$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa File: febb0e75-40f1-37a9-a0a4-5dc80635d514.roa (raw, json) Hash identifier: hCsKIWIz7+1DobnnNcZcxUIMkqdTR8HJKeFHZYgGMTk= Subject key identifier: C9:05:D2:09:C2:2E:9E:61:D5:6F:5E:58:1C:0B:44:14:CC:2C:1E:A2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B047C086406533DB210D9AA20 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 3223 IP address blocks: 172.111.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:08:64:06:53:3d:b2:10:d9:aa:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=7e289d0d-e385-4d01-938c-df6ecc7dd33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d5:a0:3c:45:d8:4a:76:3b:24:5c:a2:5e:1a: 52:36:8a:00:c2:8a:db:08:c6:a5:58:8f:62:38:8e: d6:d7:0a:e9:83:58:3b:d1:63:2b:c9:bd:c1:7f:d5: 9f:e5:45:c2:85:09:33:30:74:49:39:94:04:ab:b6: 77:57:db:9d:28:d5:b3:51:70:d6:25:ec:e0:40:03: b7:9c:de:0e:85:44:08:7f:0f:a3:c1:4c:fd:a7:84: ef:b5:77:64:23:76:82:9d:4e:04:35:cb:22:cb:25: b1:58:e3:32:65:75:61:98:53:7e:1d:2a:f9:d9:21: 7d:d8:03:e1:0a:1a:66:0c:8b:a7:4e:42:c5:17:03: 74:1d:de:43:e9:31:b4:c8:4e:45:c2:30:3e:af:04: 38:04:aa:81:52:e2:f8:36:db:14:6e:38:de:24:93: d1:43:5e:aa:3a:af:f8:97:57:2f:1c:c2:72:dd:92: a0:00:fc:0e:e7:56:bb:ae:e0:05:29:66:8f:30:b1: ba:3a:6a:58:55:c6:fc:8c:54:66:7d:1f:51:e8:83: 81:cf:04:a5:7a:bd:b9:5e:45:e4:59:ec:72:8b:59: 3d:0c:05:0a:d5:f5:e5:79:2d:ec:04:80:07:c7:c4: 4c:ce:16:0a:3b:1d:50:78:0b:aa:28:c8:6d:e5:9e: b3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:05:D2:09:C2:2E:9E:61:D5:6F:5E:58:1C:0B:44:14:CC:2C:1E:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/febb0e75-40f1-37a9-a0a4-5dc80635d514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:9c:c6:c4:54:f7:05:71:fc:ca:99:b0:fd:ad:63:25:f9:c9: 38:07:e8:4f:27:42:00:f3:05:aa:39:26:fb:b4:8a:60:ed:b0: a7:ea:7d:84:b7:e1:80:9f:5f:4c:a2:75:4c:62:c7:88:39:de: b8:b5:47:ac:4c:97:fa:f6:32:a6:dd:80:36:0a:4e:23:d0:74: 24:f6:d7:a5:97:68:61:e4:36:f8:96:0f:2c:3b:9e:b1:a2:e3: 8b:13:49:36:60:e7:f1:ae:ed:37:f5:5d:1d:41:05:c1:39:70: b2:9d:0d:f8:56:99:70:5a:0b:96:32:6d:51:4e:5f:a6:65:47: 79:cc:35:5b:66:c0:3f:bd:e0:27:c9:f6:86:ed:07:d9:61:ae: f6:d1:c9:d7:7f:d0:d4:87:47:a8:f3:9f:64:8d:53:dc:78:fc: 41:ae:da:4d:55:b9:1b:42:8c:44:1b:f3:ea:a6:b5:28:25:8f: 36:c1:58:e0:f7:52:7c:61:9f:d7:fb:f2:3d:53:14:fa:ee:84: 64:3a:aa:30:6a:9f:0f:b8:02:ef:9e:21:61:2e:1c:b2:b0:85: 05:6b:9d:5d:a3:5f:6b:26:7f:3c:4b:8d:35:25:1a:80:bb:d7: 4b:45:f0:58:f2:53:51:86:80:2e:82:73:71:44:4d:5f:22:ed: 57:db:df:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAhkBlM9shDZqiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk N2UyODlkMGQtZTM4NS00ZDAxLTkzOGMtZGY2ZWNjN2RkMzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9WgPEXYSnY7JFyiXhpSNooAworbCMalWI9i OI7W1wrpg1g70WMryb3Bf9Wf5UXChQkzMHRJOZQEq7Z3V9udKNWzUXDWJezgQAO3 nN4OhUQIfw+jwUz9p4TvtXdkI3aCnU4ENcsiyyWxWOMyZXVhmFN+HSr52SF92APh ChpmDIunTkLFFwN0Hd5D6TG0yE5FwjA+rwQ4BKqBUuL4NtsUbjjeJJPRQ16qOq/4 l1cvHMJy3ZKgAPwO51a7ruAFKWaPMLG6OmpYVcb8jFRmfR9R6IOBzwSler25XkXk Wexyi1k9DAUK1fXleS3sBIAHx8RMzhYKOx1QeAuqKMht5Z6zbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkF0gnCLp5h1W9eWBwLRBTMLB6iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmViYjBlNzUtNDBmMS0z N2E5LWEwYTQtNWRjODA2MzVkNTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2cxsRU9wVx/MqZsP2tYyX5yTgH6E8nQgDzBao5Jvu0imDtsKfqfYS3 4YCfX0yidUxix4g53ri1R6xMl/r2MqbdgDYKTiPQdCT216WXaGHkNviWDyw7nrGi 44sTSTZg5/Gu7Tf1XR1BBcE5cLKdDfhWmXBaC5YybVFOX6ZlR3nMNVtmwD+94CfJ 9obtB9lhrvbRydd/0NSHR6jzn2SNU9x4/EGu2k1VuRtCjEQb8+qmtSgljzbBWOD3 Unxhn9f78j1TFPruhGQ6qjBqnw+4Au+eIWEuHLKwhQVrnV2jX2smfzxLjTUlGoC7 10tF8FjyU1GGgC6Cc3FETV8i7Vfb310= -----END CERTIFICATE-----Generated at Fri Sep 5 23:34:26 2025 by rpki-client