$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d44ec8a-b582-344c-8805-a64b89c845f0.roa File: 3d44ec8a-b582-344c-8805-a64b89c845f0.roa (raw, json) Hash identifier: W7TOZTdz9BY8q8Tdp46Fil6RyOtJo2I2B53OI0bHqBw= Subject key identifier: F4:FE:D9:3F:6A:CE:3F:96:6A:7D:3C:4F:9D:A5:DD:82:F4:80:CA:97 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BA39D1B9D95FDD4E9564F0880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d44ec8a-b582-344c-8805-a64b89c845f0.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 9009 IP address blocks: 172.111.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:1b:9d:95:fd:d4:e9:56:4f:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=82bc97a1-18eb-440c-9232-278cec0437c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:34:ea:c9:e4:3d:88:3a:0d:7e:9d:82:fe:c6: 34:ee:1b:78:4c:b4:da:b5:ea:57:e0:e0:58:db:02: df:6a:2e:5b:0b:e9:06:af:50:2f:43:30:57:7a:c6: 84:46:0b:cb:83:70:c2:57:ba:e0:10:63:f6:68:4f: 50:be:bf:a2:db:80:00:7c:aa:0d:ec:11:7c:bd:a4: fb:d2:c9:9d:53:73:66:1a:4c:2b:0c:4c:e9:54:e1: ac:52:d6:9e:bd:e0:58:98:06:e1:5a:d8:37:bb:58: 2d:49:7c:18:5d:ce:f7:bd:bb:cf:4c:38:c5:64:e4: 2a:7c:f8:e3:dd:0f:48:55:ea:45:ac:1a:9f:31:7e: bf:0a:1f:6a:cc:34:59:8b:3c:e0:c1:85:47:c5:17: f5:12:55:8c:ad:83:60:84:33:59:39:b9:41:5b:34: d1:15:2a:b0:37:93:1e:d1:57:11:40:da:06:dc:07: 48:ba:84:ab:6a:ac:bd:d6:c9:b0:64:b1:ea:9a:be: 6d:64:c5:6f:43:ae:e3:e4:01:87:7d:1f:17:60:88: a7:d7:78:65:cc:a4:b0:72:91:f5:cd:47:71:30:f9: a0:73:b3:d2:05:f4:f1:88:9b:04:97:e4:7c:8e:18: d5:6b:ec:3a:e6:45:27:e6:eb:7a:63:b1:3b:25:8f: fb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FE:D9:3F:6A:CE:3F:96:6A:7D:3C:4F:9D:A5:DD:82:F4:80:CA:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3d44ec8a-b582-344c-8805-a64b89c845f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:76:ff:58:0a:82:21:34:e0:7c:74:6a:66:a9:cc:2e:0a:54: ca:05:cd:bf:b1:ea:87:7c:3d:63:49:19:1b:02:c5:72:66:f1: 95:be:1a:8b:ad:04:5c:5d:bd:25:8f:fd:33:ec:cd:6f:d9:2c: f6:5d:7a:48:37:09:53:f4:5b:f2:5f:9c:ee:b0:fd:a9:df:14: bc:90:b9:3e:89:62:5e:de:1d:ce:1e:50:bb:ec:8d:e1:8b:4d: f6:a3:04:b8:a9:16:36:f3:fd:b0:0c:01:94:28:aa:41:8f:07: 7f:d8:94:cb:b1:33:50:d9:1e:c9:11:a8:d5:39:06:e5:62:1e: 77:9a:6c:a4:7b:f4:bb:25:9f:d0:36:8d:8d:1d:e4:23:f5:cb: 33:27:43:23:f2:07:f0:8b:c7:5a:b7:b3:56:fa:a6:19:5f:f9: 3e:6a:b9:82:d6:fe:8a:fc:0d:e3:4a:72:43:d9:55:36:13:7e: 9b:29:9e:89:9d:51:c4:89:7a:71:8a:15:f0:1e:e8:05:3e:12: 96:2e:b1:be:18:86:32:bd:48:eb:b3:d8:b5:05:2b:fb:65:c4: 55:37:f7:20:f8:35:aa:c9:1c:51:cc:4c:94:3c:9a:18:23:09: e4:d6:87:ec:56:2c:bb:55:26:c2:75:81:d3:2b:c0:ab:4f:7b: d4:a6:08:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRudlf3U6VZPCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ODJiYzk3YTEtMThlYi00NDBjLTkyMzItMjc4Y2VjMDQzN2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TTqyeQ9iDoNfp2C/sY07ht4TLTatepX4OBY 2wLfai5bC+kGr1AvQzBXesaERgvLg3DCV7rgEGP2aE9Qvr+i24AAfKoN7BF8vaT7 0smdU3NmGkwrDEzpVOGsUtaeveBYmAbhWtg3u1gtSXwYXc73vbvPTDjFZOQqfPjj 3Q9IVepFrBqfMX6/Ch9qzDRZizzgwYVHxRf1ElWMrYNghDNZOblBWzTRFSqwN5Me 0VcRQNoG3AdIuoSraqy91smwZLHqmr5tZMVvQ67j5AGHfR8XYIin13hlzKSwcpH1 zUdxMPmgc7PSBfTxiJsEl+R8jhjVa+w65kUn5ut6Y7E7JY/7SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPT+2T9qzj+Wan08T52l3YL0gMqXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2Q0NGVjOGEtYjU4Mi0z NDRjLTg4MDUtYTY0Yjg5Yzg0NWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAR2/1gKgiE04Hx0amapzC4KVMoFzb+x6od8PWNJGRsCxXJm8ZW+Gout BFxdvSWP/TPszW/ZLPZdekg3CVP0W/JfnO6w/anfFLyQuT6JYl7eHc4eULvsjeGL TfajBLipFjbz/bAMAZQoqkGPB3/YlMuxM1DZHskRqNU5BuViHneabKR79Lsln9A2 jY0d5CP1yzMnQyPyB/CLx1q3s1b6phlf+T5quYLW/or8DeNKckPZVTYTfpspnomd UcSJenGKFfAe6AU+EpYusb4YhjK9SOuz2LUFK/tlxFU39yD4NarJHFHMTJQ8mhgj CeTWh+xWLLtVJsJ1gdMrwKtPe9SmCD8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:11 2025 by rpki-client