$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/44cbd2de-b38e-3e00-859e-6395e803cfaf.roa File: 44cbd2de-b38e-3e00-859e-6395e803cfaf.roa (raw, json) Hash identifier: g5UuzfN/5VDX49PP/A0TgWJFXR5TvcujnOw9Mlt+7/4= Subject key identifier: 67:D8:7E:FB:01:E6:3D:CE:80:7C:15:8D:E0:71:A9:E7:46:3F:52:A0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B99D7AD04FDC4F63D612F5600 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/44cbd2de-b38e-3e00-859e-6395e803cfaf.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 212238 IP address blocks: 172.111.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ad:04:fd:c4:f6:3d:61:2f:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=49d8d273-e757-4d5c-9fcf-23aac9ec2afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f3:c9:c7:23:07:55:bb:fd:ed:83:75:2e:9d: be:5d:64:9f:50:b0:36:86:63:ac:ac:d1:e3:be:57: 6c:26:53:93:c7:64:bf:d9:6a:23:c3:93:e8:de:e5: 7c:3e:24:cd:f1:41:14:74:06:7f:1c:43:bb:c1:99: 4c:f0:03:a4:49:dd:5d:48:8f:67:c2:35:19:4c:cb: ef:42:2f:fa:79:1f:92:96:51:8e:83:c8:c4:cd:2c: 55:af:62:da:10:75:cf:9c:c0:b5:ae:e3:32:ad:ef: 5d:47:2f:f6:8c:5f:3d:f0:02:3d:05:64:aa:ec:5e: ca:42:ab:8b:45:17:01:41:5f:81:3e:b9:0a:bf:47: d3:1d:73:5a:ac:c1:89:ee:05:93:15:1c:30:6c:c4: 2f:9b:19:5b:bd:d5:bf:e1:77:3a:3e:50:04:66:89: 86:94:21:c1:ce:c5:6f:3e:99:6f:22:76:84:62:03: a3:3d:c4:4b:82:3d:7c:d7:9c:2d:4a:1c:a6:c1:22: bf:0b:f4:da:d9:5b:41:4f:eb:d8:bb:48:9a:b3:d4: e5:58:79:f9:3e:3c:8e:23:41:04:ba:fc:c1:66:14: 93:3b:97:ec:54:80:59:cf:59:94:c6:38:06:a3:97: 8b:46:b9:44:e2:02:25:84:28:c2:aa:01:b7:b4:00: d5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D8:7E:FB:01:E6:3D:CE:80:7C:15:8D:E0:71:A9:E7:46:3F:52:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/44cbd2de-b38e-3e00-859e-6395e803cfaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:9d:9e:77:72:11:ca:16:fa:28:ed:ec:27:9f:92:cc:ea:89: ab:df:59:99:97:28:af:d7:d0:fb:db:0e:fd:9a:e2:20:46:a6: ea:de:8a:42:38:b5:07:2d:49:af:1f:de:f5:89:9c:e7:76:8a: 35:79:c5:67:08:09:34:85:d9:e3:d8:af:c0:c9:78:22:f9:16: 13:d5:87:63:74:d8:ee:01:f3:0f:e5:fe:10:03:9f:34:f4:d2: 98:d4:cc:ca:dd:00:3a:43:95:fc:09:c8:71:e1:96:dc:bc:8c: d0:dd:5b:90:be:3e:d9:10:cc:69:24:e4:86:5e:62:7e:6d:e2: 41:f3:25:e8:2a:a5:52:ad:4c:ba:29:2e:ca:af:7e:5a:c1:24: 31:f2:f7:6b:02:fb:f9:b4:c6:3b:0d:90:cb:db:86:bc:b6:1c: b6:4e:3b:12:ad:18:50:8c:e1:e7:91:4e:bd:62:71:87:5a:15: 4a:5d:4e:69:14:7c:9b:ae:84:3c:18:8c:b4:96:31:0a:37:73: fe:40:e0:e7:6b:a6:f5:45:c5:fb:93:d3:f7:59:ec:6b:44:93: e3:a5:77:1a:20:8a:db:d4:f3:eb:8b:31:ae:f1:5b:83:39:5d: 3a:b1:98:37:6a:33:96:d5:b6:66:0d:9f:dc:4a:06:c3:e2:2e: e5:a7:db:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ160E/cT2PWEvVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NDlkOGQyNzMtZTc1Ny00ZDVjLTlmY2YtMjNhYWM5ZWMyYWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/PJxyMHVbv97YN1Lp2+XWSfULA2hmOsrNHj vldsJlOTx2S/2Wojw5Po3uV8PiTN8UEUdAZ/HEO7wZlM8AOkSd1dSI9nwjUZTMvv Qi/6eR+SllGOg8jEzSxVr2LaEHXPnMC1ruMyre9dRy/2jF898AI9BWSq7F7KQquL RRcBQV+BPrkKv0fTHXNarMGJ7gWTFRwwbMQvmxlbvdW/4Xc6PlAEZomGlCHBzsVv PplvInaEYgOjPcRLgj1815wtShymwSK/C/Ta2VtBT+vYu0ias9TlWHn5PjyOI0EE uvzBZhSTO5fsVIBZz1mUxjgGo5eLRrlE4gIlhCjCqgG3tADV1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfYfvsB5j3OgHwVjeBxqedGP1KgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDRjYmQyZGUtYjM4ZS0z ZTAwLTg1OWUtNjM5NWU4MDNjZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEudnndyEcoW+ijt7CefkszqiavfWZmXKK/X0PvbDv2a4iBGpureikI4 tQctSa8f3vWJnOd2ijV5xWcICTSF2ePYr8DJeCL5FhPVh2N02O4B8w/l/hADnzT0 0pjUzMrdADpDlfwJyHHhlty8jNDdW5C+PtkQzGkk5IZeYn5t4kHzJegqpVKtTLop LsqvflrBJDHy92sC+/m0xjsNkMvbhry2HLZOOxKtGFCM4eeRTr1icYdaFUpdTmkU fJuuhDwYjLSWMQo3c/5A4OdrpvVFxfuT0/dZ7GtEk+OldxogitvU8+uLMa7xW4M5 XTqxmDdqM5bVtmYNn9xKBsPiLuWn26M= -----END CERTIFICATE-----Generated at Wed Nov 5 20:47:39 2025 by rpki-client