$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dd883586-9672-31da-81ee-b0d606e591b4.roa File: dd883586-9672-31da-81ee-b0d606e591b4.roa (raw, json) Hash identifier: 1CZln2EveVsjTbuVMxZqIA8F+Sy435X8bdINxmgwJyw= Subject key identifier: 76:2F:AE:1A:6C:D0:8D:C1:33:1E:D8:CE:48:46:A7:18:93:37:60:84 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BB6747792FB76666AABC41180 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dd883586-9672-31da-81ee-b0d606e591b4.roa Signing time: Sat 01 Nov 2025 06:59:29 +0000 ROA not before: Sat 01 Nov 2025 06:59:29 +0000 ROA not after: Fri 30 Jan 2026 07:59:29 +0000 asID: 205220 IP address blocks: 172.111.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b6:74:77:92:fb:76:66:6a:ab:c4:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 1 06:59:29 2025 GMT Not After : Jan 30 07:59:29 2026 GMT Subject: CN=ff7201c8-9b99-400c-af99-c2e41a3e65a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9e:c3:49:c0:88:7a:93:2d:ff:64:b1:ff:9f: f2:3b:4e:11:34:78:bf:cb:1a:93:3a:0b:9f:1c:c4: 4f:4b:98:b0:2b:1f:f0:71:eb:5e:a9:45:ce:7f:8d: e6:7c:d4:46:a5:fc:26:09:01:62:b0:5c:18:1d:92: 25:2f:8d:e7:e2:80:cb:bf:46:69:de:6b:9d:31:b0: 55:a0:43:76:0b:27:f5:b4:24:d5:76:b0:06:f4:57: 79:9d:fd:31:6e:d1:af:c1:dd:e2:2e:60:ff:e0:63: 4d:0e:ee:3a:33:0d:68:9d:ed:da:6b:19:18:bb:7a: d7:de:72:6e:35:0c:fe:da:f8:6a:e5:01:d1:cd:55: f5:2a:0c:46:f9:df:4a:8b:ed:97:2d:5d:07:dd:d9: f1:d7:e0:2b:5a:40:40:3b:84:b8:ce:af:9b:0e:f3: ea:70:58:3c:d6:3c:e0:e5:ed:30:49:1e:91:2e:a1: 17:d3:94:34:c4:68:c4:b3:72:fb:34:3d:8a:d7:d9: 68:f9:19:98:23:e6:7d:4d:43:4c:36:96:bb:24:b7: 1e:73:0a:fd:fd:e4:e8:0b:f9:8f:58:b6:a9:e7:9e: 8d:57:fa:17:25:e8:2c:fe:07:68:13:88:01:e2:6c: 89:a9:22:26:18:07:77:03:48:29:5a:23:92:30:d3: 32:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2F:AE:1A:6C:D0:8D:C1:33:1E:D8:CE:48:46:A7:18:93:37:60:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dd883586-9672-31da-81ee-b0d606e591b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b3:49:4d:6b:38:3b:22:2e:77:ff:a1:25:1c:04:90:90:db: 6e:01:4f:9c:83:86:c3:1f:67:c2:b1:ad:46:8c:85:d8:31:f1: 67:50:46:e4:49:63:08:b4:ec:04:4f:6e:23:3c:9d:32:87:a2: 92:7d:cf:41:72:c3:ef:36:5b:f5:d6:3b:ff:41:e9:5b:04:bf: d3:52:ff:53:c0:0f:86:b3:15:b7:c4:44:10:69:e0:c1:1b:1d: 60:33:06:4c:2c:0e:c0:46:4d:3c:c5:5a:c4:03:53:8a:24:76: 82:29:df:92:99:75:e4:7f:22:19:65:e9:2e:19:6b:9c:fa:88: 1a:3a:4c:4c:9e:3d:2f:bc:ca:74:8e:da:8f:cb:9e:99:de:f8: 52:1e:c5:9b:45:74:9d:c7:68:df:3d:a4:23:bf:f5:b1:b8:7d: e1:0a:6a:ed:19:cf:15:a1:5a:2a:dd:b5:69:83:2a:cd:0b:36: 32:ff:7b:55:81:68:f7:f9:a2:22:a3:2a:e4:13:ee:39:34:85: 25:da:70:39:04:e3:ba:68:39:4a:f7:11:b6:c0:9a:d1:85:cb: e3:9e:5e:1c:51:9e:8a:30:6d:90:18:c6:8d:ea:b8:a3:f2:eb: 15:fc:da:7e:57:09:c0:b3:d6:06:bb:5c:4a:ae:28:40:49:e3: 19:84:79:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu2dHeS+3ZmaqvEEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTEwMTA2NTkyOVoXDTI2MDEzMDA3NTkyOVowLzEtMCsGA1UEAxMk ZmY3MjAxYzgtOWI5OS00MDBjLWFmOTktYzJlNDFhM2U2NWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Z7DScCIepMt/2Sx/5/yO04RNHi/yxqTOguf HMRPS5iwKx/wceteqUXOf43mfNRGpfwmCQFisFwYHZIlL43n4oDLv0Zp3mudMbBV oEN2Cyf1tCTVdrAG9Fd5nf0xbtGvwd3iLmD/4GNNDu46Mw1one3aaxkYu3rX3nJu NQz+2vhq5QHRzVX1KgxG+d9Ki+2XLV0H3dnx1+ArWkBAO4S4zq+bDvPqcFg81jzg 5e0wSR6RLqEX05Q0xGjEs3L7ND2K19lo+RmYI+Z9TUNMNpa7JLcecwr9/eToC/mP WLap556NV/oXJegs/gdoE4gB4myJqSImGAd3A0gpWiOSMNMy6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYvrhps0I3BMx7YzkhGpxiTN2CEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGQ4ODM1ODYtOTY3Mi0z MWRhLTgxZWUtYjBkNjA2ZTU5MWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSzSU1rODsiLnf/oSUcBJCQ224BT5yDhsMfZ8KxrUaMhdgx8WdQRuRJ Ywi07ARPbiM8nTKHopJ9z0Fyw+82W/XWO/9B6VsEv9NS/1PAD4azFbfERBBp4MEb HWAzBkwsDsBGTTzFWsQDU4okdoIp35KZdeR/Ihll6S4Za5z6iBo6TEyePS+8ynSO 2o/Lnpne+FIexZtFdJ3HaN89pCO/9bG4feEKau0ZzxWhWirdtWmDKs0LNjL/e1WB aPf5oiKjKuQT7jk0hSXacDkE47poOUr3EbbAmtGFy+OeXhxRnoowbZAYxo3quKPy 6xX82n5XCcCz1ga7XEquKEBJ4xmEeQM= -----END CERTIFICATE-----Generated at Wed Nov 5 03:22:04 2025 by rpki-client