$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ae9cd3ad-1a9f-3a4b-b643-09d47c07d177.roa File: ae9cd3ad-1a9f-3a4b-b643-09d47c07d177.roa (raw, json) Hash identifier: 5x4h7DuoTgDM/ork594/a3InaVrvkJs/+q2+jJb8x+s= Subject key identifier: D6:44:26:7F:AB:A4:E3:CE:09:88:E0:B2:9C:2A:67:5D:C7:B3:5E:EE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B36CA9C5A008B058131906080 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ae9cd3ad-1a9f-3a4b-b643-09d47c07d177.roa Signing time: Tue 16 Sep 2025 13:29:35 +0000 ROA not before: Tue 16 Sep 2025 13:29:35 +0000 ROA not after: Mon 15 Dec 2025 14:29:35 +0000 asID: 9009 IP address blocks: 172.111.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:ca:9c:5a:00:8b:05:81:31:90:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 16 13:29:35 2025 GMT Not After : Dec 15 14:29:35 2025 GMT Subject: CN=94ddc00f-89d3-4a49-ab33-71d36fcb90a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:a5:3e:df:c7:e2:c3:23:8b:95:a2:79:2c: 81:63:e9:1e:f0:a7:cf:3c:4b:29:22:b6:62:44:c1: c3:7d:04:e9:11:fc:c8:94:75:ec:2f:77:69:95:70: 30:54:de:19:8e:cb:6a:aa:5f:34:ec:6e:a5:b1:8b: d8:40:40:84:a9:64:70:2e:2c:dc:54:53:5e:e0:86: 28:a4:31:50:89:83:ec:6c:55:52:d2:d3:72:8b:ec: 11:1a:22:09:bd:ea:46:13:b1:0c:91:c2:76:a1:a1: 14:f8:e2:df:c4:30:51:7e:b8:0c:9a:3a:ce:10:60: 6f:e9:43:46:a2:17:ed:06:77:80:5a:2f:1a:24:42: e0:3a:b2:a6:c6:6a:48:35:9b:bb:e8:8d:78:d5:62: 7b:18:7a:e4:c9:a9:11:41:9d:e9:34:8c:85:33:5d: a1:27:83:a9:69:69:a4:bd:08:df:09:fa:23:6f:ba: fd:72:ff:47:ab:f4:e4:d6:c8:36:82:22:b7:e2:9e: 29:e5:d8:bc:95:5c:9f:50:55:9b:5d:b4:a6:71:7d: ca:ca:ab:67:2d:3c:f9:a3:c1:99:a0:b0:22:06:8e: 3b:af:e3:11:05:4d:5c:43:de:7d:63:ff:56:3e:68: ab:ca:48:1d:eb:b3:c7:67:f5:4f:b9:9d:69:7c:d9: 01:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:44:26:7F:AB:A4:E3:CE:09:88:E0:B2:9C:2A:67:5D:C7:B3:5E:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ae9cd3ad-1a9f-3a4b-b643-09d47c07d177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:58:8b:39:e9:88:f0:74:f5:0a:7d:01:e4:e6:35:e9:2f:fa: 37:ea:cb:bf:28:e2:f1:95:36:42:a5:d9:7f:b1:a6:36:73:08: 59:fd:1e:c3:c5:28:e0:0c:d3:79:0f:fe:f5:97:07:4f:87:37: 0d:af:cf:5d:bb:32:49:36:9b:40:9f:21:17:54:97:c6:42:8a: c0:8e:c2:03:00:80:72:73:75:be:44:56:d5:41:08:75:b5:7c: 1a:a2:ff:33:66:84:82:ce:83:8e:6a:42:9e:cd:f1:4c:c8:f7: 23:61:42:e5:74:4f:33:d7:f5:7b:1f:3e:f4:f6:a9:9b:ef:6e: f1:cd:c5:92:5f:e6:15:6d:cf:3e:f7:83:7e:96:d9:6b:73:f4: 10:f3:95:63:3c:7c:32:f8:11:20:89:06:4b:1a:f5:f4:b8:66: b5:bd:36:b9:6a:c0:a9:c4:30:cc:ed:57:79:54:57:a1:d8:0f: c0:f1:1e:f3:ab:06:23:81:20:c5:5a:e4:59:59:39:51:1e:49: 21:24:d5:69:e5:f7:ed:90:a0:9e:4a:9e:f0:b7:3d:64:17:60: 5f:e6:dd:72:a6:41:11:80:4a:35:58:36:65:f0:72:35:54:31: 47:3e:17:9d:86:71:3b:b8:f2:27:15:b5:d0:4a:c8:d0:85:d6: d3:8c:35:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2ypxaAIsFgTGQYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDkxNjEzMjkzNVoXDTI1MTIxNTE0MjkzNVowLzEtMCsGA1UEAxMk OTRkZGMwMGYtODlkMy00YTQ5LWFiMzMtNzFkMzZmY2I5MGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZqlPt/H4sMji5WieSyBY+ke8KfPPEspIrZi RMHDfQTpEfzIlHXsL3dplXAwVN4Zjstqql807G6lsYvYQECEqWRwLizcVFNe4IYo pDFQiYPsbFVS0tNyi+wRGiIJvepGE7EMkcJ2oaEU+OLfxDBRfrgMmjrOEGBv6UNG ohftBneAWi8aJELgOrKmxmpINZu76I141WJ7GHrkyakRQZ3pNIyFM12hJ4OpaWmk vQjfCfojb7r9cv9Hq/Tk1sg2giK34p4p5di8lVyfUFWbXbSmcX3KyqtnLTz5o8GZ oLAiBo47r+MRBU1cQ959Y/9WPmirykgd67PHZ/VPuZ1pfNkBWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZEJn+rpOPOCYjgspwqZ13Hs17uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWU5Y2QzYWQtMWE5Zi0z YTRiLWI2NDMtMDlkNDdjMDdkMTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxYiznpiPB09Qp9AeTmNekv+jfqy78o4vGVNkKl2X+xpjZzCFn9HsPF KOAM03kP/vWXB0+HNw2vz127Mkk2m0CfIRdUl8ZCisCOwgMAgHJzdb5EVtVBCHW1 fBqi/zNmhILOg45qQp7N8UzI9yNhQuV0TzPX9XsfPvT2qZvvbvHNxZJf5hVtzz73 g36W2Wtz9BDzlWM8fDL4ESCJBksa9fS4ZrW9NrlqwKnEMMztV3lUV6HYD8DxHvOr BiOBIMVa5FlZOVEeSSEk1Wnl9+2QoJ5KnvC3PWQXYF/m3XKmQRGASjVYNmXwcjVU MUc+F52GcTu48icVtdBKyNCF1tOMNb0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:32:52 2025 by rpki-client