$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa File: aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa (raw, json) Hash identifier: M8fskabKJPTbD3cDcwXpqsalZZ0zTJbkIWF2gwyGQ3Q= Subject key identifier: E1:8C:C9:08:55:6A:CA:48:B1:DF:08:0F:78:39:B6:8D:26:17:E1:5F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B9E07AED0BDC381F773033A80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 3223 IP address blocks: 172.111.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:ae:d0:bd:c3:81:f7:73:03:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=8160a65e-d7cd-4d73-8a46-84cd459378fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:79:27:d6:35:f7:4d:22:ca:1b:dc:e0:df:67: 6f:e0:4c:2f:69:5d:ca:c7:38:fd:86:b5:0c:ce:2d: 4d:b4:1d:19:55:82:97:d3:ea:e1:d1:9d:73:ba:74: b8:92:05:7e:ef:64:14:21:01:be:22:63:9b:a9:5d: 2b:de:90:b7:b5:9d:11:15:1d:84:51:be:fd:ef:08: cb:cb:86:8e:97:ad:be:75:93:4e:a0:a0:89:5d:c1: fd:af:00:b8:c3:9b:88:61:f0:cb:3d:59:cf:20:26: 12:b2:cf:65:70:73:57:97:0a:4f:a7:e0:0d:0a:7a: c5:78:4e:01:f6:e6:92:35:f9:d0:d5:f9:1f:8f:53: d6:36:fe:f9:53:27:46:50:02:7a:75:19:ed:14:db: 07:10:70:7c:9b:1d:86:fd:4c:9c:ed:bf:e2:83:ae: 63:8f:da:62:97:72:10:74:2b:b0:09:d3:2c:8c:60: 1d:50:f8:61:ab:18:3c:fb:54:b7:7f:d4:a4:99:88: 37:db:a5:bd:68:9c:e5:09:63:5b:04:f7:85:19:21: e9:22:63:49:8b:d0:a0:b7:c2:83:ba:22:3b:ec:dd: ad:db:b3:79:6d:ff:f8:ff:dd:9e:18:8a:c6:78:f8: fd:c7:63:64:9b:ab:07:e8:c3:6e:10:b7:85:88:64: a9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8C:C9:08:55:6A:CA:48:B1:DF:08:0F:78:39:B6:8D:26:17:E1:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/aa7e0def-80c6-30d4-9b37-07ae0b48bdfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:1f:9b:8b:13:f7:8c:6a:53:cc:81:9c:f5:13:18:11:b4:cd: c7:59:58:45:46:82:d6:6e:db:a9:0b:56:f6:3b:64:ca:60:72: 23:2e:64:d6:34:a6:bc:f3:52:48:02:98:76:29:e5:86:a9:9c: 87:d1:ec:35:4f:55:5d:17:f0:ed:ed:e7:92:7a:36:fa:97:66: c8:95:d7:23:8e:a3:47:c1:0d:20:10:38:df:f6:7d:7a:2e:1c: 75:e0:06:45:03:af:70:33:8c:f5:2b:c2:7f:8f:b5:62:f3:33: ee:4f:94:6b:70:d2:83:5d:f9:b0:0a:9e:ed:24:77:cb:e8:0c: 20:e5:78:29:64:62:ad:43:e9:09:16:aa:6b:45:db:8a:bd:a5: f2:a3:eb:a4:d1:ff:3e:5a:7a:59:39:4b:c4:c3:df:bd:b9:74: b9:8a:05:90:a3:0c:54:bf:23:e0:cf:3e:59:76:e8:b5:9c:4b: 48:1b:15:dc:0b:6c:19:84:0a:9c:b4:45:e8:e1:ff:1d:41:36: b3:e2:64:bb:60:87:00:85:ed:ad:2a:96:4a:df:17:5a:74:f9: bc:f5:56:4b:91:ed:13:4b:75:fa:90:fe:d8:21:4e:0b:6f:c9: 7a:2c:0d:e9:bb:1b:2a:8b:76:6f:60:22:d2:99:f4:1d:9b:07: 40:c9:f2:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB67QvcOB93MDOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ODE2MGE2NWUtZDdjZC00ZDczLThhNDYtODRjZDQ1OTM3OGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinkn1jX3TSLKG9zg32dv4EwvaV3Kxzj9hrUM zi1NtB0ZVYKX0+rh0Z1zunS4kgV+72QUIQG+ImObqV0r3pC3tZ0RFR2EUb797wjL y4aOl62+dZNOoKCJXcH9rwC4w5uIYfDLPVnPICYSss9lcHNXlwpPp+ANCnrFeE4B 9uaSNfnQ1fkfj1PWNv75UydGUAJ6dRntFNsHEHB8mx2G/Uyc7b/ig65jj9pil3IQ dCuwCdMsjGAdUPhhqxg8+1S3f9SkmYg326W9aJzlCWNbBPeFGSHpImNJi9Cgt8KD uiI77N2t27N5bf/4/92eGIrGePj9x2Nkm6sH6MNuELeFiGSpFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGMyQhVaspIsd8ID3g5to0mF+FfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWE3ZTBkZWYtODBjNi0z MGQ0LTliMzctMDdhZTBiNDhiZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwfm4sT94xqU8yBnPUTGBG0zcdZWEVGgtZu26kLVvY7ZMpgciMuZNY0 przzUkgCmHYp5YapnIfR7DVPVV0X8O3t55J6NvqXZsiV1yOOo0fBDSAQON/2fXou HHXgBkUDr3AzjPUrwn+PtWLzM+5PlGtw0oNd+bAKnu0kd8voDCDleClkYq1D6QkW qmtF24q9pfKj66TR/z5aelk5S8TD3725dLmKBZCjDFS/I+DPPll26LWcS0gbFdwL bBmECpy0Rejh/x1BNrPiZLtghwCF7a0qlkrfF1p0+bz1VkuR7RNLdfqQ/tghTgtv yXosDem7GyqLdm9gItKZ9B2bB0DJ8nY= -----END CERTIFICATE-----Generated at Tue Nov 4 23:13:07 2025 by rpki-client