$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7beaf452-982b-31a2-97e4-bd3009d616c9.roa File: 7beaf452-982b-31a2-97e4-bd3009d616c9.roa (raw, json) Hash identifier: 7pbSHQGPvfbWVOqfB/lpL88wvoI90Uc5aWEfR+uuwso= Subject key identifier: 6E:C0:13:58:76:3F:1B:DF:54:94:E4:6A:0D:AF:56:90:CC:9E:E4:FE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BA39D24F212520B9481C42200 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7beaf452-982b-31a2-97e4-bd3009d616c9.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 206264 IP address blocks: 172.111.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:24:f2:12:52:0b:94:81:c4:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=8876ad9f-d3a1-4231-8a19-37ea6c7ee910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dc:54:fe:25:65:c1:32:6e:08:7c:d7:5f:31: 8f:27:30:9c:e0:74:9a:54:54:8d:a9:56:6c:96:0f: 29:b9:48:64:91:69:88:8b:cf:fe:8e:c4:59:d6:1f: df:e4:15:e1:69:a1:e0:29:8a:d8:43:53:2d:fa:4f: 79:65:f5:51:14:0a:97:f2:96:c2:02:fc:6c:44:ef: dd:66:c1:d2:a0:09:0b:ff:cc:52:ca:20:43:1e:8e: ad:b1:c5:4b:9e:75:55:e7:2a:5c:5d:fa:3e:6f:cd: be:8d:5e:1e:fe:b8:13:8f:3f:ed:cb:a4:22:b0:ed: 50:d9:fc:82:d3:e2:9b:e6:10:28:38:29:2d:25:74: 8d:df:6d:72:26:34:22:3a:cc:d5:46:be:dd:ff:d0: 1c:3a:2c:79:32:b6:6e:b2:73:74:2b:63:9c:ac:99: c2:37:2a:65:9c:fc:b6:56:e1:5c:6b:92:44:60:2e: 9f:75:04:4b:90:2a:ef:74:db:b8:45:85:2a:ef:d5: 9d:0c:26:17:a6:96:cf:c1:24:1d:1f:36:4b:24:f6: 24:a0:40:c9:53:d9:04:49:02:e4:5d:dd:6f:56:cd: 3d:3c:fa:3e:32:e3:03:7d:27:bf:aa:bf:8d:b3:fa: 07:51:1c:1f:61:2d:c0:48:de:62:ee:c3:4a:9b:73: cd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C0:13:58:76:3F:1B:DF:54:94:E4:6A:0D:AF:56:90:CC:9E:E4:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7beaf452-982b-31a2-97e4-bd3009d616c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:fd:a6:f2:8a:cb:7d:ba:14:7d:ba:fb:c6:08:a1:e6:cb:4c: ea:ad:6d:7b:48:5e:66:aa:f1:bd:31:c5:55:f3:2b:9b:70:2f: 15:86:59:e6:4b:58:21:71:83:7f:e3:7e:f8:52:af:6f:00:83: d3:01:74:5c:3f:2b:4f:7a:e7:25:85:50:61:2a:8f:9b:f3:c9: 91:2b:5d:4f:1d:15:40:02:5d:bc:5d:5e:35:d4:8b:0e:ba:4a: 10:55:da:78:0a:af:e7:91:df:c8:75:94:16:07:f3:bf:55:4d: b7:00:13:26:1f:3c:ac:74:00:0f:38:ad:47:b2:55:dd:8b:29: 7e:54:2e:02:c4:fd:4d:fd:39:d1:58:95:7b:da:6a:98:0c:59: 3d:d5:48:8c:13:09:dc:24:54:02:c6:7f:ae:e9:f3:4d:45:ae: c8:3d:91:18:02:22:db:95:0a:6f:90:a7:ec:71:a7:99:33:64: 8f:59:06:59:8c:48:4a:11:d6:10:32:81:48:00:c2:6a:bf:e2: 0e:90:dd:d7:d8:56:da:3b:99:f0:27:45:51:8d:a9:91:74:c0: 53:08:d4:68:8e:cf:b9:96:9e:d6:8f:44:83:9c:73:6c:a5:94: 0d:a9:15:cb:f9:03:f4:f9:61:06:33:ef:55:81:35:28:b9:40: 4b:72:96:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSTyElILlIHEIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ODg3NmFkOWYtZDNhMS00MjMxLThhMTktMzdlYTZjN2VlOTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdxU/iVlwTJuCHzXXzGPJzCc4HSaVFSNqVZs lg8puUhkkWmIi8/+jsRZ1h/f5BXhaaHgKYrYQ1Mt+k95ZfVRFAqX8pbCAvxsRO/d ZsHSoAkL/8xSyiBDHo6tscVLnnVV5ypcXfo+b82+jV4e/rgTjz/ty6QisO1Q2fyC 0+Kb5hAoOCktJXSN321yJjQiOszVRr7d/9AcOix5MrZusnN0K2OcrJnCNyplnPy2 VuFca5JEYC6fdQRLkCrvdNu4RYUq79WdDCYXppbPwSQdHzZLJPYkoEDJU9kESQLk Xd1vVs09PPo+MuMDfSe/qr+Ns/oHURwfYS3ASN5i7sNKm3PN2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7AE1h2PxvfVJTkag2vVpDMnuT+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvN2JlYWY0NTItOTgyYi0z MWEyLTk3ZTQtYmQzMDA5ZDYxNmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACX9pvKKy326FH26+8YIoebLTOqtbXtIXmaq8b0xxVXzK5twLxWGWeZL WCFxg3/jfvhSr28Ag9MBdFw/K0965yWFUGEqj5vzyZErXU8dFUACXbxdXjXUiw66 ShBV2ngKr+eR38h1lBYH879VTbcAEyYfPKx0AA84rUeyVd2LKX5ULgLE/U39OdFY lXvaapgMWT3VSIwTCdwkVALGf67p801Frsg9kRgCItuVCm+Qp+xxp5kzZI9ZBlmM SEoR1hAygUgAwmq/4g6Q3dfYVto7mfAnRVGNqZF0wFMI1GiOz7mWntaPRIOcc2yl lA2pFcv5A/T5YQYz71WBNSi5QEtylvo= -----END CERTIFICATE-----Generated at Tue Nov 4 21:43:59 2025 by rpki-client