$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5938b922-fbd7-3252-8de4-f85dd5b529d0.roa File: 5938b922-fbd7-3252-8de4-f85dd5b529d0.roa (raw, json) Hash identifier: fauea8vDroAYU7lkw4zCbGJ0JI7NJsVHtBCNzkKaNOY= Subject key identifier: 46:F4:96:7A:94:5B:FA:39:84:41:75:86:73:FF:43:B3:1C:50:85:E1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AE9F670237712D6B5ECA5FF40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5938b922-fbd7-3252-8de4-f85dd5b529d0.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 9009 IP address blocks: 172.111.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:70:23:77:12:d6:b5:ec:a5:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=68b4b8b0-ff10-411e-90b3-e28bc8b27ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2f:10:5f:3f:18:6a:75:cb:d4:72:b3:10:5b: c5:45:91:53:c0:6d:ee:e9:d4:5c:78:7a:a0:53:27: 70:90:90:1b:12:62:27:81:2b:83:d2:15:39:65:42: 45:bd:ef:e1:31:02:ad:a8:f1:07:33:d8:28:f9:82: 10:31:c0:ac:4b:2b:6e:9b:31:3c:29:7c:f3:33:a3: b4:a2:18:2d:ef:f0:a8:9b:37:48:4b:ff:89:03:01: 42:45:3c:b9:ba:d4:a6:e0:2c:85:55:79:bb:3a:2e: ba:50:be:77:01:6c:f4:ef:58:87:ad:ae:06:a8:c2: 30:fa:00:f6:a5:22:e4:24:67:4e:ff:16:3a:c9:3c: 69:82:e4:40:7b:9c:5c:74:38:6a:ca:ce:b7:90:75: 10:62:7f:67:36:fa:ca:51:da:e4:76:77:3a:34:e8: 19:c3:79:b7:8f:d9:0f:1b:fa:12:a9:43:e2:a9:95: 5e:91:8a:15:02:46:8c:19:f6:10:14:93:0f:a6:12: be:73:92:be:7c:4a:62:15:1e:39:5d:75:48:fc:50: b6:8b:1f:16:c4:e6:2a:78:1f:6b:a0:02:aa:15:38: 59:6c:15:04:ad:0b:a9:79:78:46:aa:58:c3:13:c8: d4:3e:d1:87:d5:ca:d6:7b:1f:a1:dd:97:f4:96:cd: 76:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F4:96:7A:94:5B:FA:39:84:41:75:86:73:FF:43:B3:1C:50:85:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5938b922-fbd7-3252-8de4-f85dd5b529d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:48:0e:f7:a4:4a:4d:74:a9:89:dc:9b:ae:a3:8a:08:4d:63: d5:f4:b3:f7:c4:af:6a:2f:ce:e6:d4:2d:52:ff:4b:77:12:5a: 53:bb:d5:a3:f2:c8:08:f0:1a:b3:57:3e:c5:bb:15:d9:8a:39: d7:f5:4f:49:08:21:09:8f:06:6b:74:70:bc:ba:c6:88:0f:db: c9:96:df:35:96:0d:94:f0:f6:10:46:f7:d5:2c:a4:04:3c:59: f5:88:e7:72:e5:4b:45:69:d9:f4:0a:d9:78:61:fc:df:7f:f7: 0a:8c:44:ef:aa:a4:59:30:96:db:67:5b:a6:68:c9:95:77:11: 66:c0:39:39:0b:03:d3:dd:22:86:bd:26:c8:5e:c5:38:01:af: 89:5a:a2:36:ba:7d:61:cf:93:21:cd:7b:d4:e0:a7:ca:9e:f1: 9b:f0:43:79:0d:2e:3e:ba:43:22:38:43:c3:fb:a7:df:e8:76: 25:f2:af:d1:2c:d3:dc:ad:10:0a:a4:8f:aa:d4:c8:b6:65:a2: 15:cd:76:75:2f:df:00:9e:3a:f8:cf:a5:74:af:84:58:c1:e1: 53:ff:a7:a3:64:68:7f:c6:56:9f:ae:d9:be:a7:26:20:fb:a7: fb:56:7b:cd:c3:b8:ea:e6:d0:a3:4c:f8:db:87:5a:3c:93:dd: 8f:e4:24:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9nAjdxLWteyl/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk NjhiNGI4YjAtZmYxMC00MTFlLTkwYjMtZTI4YmM4YjI3YWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki8QXz8YanXL1HKzEFvFRZFTwG3u6dRceHqg UydwkJAbEmIngSuD0hU5ZUJFve/hMQKtqPEHM9go+YIQMcCsSytumzE8KXzzM6O0 ohgt7/ComzdIS/+JAwFCRTy5utSm4CyFVXm7Oi66UL53AWz071iHra4GqMIw+gD2 pSLkJGdO/xY6yTxpguRAe5xcdDhqys63kHUQYn9nNvrKUdrkdnc6NOgZw3m3j9kP G/oSqUPiqZVekYoVAkaMGfYQFJMPphK+c5K+fEpiFR45XXVI/FC2ix8WxOYqeB9r oAKqFThZbBUErQupeXhGqljDE8jUPtGH1crWex+h3Zf0ls12MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEb0lnqUW/o5hEF1hnP/Q7McUIXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTkzOGI5MjItZmJkNy0z MjUyLThkZTQtZjg1ZGQ1YjUyOWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpIDvekSk10qYncm66jighNY9X0s/fEr2ovzubULVL/S3cSWlO71aPy yAjwGrNXPsW7FdmKOdf1T0kIIQmPBmt0cLy6xogP28mW3zWWDZTw9hBG99UspAQ8 WfWI53LlS0Vp2fQK2Xhh/N9/9wqMRO+qpFkwlttnW6ZoyZV3EWbAOTkLA9PdIoa9 JshexTgBr4laoja6fWHPkyHNe9Tgp8qe8ZvwQ3kNLj66QyI4Q8P7p9/odiXyr9Es 09ytEAqkj6rUyLZlohXNdnUv3wCeOvjPpXSvhFjB4VP/p6NkaH/GVp+u2b6nJiD7 p/tWe83DuOrm0KNM+NuHWjyT3Y/kJKs= -----END CERTIFICATE-----Generated at Wed Nov 5 05:43:16 2025 by rpki-client