNzA2MTQzNlowLzEtMCsGA1UEAxMk OTkyMGI3ZjQtMTNjNy00MzI1LTgwNWMtY2U3NzlkNDc3Y2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihHjwVAQf27C263wgVq3njU1NkWggxNENkk8 DPh4/ClJsCciGhcsdKmbDFoBsu2i+uUjQg6gxC1GQL1Y6V9RV7c3FM92WeOIhtXd nJUJyAVFKstQ7vmA39Gsl544gScsSdKqhtenJ4n3EGc7vGui8sfpmO6krOA1q/rN C4KRtHoNmboxPtX1WnpH1jiOHaK0PMSo9oaWwMYTegoa+xxW/hbd7ZQi+emgrdMb 0LXizJgBeSbZOilBrPBklX8xLCmmaASd5gszIwHKkkcP9WSgzgnmrjUrl6btKMOu /4Z5eDS+YCyoDjyRSBtb5dbxTo9Vf0cGG4TYirBU00Ep9E7NgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdACxEL4vOpI6yaMgM/iTGGqHGAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmE5MjdjOTgtNWM3Yy0z YmZjLWJkOGUtNzY5YzEwZWJiZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOdmfJFaaIqkY8Cg6SU8wrd50Y07EXKwz962BbxJlsRFaCY1tO+x2Pz shOaFH1iISUiLoM+wCOnsGpMcr5X4OsAhJq9B3gatm52szw+v1lcB/M14IeR+e0l 0Soepx4InBgUe4UGogFo7xZchuwKphRC+zKGIKeZAhdjw0TCEnAAUHJ7Js6c4nER e5Y5VnteEVSSqUUHphLVUvksaLQaj7Mm7N6ZF8NT9u2TWJmJJrq1yLvLiFNixzbI Z/NF7WhjDaujauvjk/KvekXD3A1KCigwmK320rhIP/t6Nd/TqIagfKlmivshW2gS mG0gTkqppNWKQR0HTUS6L0nMOELlkWg= -----END CERTIFICATE-----Generated at Sun Oct 19 08:29:09 2025 by rpki-client