$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a5fadc25-0dd9-373b-93bb-8d41c0da47ba.roa File: a5fadc25-0dd9-373b-93bb-8d41c0da47ba.roa (raw, json) Hash identifier: k9AAJYXgd8Mnx6zDlbGrw7PhSswG3+OlBKHMDhYfmcU= Subject key identifier: 6E:90:F1:F6:6A:87:EE:45:F9:1F:6D:0E:47:A1:3F:9F:1B:1A:D6:18 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BA0D26B713CEB49DDDDD5B580 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a5fadc25-0dd9-373b-93bb-8d41c0da47ba.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 329007 IP address blocks: 172.111.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:6b:71:3c:eb:49:dd:dd:d5:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=39e8bae3-0fd3-4f1c-bb2e-5d2fd423a7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:63:5f:df:e3:53:35:67:5c:c3:fa:4c:85:e4: dd:38:c6:3d:f1:ad:15:1a:f9:b1:3f:d0:2a:66:ca: 19:78:90:a4:ce:18:34:8b:f9:1c:6d:2a:a0:f5:5f: fa:25:13:ab:b9:9b:64:8e:4f:26:06:f5:c0:09:97: b6:5b:08:9b:11:cf:89:47:23:b2:4c:f7:cb:1d:4b: ce:e2:8d:e5:1e:30:22:f4:91:ca:d8:e7:b4:77:ca: 39:75:61:bb:d1:62:27:e8:94:c5:78:18:19:a8:c9: a5:3e:a5:e1:e9:e3:2e:70:bb:59:8b:5e:c3:8e:63: dd:88:50:2c:1e:5c:5e:a4:9b:0f:1d:0e:2f:c4:b3: 04:e1:d3:82:13:16:24:aa:bb:de:51:7f:49:10:ab: 9c:4d:4b:09:d7:64:2d:7a:12:8f:89:7c:bc:45:97: f1:41:2d:22:ab:46:7d:99:99:be:03:d7:8d:ef:c6: a1:b3:75:72:ef:52:65:23:56:4d:c9:7a:54:fd:33: 95:41:8d:bc:97:d1:e0:50:5a:e3:50:dc:81:ed:83: 0a:b9:51:43:c7:a9:bd:d3:2c:e7:60:35:70:0b:cb: 3b:81:11:e6:bc:62:19:7a:4f:66:04:13:fa:e2:28: a9:18:35:9a:74:8b:d6:52:b2:ab:22:85:01:b3:c1: 09:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:90:F1:F6:6A:87:EE:45:F9:1F:6D:0E:47:A1:3F:9F:1B:1A:D6:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a5fadc25-0dd9-373b-93bb-8d41c0da47ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:64:04:1a:b0:2e:06:e9:ba:33:c0:03:9f:ea:56:90:b3:c1: ea:f3:65:9d:bf:f2:74:72:a6:1f:3d:81:ce:6c:de:d5:66:4c: 59:1e:65:84:6e:7b:fc:a6:f6:1f:22:57:a1:bd:f0:bd:2c:3b: ce:2c:73:3d:56:03:ce:a6:ae:80:20:ff:13:c0:f4:94:24:bb: 22:83:b1:82:a9:e0:e3:47:db:73:cd:78:be:90:dd:12:ce:86: 2b:ef:b6:43:7e:b4:29:b2:c8:5c:c4:8a:97:86:69:31:47:4f: 44:7f:f8:39:f6:7d:dc:ea:96:8d:4e:60:1d:90:42:31:54:64: 61:29:1e:7c:b5:38:e5:7f:40:4a:64:ed:da:89:65:ad:04:10: b7:3a:4e:3d:e9:3d:95:29:29:b9:1a:e6:5c:f7:51:7a:00:02: af:7c:b6:86:8d:b3:fc:51:63:ca:19:b6:8b:cb:5c:b1:f2:25: 97:a9:2e:9d:df:07:e6:65:95:24:91:02:15:13:02:10:3d:4e: d3:bc:9b:17:11:cd:ff:7d:f5:12:8e:d0:58:7c:0e:32:b5:f4: 60:60:6e:d8:49:ad:1a:e1:fa:c6:aa:76:8d:43:27:b0:ec:63: ee:c7:4b:82:40:f4:25:93:10:72:3c:f8:64:2c:68:c5:18:fe: e9:96:03:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mtxPOtJ3d3VtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MzllOGJhZTMtMGZkMy00ZjFjLWJiMmUtNWQyZmQ0MjNhN2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mNf3+NTNWdcw/pMheTdOMY98a0VGvmxP9Aq ZsoZeJCkzhg0i/kcbSqg9V/6JROruZtkjk8mBvXACZe2WwibEc+JRyOyTPfLHUvO 4o3lHjAi9JHK2Oe0d8o5dWG70WIn6JTFeBgZqMmlPqXh6eMucLtZi17DjmPdiFAs HlxepJsPHQ4vxLME4dOCExYkqrveUX9JEKucTUsJ12QtehKPiXy8RZfxQS0iq0Z9 mZm+A9eN78ahs3Vy71JlI1ZNyXpU/TOVQY28l9HgUFrjUNyB7YMKuVFDx6m90yzn YDVwC8s7gRHmvGIZek9mBBP64iipGDWadIvWUrKrIoUBs8EJIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6Q8fZqh+5F+R9tDkehP58bGtYYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTVmYWRjMjUtMGRkOS0z NzNiLTkzYmItOGQ0MWMwZGE0N2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVkBBqwLgbpujPAA5/qVpCzwerzZZ2/8nRyph89gc5s3tVmTFkeZYRu e/ym9h8iV6G98L0sO84scz1WA86mroAg/xPA9JQkuyKDsYKp4ONH23PNeL6Q3RLO hivvtkN+tCmyyFzEipeGaTFHT0R/+Dn2fdzqlo1OYB2QQjFUZGEpHny1OOV/QEpk 7dqJZa0EELc6Tj3pPZUpKbka5lz3UXoAAq98toaNs/xRY8oZtovLXLHyJZepLp3f B+ZllSSRAhUTAhA9TtO8mxcRzf999RKO0Fh8DjK19GBgbthJrRrh+saqdo1DJ7Ds Y+7HS4JA9CWTEHI8+GQsaMUY/umWA4E= -----END CERTIFICATE-----Generated at Wed Nov 5 11:22:48 2025 by rpki-client