$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/ffc4e20c-a6cf-3c3b-9c67-a909a68af906.roa File: ffc4e20c-a6cf-3c3b-9c67-a909a68af906.roa (raw, json) Hash identifier: 51ptaszltMOUKHC6kyQYe+X0MVslc86WFkh0U9i3/QQ= Subject key identifier: 80:FC:BF:45:15:5F:D6:26:B3:5E:92:7B:07:AB:71:56:78:CA:BC:A8 Certificate issuer: /CN=94543699-4d50-4a37-8000-038c38671a86 Certificate serial: 010D0C9F4328584B047C099174F9A55B65C7BA00 Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/ffc4e20c-a6cf-3c3b-9c67-a909a68af906.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 6939 IP address blocks: 172.111.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:09:91:74:f9:a5:5b:65:c7:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94543699-4d50-4a37-8000-038c38671a86 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=8599be75-a6bc-4297-8d92-5c9b9e0e9b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:76:3f:31:40:bd:5f:ce:4d:39:03:68:2d:31: 14:b8:54:b2:b5:d7:74:30:27:db:03:a4:5d:91:e7: 32:e7:41:39:c3:66:d9:df:b7:86:13:bb:04:50:93: 6b:46:3f:09:81:7a:00:49:0c:92:f2:bd:1b:ed:6a: 12:93:2a:74:c7:a7:d9:dc:91:47:8a:15:fe:16:1a: 8b:22:38:9e:62:f3:4c:e7:14:28:1b:52:7c:fc:19: d0:ab:72:21:8e:09:40:ba:0d:97:cb:4a:dc:16:d8: c1:43:3e:65:1a:09:a8:66:e5:9a:d0:e8:fe:27:4a: 5b:62:c9:72:e0:41:a9:21:c3:01:bc:da:67:a5:3c: f1:86:e6:d1:a7:57:f7:23:73:28:bc:60:ae:17:ad: 7d:2f:be:4b:74:b7:a7:83:db:75:09:e0:bd:4c:15: 92:a3:1b:f9:38:b0:e9:c0:55:90:7b:d5:38:2f:3b: 31:13:1d:3e:d8:67:04:2e:86:ee:c2:90:e5:ca:5c: 86:59:08:d7:b4:e0:82:c2:c4:fe:64:a4:a3:69:49: 5c:fc:7e:33:e9:8d:30:59:82:df:38:f1:17:8f:4e: e9:d2:d9:ea:70:fe:21:78:b9:c2:5e:c0:ac:e1:f6: b1:46:78:3f:66:00:02:7e:b8:6d:4c:c3:78:91:05: 6e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FC:BF:45:15:5F:D6:26:B3:5E:92:7B:07:AB:71:56:78:CA:BC:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/ffc4e20c-a6cf-3c3b-9c67-a909a68af906.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl X509v3 Authority Key Identifier: keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer sbgp-ipAddrBlock: critical IPv4: 172.111.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:f0:8e:11:03:ed:99:00:a3:a0:a4:82:0f:72:61:06:5c:fb: dc:c1:06:49:3e:19:c7:0b:2e:f7:6b:90:4e:6f:b8:80:59:e3: 19:bf:9f:33:5a:55:96:46:2f:7e:27:0f:09:f1:b5:11:2c:06: c6:54:e1:35:15:b4:40:2f:56:28:8e:a0:49:a1:26:1c:2f:2e: ff:41:6b:5c:26:74:f0:40:bb:71:a7:8f:22:bd:4d:ce:52:63: e3:e2:75:53:2b:55:38:1d:bb:19:91:5c:e1:01:b1:9f:f0:da: a9:b7:ac:b4:68:65:ef:72:61:f9:1d:c6:ed:53:b2:ee:84:8a: 9d:e5:95:d6:05:dd:b9:0d:43:94:b6:f9:15:2d:20:c3:c5:b2: 89:29:d6:4d:f4:a6:a5:c6:d3:05:c3:e1:ef:5d:8b:7c:1b:10: d6:eb:0b:4a:d0:45:bb:d4:f0:ee:88:62:65:95:81:2f:80:db: fa:58:d2:ce:3a:27:8e:d6:2a:28:b5:50:2f:05:d1:74:03:41: 83:e0:b9:12:ea:88:7f:2e:34:6d:01:04:66:54:d5:e4:64:ca: 1f:7d:0f:29:af:2e:15:6e:b6:e7:49:a8:cf:1a:8b:4c:51:0e: f9:8f:78:73:3a:59:92:11:be:ef:48:66:5d:d8:ef:f3:53:14: 32:53:10:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAmRdPmlW2XHugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1NDM2OTktNGQ1MC00YTM3LTgwMDAtMDM4YzM4Njcx YTg2MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk ODU5OWJlNzUtYTZiYy00Mjk3LThkOTItNWM5YjllMGU5Yjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznY/MUC9X85NOQNoLTEUuFSytdd0MCfbA6Rd kecy50E5w2bZ37eGE7sEUJNrRj8JgXoASQyS8r0b7WoSkyp0x6fZ3JFHihX+FhqL IjieYvNM5xQoG1J8/BnQq3IhjglAug2Xy0rcFtjBQz5lGgmoZuWa0Oj+J0pbYsly 4EGpIcMBvNpnpTzxhubRp1f3I3MovGCuF619L75LdLeng9t1CeC9TBWSoxv5OLDp wFWQe9U4LzsxEx0+2GcELobuwpDlylyGWQjXtOCCwsT+ZKSjaUlc/H4z6Y0wWYLf OPEXj07p0tnqcP4heLnCXsCs4faxRng/ZgACfrhtTMN4kQVu6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFID8v0UVX9Yms16SewercVZ4yryoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0 MzY5OS00ZDUwLTRhMzctODAwMC0wMzhjMzg2NzFhODYvZmZjNGUyMGMtYTZjZi0z YzNiLTljNjctYTkwOWE2OGFmOTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTQ1NDM2OTktNGQ1MC00YTM3LTgw MDAtMDM4YzM4NjcxYTg2Lzk0NTQzNjk5LTRkNTAtNGEzNy04MDAwLTAzOGMzODY3 MWE4Ni5jcmwwHwYDVR0jBBgwFoAUA/mT0DrEyfWVfSGEZ/9sW9FWgeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0MzY5OS00ZDUwLTRhMzctODAwMC0wMzhj Mzg2NzFhODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrG8WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzwjhED7ZkAo6Ckgg9yYQZc+9zBBkk+GccLLvdrkE5vuIBZ4xm/nzNa VZZGL34nDwnxtREsBsZU4TUVtEAvViiOoEmhJhwvLv9Ba1wmdPBAu3GnjyK9Tc5S Y+PidVMrVTgduxmRXOEBsZ/w2qm3rLRoZe9yYfkdxu1Tsu6Eip3lldYF3bkNQ5S2 +RUtIMPFsokp1k30pqXG0wXD4e9di3wbENbrC0rQRbvU8O6IYmWVgS+A2/pY0s46 J47WKii1UC8F0XQDQYPguRLqiH8uNG0BBGZU1eRkyh99DymvLhVutudJqM8ai0xR DvmPeHM6WZIRvu9IZl3Y7/NTFDJTECc= -----END CERTIFICATE-----Generated at Tue Sep 16 17:23:06 2025 by rpki-client