$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa File: d187a421-c3fa-3a3d-82ce-a52b6630982c.roa (raw, json) Hash identifier: qebRtmY9hqNaKzerclpV2r5UHfTWTEr4DhNCOSmOQos= Subject key identifier: C9:7D:D9:D1:F3:AF:31:D4:FF:27:55:D2:8B:82:77:F8:A8:91:F7:E1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B047C10CDD37142599C6B5D00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 9009 IP address blocks: 172.111.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:10:cd:d3:71:42:59:9c:6b:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=dd5dc85d-779b-4e4e-b028-f78682d12d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:23:81:45:39:34:f7:12:7f:90:e1:4e:94:cd: c2:60:08:9b:3a:ff:8a:08:1b:2d:51:a8:ed:e4:4c: d4:93:fa:73:b4:17:9a:c8:0f:03:34:b9:9a:31:1a: 31:03:d5:64:43:e7:07:1f:c8:cc:b2:88:a7:44:54: 78:f5:ce:25:e8:16:23:12:ad:45:bd:f5:e2:be:6a: a0:09:3e:25:a7:d0:b6:35:69:c6:3f:a2:f1:06:9f: 66:39:b7:c4:02:2d:29:7e:4a:d7:a4:64:04:3a:19: ee:14:70:09:c0:1c:63:ac:de:a1:40:55:e7:05:fb: 32:e6:70:3f:83:3e:68:aa:1f:f7:a9:47:d3:e3:f9: eb:ab:d5:68:4a:2d:5f:af:9b:6f:ba:c7:30:4b:fb: 36:5d:f9:37:eb:cc:5e:f5:6e:9e:14:a1:b4:a6:53: 9a:a5:5a:71:7d:1c:cc:ed:b5:25:fc:66:6c:89:4a: ac:ca:39:f2:d5:8a:ef:a9:82:d1:39:e6:3d:98:ea: 7f:65:4c:34:40:04:8b:11:bb:e7:1f:9d:4e:21:a7: 98:ea:ab:c8:40:7a:73:04:fd:f6:a2:77:91:82:72: 8e:45:30:98:45:15:a9:54:ac:8c:d8:ff:66:b4:ea: 24:75:b1:28:b2:7a:8f:aa:4c:50:fd:6a:7a:b6:15: a2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7D:D9:D1:F3:AF:31:D4:FF:27:55:D2:8B:82:77:F8:A8:91:F7:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d187a421-c3fa-3a3d-82ce-a52b6630982c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:8d:81:91:1a:13:e2:e3:2f:4f:0c:d1:d5:7f:b9:8b:06:80: 32:7d:ee:83:5a:cb:6f:a5:82:09:4a:55:e4:d8:cd:cc:e3:7b: 8f:08:40:39:39:eb:1b:f0:9b:16:b0:d7:20:ac:a8:d7:2a:67: 55:33:85:2b:55:e4:db:81:f3:32:0e:51:8b:e2:95:78:f2:79: 8e:f9:23:c6:92:86:8c:aa:b5:26:55:a1:bd:74:8c:ac:f8:8c: 49:76:f3:7e:be:29:a4:70:da:6e:e3:74:0e:5a:0e:cd:3c:51: 29:15:ce:8d:6d:da:e5:e5:85:b6:11:49:09:29:de:71:ff:b8: 42:9e:c9:33:9a:c8:63:ae:d5:5c:bb:af:e4:24:a1:cb:97:10: 7a:c2:2c:57:50:00:b5:ae:be:cc:55:19:ba:e9:e5:18:49:a7: 31:1a:94:8a:6f:fc:d9:83:19:87:98:cf:55:13:10:1e:25:3c: 3c:75:e8:08:38:17:da:f4:be:39:c5:e6:cd:ec:33:33:45:c0: 2e:89:6c:89:5d:8a:06:b0:aa:38:f9:68:d6:84:53:80:49:6e: 36:3a:26:6c:8b:27:cf:43:77:0f:de:28:75:26:32:54:b0:7d: 79:b6:4f:f9:49:0e:c2:cc:b8:d9:a9:30:2c:17:57:9d:e8:ac: 16:3a:3a:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBDN03FCWZxrXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZGQ1ZGM4NWQtNzc5Yi00ZTRlLWIwMjgtZjc4NjgyZDEyZDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCOBRTk09xJ/kOFOlM3CYAibOv+KCBstUajt 5EzUk/pztBeayA8DNLmaMRoxA9VkQ+cHH8jMsoinRFR49c4l6BYjEq1FvfXivmqg CT4lp9C2NWnGP6LxBp9mObfEAi0pfkrXpGQEOhnuFHAJwBxjrN6hQFXnBfsy5nA/ gz5oqh/3qUfT4/nrq9VoSi1fr5tvuscwS/s2Xfk368xe9W6eFKG0plOapVpxfRzM 7bUl/GZsiUqsyjny1YrvqYLROeY9mOp/ZUw0QASLEbvnH51OIaeY6qvIQHpzBP32 oneRgnKORTCYRRWpVKyM2P9mtOokdbEosnqPqkxQ/Wp6thWiywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMl92dHzrzHU/ydV0ouCd/iokffhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDE4N2E0MjEtYzNmYS0z YTNkLTgyY2UtYTUyYjY2MzA5ODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+NgZEaE+LjL08M0dV/uYsGgDJ97oNay2+lgglKVeTYzczje48IQDk5 6xvwmxaw1yCsqNcqZ1UzhStV5NuB8zIOUYvilXjyeY75I8aShoyqtSZVob10jKz4 jEl2836+KaRw2m7jdA5aDs08USkVzo1t2uXlhbYRSQkp3nH/uEKeyTOayGOu1Vy7 r+QkocuXEHrCLFdQALWuvsxVGbrp5RhJpzEalIpv/NmDGYeYz1UTEB4lPDx16Ag4 F9r0vjnF5s3sMzNFwC6JbIldigawqjj5aNaEU4BJbjY6JmyLJ89Ddw/eKHUmMlSw fXm2T/lJDsLMuNmpMCwXV53orBY6OmQ= -----END CERTIFICATE-----Generated at Fri Sep 5 04:25:45 2025 by rpki-client