$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61691370-8403-37fb-85c4-bd8d07e13fbb.roa File: 61691370-8403-37fb-85c4-bd8d07e13fbb.roa (raw, json) Hash identifier: hFlCQoc/YFiWBTFIyJiaVo9nC+4uKC5JKKhVO5Y1bTM= Subject key identifier: 74:6E:12:C0:85:EE:22:0C:C7:E9:6F:EE:F8:93:1D:75:B4:BE:8C:96 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B9E07D7473B3A72C22E4E7B80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61691370-8403-37fb-85c4-bd8d07e13fbb.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 9009 IP address blocks: 172.111.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:d7:47:3b:3a:72:c2:2e:4e:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=3da15bd0-c745-4c98-9a54-04d105ddf5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0c:9a:61:18:fe:7a:0c:df:b1:68:ef:10:09: 9a:a7:ca:e8:88:88:4a:dc:01:c8:cc:72:72:d8:69: c1:dc:10:b5:a9:7b:5a:0e:f8:a2:22:61:47:4c:fc: 28:d9:fa:72:52:92:59:63:42:01:a6:54:eb:38:18: 53:cc:26:25:62:d4:9a:10:2c:d8:6b:43:79:c1:cc: e2:52:8b:48:c5:bf:9d:a2:da:a9:62:ec:b7:5a:0f: cc:7e:d5:3b:61:40:54:05:46:93:92:40:1e:e5:60: f3:7a:7f:71:4a:90:86:71:f2:85:7d:a3:7a:70:fd: 3c:d1:5b:ac:6f:f4:88:e8:65:99:e8:2a:c0:d4:5a: 59:85:25:4a:02:fd:23:f8:e4:76:75:c8:d8:61:21: 58:37:44:ee:b9:a6:d0:32:de:be:e7:f2:aa:43:75: 9b:3a:db:c4:8d:43:11:7c:23:23:ec:0c:30:95:92: f0:98:c9:96:05:a8:79:a5:a6:27:d7:1f:70:27:10: e3:61:cb:98:43:52:7f:42:28:c5:02:b6:0c:f5:ce: 17:71:ad:69:12:fd:92:6f:2b:02:ac:46:ec:11:e5: 6d:9c:0b:89:c3:5d:40:c8:b1:82:8e:30:c1:a3:1f: 78:b5:a1:17:32:6f:c7:1b:b3:d4:4d:3c:7f:e6:c8: ab:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6E:12:C0:85:EE:22:0C:C7:E9:6F:EE:F8:93:1D:75:B4:BE:8C:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/61691370-8403-37fb-85c4-bd8d07e13fbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:be:8e:e7:22:d2:ba:39:3f:41:0d:de:ca:e8:f8:24:af:ce: 12:47:57:94:6a:52:92:76:a2:5c:f7:b5:82:b6:3b:ac:22:dc: df:6f:87:74:5a:5a:1f:88:cb:92:68:5f:50:91:97:a6:07:a5: 5d:61:d8:8e:cb:fe:95:f0:ab:ac:b6:c1:a9:f8:cc:41:28:0b: c4:7e:16:c1:bc:3f:da:71:e2:af:40:fd:f6:54:59:94:27:47: 1c:fc:c3:0c:ed:f1:71:ae:63:26:2c:39:63:73:75:e9:a5:6b: 5a:70:52:96:54:f8:9b:52:54:fb:19:82:5e:f6:32:70:ef:27: 87:22:37:5a:28:af:f5:7e:bd:2c:21:67:46:4c:66:4f:69:fa: 73:2c:3e:0a:d3:5c:d5:5a:fc:30:18:1e:5b:b0:59:fe:eb:e6: 5b:a4:ef:bb:24:db:00:1d:07:50:3a:a1:65:54:3c:9e:42:43: f1:d9:cb:8c:a1:ee:e9:ca:96:22:9d:1f:0e:49:8a:63:cd:a7: b7:b4:9f:b7:20:34:1a:cf:7a:05:5c:6f:c8:55:8e:57:b7:e1: ce:90:63:65:82:ee:66:19:e1:03:21:d4:39:7e:95:4b:37:f3: 83:33:1e:5b:71:af:23:55:d6:d7:34:78:eb:73:21:2c:c8:c0: ce:ca:81:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB9dHOzpywi5Oe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk M2RhMTViZDAtYzc0NS00Yzk4LTlhNTQtMDRkMTA1ZGRmNWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwyaYRj+egzfsWjvEAmap8roiIhK3AHIzHJy 2GnB3BC1qXtaDviiImFHTPwo2fpyUpJZY0IBplTrOBhTzCYlYtSaECzYa0N5wczi UotIxb+dotqpYuy3Wg/MftU7YUBUBUaTkkAe5WDzen9xSpCGcfKFfaN6cP080Vus b/SI6GWZ6CrA1FpZhSVKAv0j+OR2dcjYYSFYN0TuuabQMt6+5/KqQ3WbOtvEjUMR fCMj7AwwlZLwmMmWBah5paYn1x9wJxDjYcuYQ1J/QijFArYM9c4Xca1pEv2SbysC rEbsEeVtnAuJw11AyLGCjjDBox94taEXMm/HG7PUTTx/5sirBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRuEsCF7iIMx+lv7viTHXW0voyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjE2OTEzNzAtODQwMy0z N2ZiLTg1YzQtYmQ4ZDA3ZTEzZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6+juci0ro5P0EN3sro+CSvzhJHV5RqUpJ2olz3tYK2O6wi3N9vh3Ra Wh+Iy5JoX1CRl6YHpV1h2I7L/pXwq6y2wan4zEEoC8R+FsG8P9px4q9A/fZUWZQn Rxz8wwzt8XGuYyYsOWNzdemla1pwUpZU+JtSVPsZgl72MnDvJ4ciN1oor/V+vSwh Z0ZMZk9p+nMsPgrTXNVa/DAYHluwWf7r5luk77sk2wAdB1A6oWVUPJ5CQ/HZy4yh 7unKliKdHw5JimPNp7e0n7cgNBrPegVcb8hVjle34c6QY2WC7mYZ4QMh1Dl+lUs3 84MzHltxryNV1tc0eOtzISzIwM7KgYU= -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:04 2025 by rpki-client