$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02c9137a-3faa-3dcd-b5df-4f1573dd5a0d.roa File: 02c9137a-3faa-3dcd-b5df-4f1573dd5a0d.roa (raw, json) Hash identifier: es/Lx63UTPd9u9jzzitnlFSlC6+14VS8hpEakca88gc= Subject key identifier: 69:4E:F5:5B:B5:58:FB:6E:9F:54:B8:7F:AC:C0:F4:BF:FF:93:AD:62 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B6A61EF647D67492B0F89A7B0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02c9137a-3faa-3dcd-b5df-4f1573dd5a0d.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 16509 IP address blocks: 172.111.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:ef:64:7d:67:49:2b:0f:89:a7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=12eafa67-b68f-4f8b-bbbb-ddb96ab365e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d5:4d:b8:09:27:f6:d9:89:ec:2e:f1:a1:6e: 06:5c:ce:e0:25:d6:32:46:74:49:71:3b:d3:03:65: 53:0f:47:f4:55:9e:1e:02:7c:17:45:a9:5c:29:3b: 5a:b2:36:67:b4:5a:29:91:ad:9d:79:e2:40:5d:6a: 2a:00:56:28:8b:55:a3:73:4d:0b:2e:65:c6:a1:f2: fd:ca:01:d8:82:9b:72:1d:3c:8d:2d:2c:8b:f8:04: 4a:0e:99:09:7e:ee:24:c3:2e:8b:90:46:eb:c0:d5: 80:36:32:71:fd:14:fd:87:92:ba:36:56:a5:5c:ff: 0b:fe:7d:0e:d2:ae:d3:4e:f0:d4:9d:a4:6d:4d:99: 63:3f:d0:33:59:87:49:3d:73:47:3a:47:f5:72:db: 27:7b:a3:0f:b4:9b:d7:28:d4:27:7f:56:fa:a3:db: a0:6e:cc:c6:04:54:38:cb:66:93:2c:a5:7b:72:f8: 6c:76:a3:07:a3:dc:93:15:db:68:dd:97:f7:85:9b: 83:4c:d4:bb:e0:c1:99:1d:5d:33:fe:af:2b:e5:c8: 5b:5b:13:a5:a3:03:66:03:f5:ae:f0:66:29:f7:b2: 5b:de:eb:aa:ce:70:73:de:33:a4:fa:20:a7:f8:f8: da:85:4c:58:13:b8:c0:b6:6c:26:d7:e1:ed:35:18: c4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4E:F5:5B:B5:58:FB:6E:9F:54:B8:7F:AC:C0:F4:BF:FF:93:AD:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02c9137a-3faa-3dcd-b5df-4f1573dd5a0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:cf:40:ca:37:b7:6e:54:55:90:69:24:cc:6f:b9:7e:a1:9b: ed:a9:c0:92:88:6a:f1:8e:0c:96:2c:2d:9e:24:bf:7a:04:2d: 57:18:65:95:b0:15:5b:bf:08:08:7d:c2:19:bc:64:60:e1:8f: c2:19:12:df:92:ac:4d:30:d8:c8:bd:ce:ae:63:6e:b3:50:f2: be:19:4d:7d:f7:c3:d2:1b:cf:c4:e3:09:4c:67:88:f5:96:39: 0d:20:04:dd:f6:cb:c1:21:42:c0:72:84:a0:d1:28:4a:26:32: b9:01:5a:d9:0f:1a:55:f8:5b:7f:09:91:d4:ef:93:b8:be:67: 85:9b:24:ee:6a:60:6e:85:90:17:13:ee:e1:2e:63:be:06:41: e8:a2:2c:3e:3e:8c:93:fa:bf:d8:03:55:64:02:3d:3c:58:77: 3d:f9:e3:4f:50:1d:23:db:e5:43:f9:5f:84:df:64:b4:48:57: b8:44:b0:ee:ee:fb:52:59:e1:02:60:1c:b4:3f:d8:8c:a1:4a: f3:9a:e2:dd:5a:8f:19:1e:0f:bc:6d:99:8d:cb:04:b2:4f:84: f3:82:2e:0e:4c:63:2f:e6:e4:93:2e:81:bd:f7:0d:63:00:43: 3e:26:7f:f4:ff:a4:af:e8:b5:47:a9:c2:70:81:53:b9:37:82: dd:3f:5d:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYe9kfWdJKw+Jp7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MTJlYWZhNjctYjY4Zi00ZjhiLWJiYmItZGRiOTZhYjM2NWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdVNuAkn9tmJ7C7xoW4GXM7gJdYyRnRJcTvT A2VTD0f0VZ4eAnwXRalcKTtasjZntFopka2deeJAXWoqAFYoi1Wjc00LLmXGofL9 ygHYgptyHTyNLSyL+ARKDpkJfu4kwy6LkEbrwNWANjJx/RT9h5K6NlalXP8L/n0O 0q7TTvDUnaRtTZljP9AzWYdJPXNHOkf1ctsne6MPtJvXKNQnf1b6o9ugbszGBFQ4 y2aTLKV7cvhsdqMHo9yTFdto3Zf3hZuDTNS74MGZHV0z/q8r5chbWxOlowNmA/Wu 8GYp97Jb3uuqznBz3jOk+iCn+PjahUxYE7jAtmwm1+HtNRjE/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlO9Vu1WPtun1S4f6zA9L//k61iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDJjOTEzN2EtM2ZhYS0z ZGNkLWI1ZGYtNGYxNTczZGQ1YTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPPQMo3t25UVZBpJMxvuX6hm+2pwJKIavGODJYsLZ4kv3oELVcYZZWw FVu/CAh9whm8ZGDhj8IZEt+SrE0w2Mi9zq5jbrNQ8r4ZTX33w9Ibz8TjCUxniPWW OQ0gBN32y8EhQsByhKDRKEomMrkBWtkPGlX4W38JkdTvk7i+Z4WbJO5qYG6FkBcT 7uEuY74GQeiiLD4+jJP6v9gDVWQCPTxYdz35409QHSPb5UP5X4TfZLRIV7hEsO7u +1JZ4QJgHLQ/2IyhSvOa4t1ajxkeD7xtmY3LBLJPhPOCLg5MYy/m5JMugb33DWMA Qz4mf/T/pK/otUepwnCBU7k3gt0/XU8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:30 2025 by rpki-client