$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/81923095-bf2e-3f06-a900-58d9912230b4.roa File: 81923095-bf2e-3f06-a900-58d9912230b4.roa (raw, json) Hash identifier: WcYuDmQ51Esaat/4EvvrHZZs/kcC+f3bDq+6MB6SOd0= Subject key identifier: 1D:67:94:09:80:4C:47:73:E5:37:7C:40:15:CA:E6:77:CD:FA:1B:F5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B99D7AD16D9A4AE63CD50E98E Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/81923095-bf2e-3f06-a900-58d9912230b4.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 212238 IP address blocks: 172.111.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ad:16:d9:a4:ae:63:cd:50:e9:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=a4cc683b-ad01-4394-a733-c9147067d13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f8:0b:01:39:5d:9a:f3:d2:bb:1c:85:a3:42: fc:ff:d3:d4:f8:3c:ea:f7:56:2d:8a:66:a9:76:87: e1:48:9d:ce:1f:d1:cf:c0:31:95:b0:be:dd:e3:30: 37:1c:19:bb:6d:d1:85:a6:5a:cf:96:0a:5f:24:c9: 36:07:83:d6:9e:8a:d7:36:fa:ab:b5:ab:07:91:cc: 25:1d:ed:32:cd:c3:f7:db:a4:41:42:ae:6d:51:ba: 6a:7e:d6:6e:f6:61:04:9e:64:cb:1c:ba:22:88:62: 46:9f:c7:ba:eb:cc:72:d3:5b:de:e4:3f:fa:d6:5e: 20:e7:ed:64:52:61:86:11:32:fc:26:37:28:fb:52: 38:e9:1e:ea:91:69:9e:1b:3f:b6:41:4b:c8:4e:86: d8:f4:51:81:5b:54:47:de:9e:73:da:57:2a:62:40: 3d:62:b1:f0:ff:5a:77:ee:cc:3a:25:21:a7:68:91: a4:d8:cb:fc:3d:35:98:28:ea:70:fe:ea:6b:40:1c: e9:df:31:0f:f0:9c:b7:f1:a3:8d:57:6a:d1:bc:3e: c6:20:2a:af:5e:6e:49:2d:e2:e3:06:e3:51:2d:d3: a0:c8:2f:ca:9c:62:48:45:48:c5:17:5d:5c:33:6f: 50:7d:78:43:72:bc:03:ff:64:32:b1:4b:fc:73:8c: 12:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:67:94:09:80:4C:47:73:E5:37:7C:40:15:CA:E6:77:CD:FA:1B:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/81923095-bf2e-3f06-a900-58d9912230b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:6d:6e:c0:17:35:b1:df:73:4a:f9:a7:a3:e4:f2:55:e1:41: 84:30:b7:34:57:98:5a:72:13:8c:23:c4:5b:fb:ae:d1:a2:8c: b3:5c:b1:51:87:9c:b8:a3:e7:1a:84:9e:e9:b4:e3:42:74:6a: 82:65:27:e9:26:a4:c6:1e:5e:19:5a:4a:73:29:09:0a:61:70: 68:91:86:6e:4f:d7:d8:d5:6f:3e:09:03:d7:ff:2e:0a:90:3a: b5:a6:42:a9:ef:d9:7e:6f:2e:75:e8:49:09:16:fd:57:c7:09: 69:53:ad:67:80:a1:f4:5d:ed:32:43:e5:29:3b:fe:7b:ac:a3: 00:76:1b:b5:f7:8a:de:cc:87:cd:58:f1:a9:20:4d:c7:fc:67: 54:90:9e:f7:c0:94:c3:a3:0c:58:8c:0d:70:28:35:28:e3:01: db:be:f5:ee:49:a6:0a:99:ff:46:cc:ed:96:03:15:75:73:c5: f3:ef:9e:c7:4d:79:45:9c:de:2c:b4:cf:05:61:0c:58:4c:4c: ce:0f:93:5d:e6:7a:01:02:8c:38:0a:26:42:52:97:06:09:15: 47:ce:f9:dd:59:3d:87:de:33:66:2e:6c:f4:17:d1:a5:c6:a7: 1a:7c:61:14:82:51:9e:38:ae:3d:b0:5d:8a:28:33:4e:c2:0d: ee:8d:7a:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ160W2aSuY81Q6Y4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YTRjYzY4M2ItYWQwMS00Mzk0LWE3MzMtYzkxNDcwNjdkMTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPgLATldmvPSuxyFo0L8/9PU+Dzq91Ytimap dofhSJ3OH9HPwDGVsL7d4zA3HBm7bdGFplrPlgpfJMk2B4PWnorXNvqrtasHkcwl He0yzcP326RBQq5tUbpqftZu9mEEnmTLHLoiiGJGn8e668xy01ve5D/61l4g5+1k UmGGETL8Jjco+1I46R7qkWmeGz+2QUvITobY9FGBW1RH3p5z2lcqYkA9YrHw/1p3 7sw6JSGnaJGk2Mv8PTWYKOpw/uprQBzp3zEP8Jy38aONV2rRvD7GICqvXm5JLeLj BuNRLdOgyC/KnGJIRUjFF11cM29QfXhDcrwD/2QysUv8c4wS8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1nlAmATEdz5Td8QBXK5nfN+hv1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODE5MjMwOTUtYmYyZS0z ZjA2LWE5MDAtNThkOTkxMjIzMGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5tbsAXNbHfc0r5p6Pk8lXhQYQwtzRXmFpyE4wjxFv7rtGijLNcsVGH nLij5xqEnum040J0aoJlJ+kmpMYeXhlaSnMpCQphcGiRhm5P19jVbz4JA9f/LgqQ OrWmQqnv2X5vLnXoSQkW/VfHCWlTrWeAofRd7TJD5Sk7/nusowB2G7X3it7Mh81Y 8akgTcf8Z1SQnvfAlMOjDFiMDXAoNSjjAdu+9e5JpgqZ/0bM7ZYDFXVzxfPvnsdN eUWc3iy0zwVhDFhMTM4Pk13megECjDgKJkJSlwYJFUfO+d1ZPYfeM2YubPQX0aXG pxp8YRSCUZ44rj2wXYooM07CDe6NeoU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:56 2025 by rpki-client