$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b9c481eb-902d-395b-a0d9-93bfddfba6a8.roa File: b9c481eb-902d-395b-a0d9-93bfddfba6a8.roa (raw, json) Hash identifier: pPx39/7zwpBkTvHsrNxoVFsjaqRi74ZYToFWS88CPgI= Subject key identifier: AD:F4:6D:EE:C7:B5:6E:18:46:68:7E:2E:25:95:2A:37:51:32:F2:04 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BB45D43FADA6F696289F3B280 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b9c481eb-902d-395b-a0d9-93bfddfba6a8.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 9009 IP address blocks: 172.111.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:43:fa:da:6f:69:62:89:f3:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=df1c0be3-d1ad-4541-bcee-e3abd5c23699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:95:36:a6:74:cb:00:12:bb:7b:75:98:29: 5a:b7:74:e4:9d:06:30:d3:e2:a8:36:2b:2e:5a:82: e2:78:61:2b:50:e7:c8:68:dd:49:75:4d:c3:db:a4: 1c:ce:e2:19:34:c1:33:64:6c:d5:4a:31:7d:1d:15: 06:a3:92:cf:21:4c:c7:8d:c4:1e:fe:66:2b:ba:75: b1:ef:5a:a4:bd:49:0b:c2:2d:30:30:1b:79:94:fc: c7:77:f8:d0:42:a0:42:cd:ab:05:0c:02:f2:c2:db: 98:6d:f8:44:5f:e5:61:f8:d1:57:83:01:20:d1:4c: b4:25:dd:1e:7e:d3:bf:cd:91:27:63:45:43:07:66: 93:6c:bc:41:c9:bc:91:00:d8:e3:2b:22:ff:0c:06: 91:f3:32:23:64:dc:3e:80:c0:1c:28:52:4b:21:bd: 35:90:db:12:32:e5:76:19:75:c8:98:fc:d1:99:34: 2c:79:cb:f2:15:26:cf:26:76:d3:22:f3:7b:a6:80: bf:84:6d:96:37:7e:b9:1e:4a:36:be:07:87:e4:93: 9d:e8:b8:d5:c3:0d:a6:0d:72:46:4c:97:85:a4:48: 17:ae:65:70:ab:93:70:79:84:b9:90:b0:da:e7:e6: c6:3f:14:35:6c:e9:35:8a:45:85:70:64:58:ff:9e: 89:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F4:6D:EE:C7:B5:6E:18:46:68:7E:2E:25:95:2A:37:51:32:F2:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b9c481eb-902d-395b-a0d9-93bfddfba6a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:59:52:33:1f:5d:15:7c:9f:5a:61:7c:a3:b7:bc:a7:0e:8d: 3b:35:87:65:65:57:9a:85:f5:26:9c:f0:14:44:d9:88:d0:a3: ed:a9:ef:15:8f:3a:34:4e:d0:b4:d7:56:2d:50:2e:30:65:be: e4:e8:6c:c5:c4:90:7e:91:d8:88:84:7e:1c:8e:94:d9:14:0a: a5:d7:a5:dc:ec:26:91:e1:f5:0e:79:6c:f8:83:5e:41:8c:d8: c1:b9:a7:20:fe:45:29:c6:f1:be:0d:1a:f0:cf:31:25:65:cf: 92:26:6b:cb:2b:80:9c:2c:0b:40:58:2b:16:6c:9e:9e:bf:e5: 73:68:91:7e:22:f7:66:58:fa:5c:44:86:ba:f1:5c:0c:95:00: f7:70:54:d7:e6:9c:ab:90:c2:33:ea:7c:a4:4d:3f:3f:0f:9d: f3:0d:ee:3a:9a:76:6b:f7:0a:a2:37:32:77:90:9c:bc:ec:34: 69:e4:09:80:23:5f:07:30:9b:3a:23:b4:3c:78:0e:b4:fb:7e: 0f:33:1b:57:b0:83:09:00:a9:2f:71:8d:bc:63:1d:54:59:b9: 98:b0:2b:6e:5e:4d:4d:44:4a:43:d0:f1:3d:70:a7:38:54:4d: 45:40:f8:36:84:6d:98:e8:a6:1d:70:79:ae:b6:79:70:3e:ac: 1b:2c:4f:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XUP62m9pYonzsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ZGYxYzBiZTMtZDFhZC00NTQxLWJjZWUtZTNhYmQ1YzIzNjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutmVNqZ0ywASu3t1mClat3TknQYw0+KoNisu WoLieGErUOfIaN1JdU3D26QczuIZNMEzZGzVSjF9HRUGo5LPIUzHjcQe/mYrunWx 71qkvUkLwi0wMBt5lPzHd/jQQqBCzasFDALywtuYbfhEX+Vh+NFXgwEg0Uy0Jd0e ftO/zZEnY0VDB2aTbLxBybyRANjjKyL/DAaR8zIjZNw+gMAcKFJLIb01kNsSMuV2 GXXImPzRmTQsecvyFSbPJnbTIvN7poC/hG2WN365Hko2vgeH5JOd6LjVww2mDXJG TJeFpEgXrmVwq5NweYS5kLDa5+bGPxQ1bOk1ikWFcGRY/56JPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK30be7HtW4YRmh+LiWVKjdRMvIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjljNDgxZWItOTAyZC0z OTViLWEwZDktOTNiZmRkZmJhNmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpZUjMfXRV8n1phfKO3vKcOjTs1h2VlV5qF9Sac8BRE2YjQo+2p7xWP OjRO0LTXVi1QLjBlvuTobMXEkH6R2IiEfhyOlNkUCqXXpdzsJpHh9Q55bPiDXkGM 2MG5pyD+RSnG8b4NGvDPMSVlz5Ima8srgJwsC0BYKxZsnp6/5XNokX4i92ZY+lxE hrrxXAyVAPdwVNfmnKuQwjPqfKRNPz8PnfMN7jqadmv3CqI3MneQnLzsNGnkCYAj XwcwmzojtDx4DrT7fg8zG1ewgwkAqS9xjbxjHVRZuZiwK25eTU1ESkPQ8T1wpzhU TUVA+DaEbZjoph1wea62eXA+rBssT5I= -----END CERTIFICATE-----Generated at Wed Nov 5 05:46:15 2025 by rpki-client