$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc79bc4c-225c-3a7a-a652-cf31f0e216b2.roa File: dc79bc4c-225c-3a7a-a652-cf31f0e216b2.roa (raw, json) Hash identifier: mfabuQZM4corv5ONExNhr3RYHgvoi/uIXl6FtZokLtU= Subject key identifier: 3B:80:F9:37:D3:43:44:AB:CC:F7:0C:E5:B9:03:94:9D:C7:71:FC:8E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BB45D43C6D0B9F314FA024400 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc79bc4c-225c-3a7a-a652-cf31f0e216b2.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 9009 IP address blocks: 172.111.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:43:c6:d0:b9:f3:14:fa:02:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=37b61686-fbe1-4cf2-ac31-5642c0eeb012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b0:e8:d2:86:f8:cb:eb:b4:ce:be:dc:09:b6: 89:9c:30:6e:5f:46:28:f4:e2:b0:61:99:17:b3:18: 06:1b:88:36:fe:00:01:29:3e:1e:a5:c9:38:c3:c5: ca:e1:44:dc:e6:68:27:b3:aa:ec:ba:eb:bd:e8:74: 43:71:f1:13:39:14:e4:a0:0e:fa:18:a7:07:98:f8: a8:ef:77:c5:c2:96:3f:ed:3b:45:18:a6:1d:51:5e: 44:71:21:3a:c7:2e:f8:8c:9e:0a:e3:03:c9:be:34: ff:3b:8d:05:20:db:de:d5:b4:e8:2a:07:0a:a1:6c: 36:d3:20:07:3a:2c:29:20:93:7c:cf:42:91:e8:a1: 7b:41:65:39:e5:69:15:fb:7d:5c:15:94:e4:12:a0: 5e:13:a7:cc:48:76:70:0d:47:e2:66:63:9d:bb:69: 60:17:b0:b9:f6:f4:94:e7:d4:21:e2:b4:22:83:a8: 8d:4d:31:53:6a:1e:0d:69:09:cd:b5:49:b8:a1:78: 29:f9:e7:80:45:c6:5f:c3:41:ea:2a:b5:9e:53:8c: 4c:b8:6f:29:7a:51:2c:07:21:ff:b5:5a:ec:a7:90: 19:17:fa:0a:f0:61:db:5a:b4:70:76:1c:b4:45:62: 21:f9:58:15:b5:df:2a:5f:44:c2:c4:1e:a4:5c:2e: d1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:80:F9:37:D3:43:44:AB:CC:F7:0C:E5:B9:03:94:9D:C7:71:FC:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dc79bc4c-225c-3a7a-a652-cf31f0e216b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ad:db:3d:c1:e4:51:dc:75:35:5c:3e:4e:7e:10:cd:ad:4e: 96:e7:e0:e2:53:76:1e:0f:17:3e:9c:e8:22:6a:4e:d4:ed:a5: 34:59:95:74:b1:92:06:b4:59:81:de:0c:09:32:28:25:e8:62: 42:76:80:4e:a7:1c:5e:3e:d8:b1:47:ba:f6:6d:70:14:3c:a0: 67:12:7e:27:33:41:b1:78:42:22:07:bb:b3:ab:6d:6d:bb:c2: 74:55:96:00:f2:38:6a:99:19:a7:30:94:57:91:13:cd:cb:f4: 8f:29:cd:64:b6:8f:77:f0:4c:17:70:cb:77:a7:27:96:54:34: da:09:f4:91:91:15:69:99:4a:3c:a7:13:da:97:65:1b:9e:00: ae:c8:ad:cc:d0:dd:cc:13:92:d6:a0:6b:67:c5:c6:5d:c0:ba: fb:de:ae:8e:ee:0c:4d:f7:1b:f8:a0:41:54:60:66:f6:6d:9c: fa:43:75:fd:a6:d9:9e:60:0f:6f:d6:e3:54:9c:ec:3e:5b:9d: c2:71:93:c7:2e:ea:5d:a4:02:4f:d4:50:97:27:ae:f1:b2:d5: d5:d5:e3:2c:17:37:68:8b:05:21:a3:88:95:82:4c:32:5c:8a: 72:00:e8:de:6f:d7:2b:aa:21:96:dc:0f:04:5d:d6:56:64:cf: bd:ac:f4:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XUPG0LnzFPoCRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MzdiNjE2ODYtZmJlMS00Y2YyLWFjMzEtNTY0MmMwZWViMDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbDo0ob4y+u0zr7cCbaJnDBuX0Yo9OKwYZkX sxgGG4g2/gABKT4epck4w8XK4UTc5mgns6rsuuu96HRDcfETORTkoA76GKcHmPio 73fFwpY/7TtFGKYdUV5EcSE6xy74jJ4K4wPJvjT/O40FINve1bToKgcKoWw20yAH OiwpIJN8z0KR6KF7QWU55WkV+31cFZTkEqBeE6fMSHZwDUfiZmOdu2lgF7C59vSU 59Qh4rQig6iNTTFTah4NaQnNtUm4oXgp+eeARcZfw0HqKrWeU4xMuG8pelEsByH/ tVrsp5AZF/oK8GHbWrRwdhy0RWIh+VgVtd8qX0TCxB6kXC7RDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuA+TfTQ0SrzPcM5bkDlJ3HcfyOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGM3OWJjNGMtMjI1Yy0z YTdhLWE2NTItY2YzMWYwZTIxNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEet2z3B5FHcdTVcPk5+EM2tTpbn4OJTdh4PFz6c6CJqTtTtpTRZlXSx kga0WYHeDAkyKCXoYkJ2gE6nHF4+2LFHuvZtcBQ8oGcSficzQbF4QiIHu7OrbW27 wnRVlgDyOGqZGacwlFeRE83L9I8pzWS2j3fwTBdwy3enJ5ZUNNoJ9JGRFWmZSjyn E9qXZRueAK7IrczQ3cwTktaga2fFxl3Auvvero7uDE33G/igQVRgZvZtnPpDdf2m 2Z5gD2/W41Sc7D5bncJxk8cu6l2kAk/UUJcnrvGy1dXV4ywXN2iLBSGjiJWCTDJc inIA6N5v1yuqIZbcDwRd1lZkz72s9Dk= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:10 2025 by rpki-client