$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cb30e8b7-af70-3e51-b631-db53e6353782.roa File: cb30e8b7-af70-3e51-b631-db53e6353782.roa (raw, json) Hash identifier: a7l2n7KOa7BA8pAOI8049nd8K5tjeTqgfZ+I4b/P+go= Subject key identifier: 15:D3:A0:FD:E5:1C:96:FD:B3:7C:CE:93:92:BC:A8:08:EE:1F:A5:86 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B36EF5624E0164E53B00B1120 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cb30e8b7-af70-3e51-b631-db53e6353782.roa Signing time: Tue 16 Sep 2025 14:43:35 +0000 ROA not before: Tue 16 Sep 2025 14:43:35 +0000 ROA not after: Mon 15 Dec 2025 15:43:35 +0000 asID: 9009 IP address blocks: 172.111.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:ef:56:24:e0:16:4e:53:b0:0b:11:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 16 14:43:35 2025 GMT Not After : Dec 15 15:43:35 2025 GMT Subject: CN=424154c8-2565-4bb7-a621-0bb11a71313d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:99:9a:58:79:31:ae:e2:38:f7:3e:48:c5:12: 4a:a2:01:b4:98:7f:84:75:c0:6d:b2:bf:51:f5:31: b4:61:43:e5:b0:53:b0:ac:f8:78:17:65:23:2d:79: 4e:70:4e:f0:8f:c9:72:06:ab:bd:34:ad:ae:aa:2b: 9f:70:a0:94:7c:39:d1:a3:2f:a2:cc:99:3a:93:8d: 5e:e4:98:00:ff:28:25:43:fd:3a:d8:4a:3c:26:a5: d0:28:3f:f2:da:de:9b:e2:d1:a1:5d:03:8a:02:b4: 9d:c8:47:81:8f:7e:ec:48:fb:aa:7f:f8:1b:8a:ae: 28:85:3e:d2:f3:f2:e8:9f:0e:f6:e4:77:ac:08:cf: 01:6a:ae:62:fc:f5:1f:ad:ac:cb:e1:05:5a:ab:a6: 87:bb:48:ea:6d:35:5f:11:8c:cb:0c:db:73:23:08: ff:95:b4:ad:e4:9d:ca:b4:d0:d0:57:58:28:00:9e: a9:a9:32:54:81:35:3f:86:2a:93:b0:a8:39:c5:f0: ef:42:5f:6c:2a:21:6b:3e:09:20:c7:4c:3b:d6:c7: 23:76:82:00:10:ac:a3:8a:c3:d6:4b:1f:e7:06:7b: b0:17:bf:d2:ba:a4:bf:cc:b7:1c:bc:52:7c:93:2e: 71:5c:ee:76:8a:3d:66:a0:2f:a4:e0:fe:c7:61:3b: 1b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D3:A0:FD:E5:1C:96:FD:B3:7C:CE:93:92:BC:A8:08:EE:1F:A5:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cb30e8b7-af70-3e51-b631-db53e6353782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:6a:94:72:d1:24:71:3b:26:95:51:a5:ad:a6:76:a6:93:51: b8:2d:64:53:09:3d:4e:eb:26:e7:48:8e:d5:26:3e:95:33:53: 5d:85:43:ca:63:87:e1:3f:fa:c0:00:ae:ce:6e:92:1d:74:b6: 93:84:77:41:da:61:ca:4e:72:b6:cf:29:5c:d3:17:48:e4:52: 48:ea:d3:69:4c:0b:9e:b3:61:f4:b0:4d:2b:e3:71:6f:f0:dc: 8c:fe:e9:52:df:f9:0a:3d:21:a4:e7:95:38:62:b4:82:1b:b5: c3:1e:0a:22:0e:f4:d5:b8:66:33:b9:b8:b8:5b:10:75:a7:ac: fa:df:1c:02:51:5b:ab:1d:9d:d2:93:03:e0:64:81:6b:73:85: a9:6f:4a:96:19:ba:a8:5d:02:20:2c:5d:cc:f9:3d:13:3c:e1: b8:a9:ce:7d:fa:7d:38:86:af:5d:cd:1d:f8:9a:ed:ab:75:7d: 29:92:60:90:49:de:2e:56:c3:34:95:b3:d6:57:62:f0:9c:a6: 0e:67:43:72:7c:7a:a6:ca:55:f2:fa:48:ac:f9:59:ea:40:26: 5d:e7:84:e1:29:c0:ef:70:df:cb:54:f7:94:76:cf:55:da:98: ba:77:7c:34:95:54:18:6c:a4:c3:83:fd:75:30:2b:b3:9b:2f: 02:7e:24:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs271Yk4BZOU7ALESAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDkxNjE0NDMzNVoXDTI1MTIxNTE1NDMzNVowLzEtMCsGA1UEAxMk NDI0MTU0YzgtMjU2NS00YmI3LWE2MjEtMGJiMTFhNzEzMTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZmaWHkxruI49z5IxRJKogG0mH+EdcBtsr9R 9TG0YUPlsFOwrPh4F2UjLXlOcE7wj8lyBqu9NK2uqiufcKCUfDnRoy+izJk6k41e 5JgA/yglQ/062Eo8JqXQKD/y2t6b4tGhXQOKArSdyEeBj37sSPuqf/gbiq4ohT7S 8/Lonw725HesCM8Baq5i/PUfrazL4QVaq6aHu0jqbTVfEYzLDNtzIwj/lbSt5J3K tNDQV1goAJ6pqTJUgTU/hiqTsKg5xfDvQl9sKiFrPgkgx0w71scjdoIAEKyjisPW Sx/nBnuwF7/SuqS/zLccvFJ8ky5xXO52ij1moC+k4P7HYTsbMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXToP3lHJb9s3zOk5K8qAjuH6WGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvY2IzMGU4YjctYWY3MC0z ZTUxLWI2MzEtZGI1M2U2MzUzNzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhqlHLRJHE7JpVRpa2mdqaTUbgtZFMJPU7rJudIjtUmPpUzU12FQ8pj h+E/+sAArs5ukh10tpOEd0HaYcpOcrbPKVzTF0jkUkjq02lMC56zYfSwTSvjcW/w 3Iz+6VLf+Qo9IaTnlThitIIbtcMeCiIO9NW4ZjO5uLhbEHWnrPrfHAJRW6sdndKT A+BkgWtzhalvSpYZuqhdAiAsXcz5PRM84bipzn36fTiGr13NHfia7at1fSmSYJBJ 3i5WwzSVs9ZXYvCcpg5nQ3J8eqbKVfL6SKz5WepAJl3nhOEpwO9w38tU95R2z1Xa mLp3fDSVVBhspMOD/XUwK7ObLwJ+JCU= -----END CERTIFICATE-----Generated at Sun Oct 19 07:15:32 2025 by rpki-client