$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa File: 2dd78db9-6d0c-3114-a64a-769cedc85549.roa (raw, json) Hash identifier: vV+76TTeb513GccLGmyxcLYyvPv9l111W4Z7CI6gPJ8= Subject key identifier: 4C:37:41:1D:27:31:CE:B5:FF:C9:77:96:1A:C8:A8:9A:16:26:23:6C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B99D7923EAF0524A98D7EB580 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 9009 IP address blocks: 172.111.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:92:3e:af:05:24:a9:8d:7e:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=cad10d1e-65e9-44ca-a980-084c1eca0b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:1e:d0:b0:34:bb:59:c7:f4:e4:98:c5:58: 4b:3c:63:3c:0b:a3:eb:c2:ae:14:0a:a1:10:d0:a3: 36:b4:18:6b:38:c9:60:53:8f:48:2b:a2:c9:eb:8e: af:03:cd:8e:48:ce:c4:7d:6c:43:c3:64:a6:c0:6c: 34:15:29:0a:34:49:e2:fa:fa:e3:d6:4a:31:f5:b0: eb:0c:1c:2e:fe:75:4f:fb:b8:be:13:cb:c8:0b:05: 79:b3:a2:10:c6:32:2f:36:74:37:92:d8:91:e9:6f: 3c:58:c9:c6:95:4b:5d:8b:7f:fe:0f:a7:79:14:22: 2b:16:cc:c7:44:8e:26:22:fc:5c:9c:76:91:dd:08: 21:75:37:5a:64:34:d5:05:38:d7:ff:bb:f8:83:1d: a4:72:32:1b:a3:de:d0:fb:cc:f0:23:ef:17:42:df: 46:bd:be:b6:f1:a0:e3:93:07:70:6e:16:7b:33:3d: 42:3e:a3:fe:3f:d4:bb:71:46:18:ff:a2:f2:a6:e9: 7d:30:0d:7d:84:d6:35:b2:16:05:e6:0d:3e:06:2a: 75:cd:95:a0:41:09:7e:f7:c2:5a:72:fe:91:bb:a4: 4c:13:25:95:50:29:fd:87:83:7e:b1:fb:d9:16:82: 55:09:b1:ac:6b:b7:b1:b3:0f:e1:6f:26:d3:8c:da: f5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:37:41:1D:27:31:CE:B5:FF:C9:77:96:1A:C8:A8:9A:16:26:23:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2dd78db9-6d0c-3114-a64a-769cedc85549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:bf:8c:d1:7b:7a:a8:39:ac:b2:46:4a:15:df:9b:f0:fc:7a: f6:62:3d:76:99:7c:fd:65:69:1d:0e:21:48:a5:ec:88:5d:2b: 99:ae:0d:9a:36:b6:ec:e0:d4:82:85:89:71:7a:63:23:07:96: 79:ee:6b:e3:5b:e9:07:e5:de:43:00:26:31:e7:8a:08:54:7d: 83:b4:76:c5:9c:ad:bb:ce:05:81:26:27:57:a7:f6:98:01:d2: 9b:4b:2e:2b:f0:05:b8:7d:25:a3:72:6b:28:f2:8b:80:90:9e: 87:45:6c:c4:d2:6c:05:76:d2:2e:76:a3:5d:53:8e:de:55:80: 52:db:94:9a:cf:7b:00:bc:54:96:ca:b2:aa:18:fc:c3:53:c3: 1b:95:a2:e0:98:fb:d3:66:d0:bf:fa:4f:de:62:ea:cf:64:41: 6d:ba:e8:0b:83:b0:27:85:49:d5:02:5c:07:86:85:b9:59:f8: 37:fa:a9:40:d3:a1:6f:3e:6d:2a:17:d1:85:86:5c:32:a8:1f: 5b:bb:f2:6f:ba:1d:28:b0:ae:c6:66:38:b8:6a:70:3e:01:b8: c0:82:95:1f:9d:6c:df:70:4f:e7:35:f4:7e:d6:39:aa:60:70: 6e:87:0a:e2:30:e8:43:e4:aa:4c:e9:fd:67:0a:b0:4f:96:81: dc:c7:4d:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ15I+rwUkqY1+tYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk Y2FkMTBkMWUtNjVlOS00NGNhLWE5ODAtMDg0YzFlY2EwYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKge0LA0u1nH9OSYxVhLPGM8C6Prwq4UCqEQ 0KM2tBhrOMlgU49IK6LJ646vA82OSM7EfWxDw2SmwGw0FSkKNEni+vrj1kox9bDr DBwu/nVP+7i+E8vICwV5s6IQxjIvNnQ3ktiR6W88WMnGlUtdi3/+D6d5FCIrFszH RI4mIvxcnHaR3QghdTdaZDTVBTjX/7v4gx2kcjIbo97Q+8zwI+8XQt9Gvb628aDj kwdwbhZ7Mz1CPqP+P9S7cUYY/6Lypul9MA19hNY1shYF5g0+Bip1zZWgQQl+98Ja cv6Ru6RMEyWVUCn9h4N+sfvZFoJVCbGsa7exsw/hbybTjNr1CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEw3QR0nMc61/8l3lhrIqJoWJiNsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmRkNzhkYjktNmQwYy0z MTE0LWE2NGEtNzY5Y2VkYzg1NTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm/jNF7eqg5rLJGShXfm/D8evZiPXaZfP1laR0OIUil7IhdK5muDZo2 tuzg1IKFiXF6YyMHlnnua+Nb6Qfl3kMAJjHnighUfYO0dsWcrbvOBYEmJ1en9pgB 0ptLLivwBbh9JaNyayjyi4CQnodFbMTSbAV20i52o11Tjt5VgFLblJrPewC8VJbK sqoY/MNTwxuVouCY+9Nm0L/6T95i6s9kQW266AuDsCeFSdUCXAeGhblZ+Df6qUDT oW8+bSoX0YWGXDKoH1u78m+6HSiwrsZmOLhqcD4BuMCClR+dbN9wT+c19H7WOapg cG6HCuIw6EPkqkzp/WcKsE+WgdzHTZg= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:50 2025 by rpki-client