$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0fdcaa24-e3b0-3eca-983a-c86646b16ede.roa File: 0fdcaa24-e3b0-3eca-983a-c86646b16ede.roa (raw, json) Hash identifier: stWaBs0G8Ost0U814/fx7bwFhi//RGVGq2qlzJyDpsA= Subject key identifier: C7:96:3E:82:75:07:69:CF:17:E7:27:A3:70:A8:95:69:93:B0:07:C8 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BA0D2600B9AC733DE854C8303 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0fdcaa24-e3b0-3eca-983a-c86646b16ede.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 9009 IP address blocks: 172.111.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:60:0b:9a:c7:33:de:85:4c:83:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=8aeb44d9-bce8-4b4e-98ac-66309be0a72f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:12:f4:20:d7:89:26:29:30:42:cc:8e:4e:41: 6c:6a:ef:85:05:a0:32:37:f3:4a:be:71:2d:a8:e2: 94:40:2d:79:8f:f8:c5:e2:68:4b:ad:6c:36:b7:4d: 7b:e8:ec:ab:a6:55:74:d5:4a:6a:33:3d:e3:a5:ff: 7f:89:9e:1a:cb:97:c8:dc:ea:df:09:84:d8:c8:fd: 9d:55:75:36:64:5c:b6:07:a5:da:0f:69:5b:53:e6: 94:a3:2e:80:ff:93:55:9b:86:1d:60:0e:3d:b5:bf: 68:05:b9:6f:f1:20:5d:fc:7a:94:11:f7:07:aa:60: 94:99:c7:41:ec:70:5d:53:fd:47:6e:29:72:c4:03: 13:f1:aa:aa:f4:f2:21:01:83:7c:ee:7a:74:6f:a2: e0:80:25:e1:35:79:86:58:a9:a5:7b:8e:31:b0:14: cc:a4:bf:f3:59:a2:1e:0b:cd:2e:26:b9:5b:f5:21: 42:3e:b1:fa:92:f6:41:49:f7:2d:8a:28:f2:23:b6: 0b:e5:74:21:5e:54:12:fd:ea:e1:8b:21:d0:b6:21: 0a:23:50:73:9d:30:36:27:9a:3d:d2:6a:3b:ef:5b: 08:e6:6f:b8:df:da:8e:7e:e2:dd:a0:48:23:4f:fa: c5:1e:44:36:56:4e:c9:33:a8:b9:b9:f8:1a:51:b1: 18:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:96:3E:82:75:07:69:CF:17:E7:27:A3:70:A8:95:69:93:B0:07:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0fdcaa24-e3b0-3eca-983a-c86646b16ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:8f:0b:bb:f5:fb:f1:97:e7:4c:f3:9f:a3:cc:ca:1e:e2:e1: 39:88:fe:be:12:4f:75:06:d2:19:9e:9d:a9:66:26:a0:35:b8: a6:02:fa:e6:6b:23:13:5a:7f:8e:2d:8a:40:fb:7e:85:75:c1: f7:03:e2:de:db:7e:8e:52:36:69:27:b6:07:cd:0a:3d:64:5b: ac:a0:aa:c4:da:b7:d1:a3:2c:b9:1e:58:cd:5f:b2:38:e6:1a: 99:e9:f0:23:a0:82:05:4a:71:43:29:7f:ab:c5:57:d2:06:69: 9a:da:09:d0:8a:92:14:a5:78:41:20:c2:f3:6d:7e:49:8e:89: 2d:88:7c:bd:51:d7:68:a1:08:33:a5:a3:2a:d7:db:f3:0a:b9: bf:43:4c:50:ba:8f:9f:13:57:01:13:69:f5:48:bc:3c:11:de: 4e:38:d2:4a:f7:85:71:58:23:59:34:c3:e8:42:74:3a:26:52: 78:ba:3c:76:c0:66:f9:80:29:f4:d2:cb:8a:20:a5:09:99:6e: 26:38:6f:64:12:06:ba:10:c0:8a:18:2c:b0:9d:ba:ff:ef:e2: a0:40:dc:f1:0b:a9:61:4c:6a:74:9e:09:ea:6b:dc:85:d0:9d: c1:2d:37:a5:d2:14:25:92:5d:34:b1:39:43:b2:18:e6:05:b8: 76:a8:ed:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mALmscz3oVMgwMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk OGFlYjQ0ZDktYmNlOC00YjRlLTk4YWMtNjYzMDliZTBhNzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRL0INeJJikwQsyOTkFsau+FBaAyN/NKvnEt qOKUQC15j/jF4mhLrWw2t0176OyrplV01UpqMz3jpf9/iZ4ay5fI3OrfCYTYyP2d VXU2ZFy2B6XaD2lbU+aUoy6A/5NVm4YdYA49tb9oBblv8SBd/HqUEfcHqmCUmcdB 7HBdU/1HbilyxAMT8aqq9PIhAYN87np0b6LggCXhNXmGWKmle44xsBTMpL/zWaIe C80uJrlb9SFCPrH6kvZBSfctiijyI7YL5XQhXlQS/erhiyHQtiEKI1BznTA2J5o9 0mo771sI5m+439qOfuLdoEgjT/rFHkQ2Vk7JM6i5ufgaUbEYcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeWPoJ1B2nPF+cno3ColWmTsAfIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGZkY2FhMjQtZTNiMC0z ZWNhLTk4M2EtYzg2NjQ2YjE2ZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiPC7v1+/GX50zzn6PMyh7i4TmI/r4ST3UG0hmenalmJqA1uKYC+uZr IxNaf44tikD7foV1wfcD4t7bfo5SNmkntgfNCj1kW6ygqsTat9GjLLkeWM1fsjjm Gpnp8COgggVKcUMpf6vFV9IGaZraCdCKkhSleEEgwvNtfkmOiS2IfL1R12ihCDOl oyrX2/MKub9DTFC6j58TVwETafVIvDwR3k440kr3hXFYI1k0w+hCdDomUni6PHbA ZvmAKfTSy4ogpQmZbiY4b2QSBroQwIoYLLCduv/v4qBA3PELqWFManSeCepr3IXQ ncEtN6XSFCWSXTSxOUOyGOYFuHao7UI= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:39 2025 by rpki-client