$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/0047fcfd-7aec-34bb-aede-a399b404d33d.roa File: 0047fcfd-7aec-34bb-aede-a399b404d33d.roa (raw, json) Hash identifier: YPnsMxpouyMHQCUanyQqfBZbFrhvjYXDM/CWs/8kVx8= Subject key identifier: 44:03:E5:63:52:63:7D:EE:15:60:D9:18:34:12:51:5B:C0:1D:69:7F Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Certificate serial: 010D0C9F4328584BBB759432456D5835645C5E60 Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/0047fcfd-7aec-34bb-aede-a399b404d33d.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 35916 IP address blocks: 172.111.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:94:32:45:6d:58:35:64:5c:5e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=9904f88f-15b8-437f-bc4a-9c8a491b48bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dd:7a:aa:e4:70:da:e8:78:33:8f:62:df:a0: e8:a5:b8:c7:dd:54:a2:80:9b:37:1b:72:1f:f1:ba: 3b:41:7f:3a:ea:11:02:c6:cb:b7:05:2b:48:5e:e9: 35:c2:0b:0d:f1:1f:3a:16:c5:41:55:83:b1:21:aa: 3a:b2:0d:84:b7:2a:50:ab:00:1e:12:a1:df:0e:00: a5:86:c9:b7:39:fa:33:da:9a:cc:0d:20:e5:be:a6: 4a:39:95:f1:25:f6:4d:3c:78:6d:3a:8e:71:02:06: 21:48:ba:f1:34:37:9c:e3:dc:60:8f:f3:05:b4:97: 79:ba:30:f0:be:4b:be:9f:9e:0b:ab:7a:ed:6b:6c: e0:30:e8:e0:cc:9f:44:e6:bd:28:80:d6:f0:f2:74: 28:89:1d:c3:1a:27:bf:d1:5a:8b:fc:88:3c:ae:4d: b8:4e:4b:f2:ee:24:57:77:b3:b1:93:18:e3:47:69: 4e:25:62:69:10:bf:11:b0:d4:87:06:c4:a1:a3:75: 3a:f7:53:cd:40:b1:90:48:3e:a5:6d:c3:82:7d:d1: 76:90:0f:c2:a1:f9:c0:7a:54:c9:9a:d8:93:44:27: 90:7a:2b:19:42:2b:49:0e:1d:68:c6:bd:3b:f2:a4: e3:8b:f3:e0:fd:ae:63:d2:89:8f:56:8e:5d:04:9f: 80:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:03:E5:63:52:63:7D:EE:15:60:D9:18:34:12:51:5B:C0:1D:69:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/0047fcfd-7aec-34bb-aede-a399b404d33d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl X509v3 Authority Key Identifier: keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer sbgp-ipAddrBlock: critical IPv4: 172.111.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:37:2a:ff:8f:cc:bc:f2:f5:13:ea:26:03:e2:46:8e:be:8d: b2:ec:d0:c3:36:6a:99:00:bc:4c:77:34:0d:68:51:5e:95:2b: 10:62:05:2f:8c:53:66:a4:84:43:b4:44:38:59:fd:1a:8d:94: d3:40:4c:30:71:cf:99:2a:b4:74:13:79:35:3f:27:81:66:37: ca:5c:a7:01:1f:24:a5:55:b6:0f:9c:b5:21:09:db:68:39:b4: 0c:54:8a:49:59:90:81:9b:7c:cc:18:35:31:c1:5c:c3:a7:f6: 92:04:6d:bc:ce:44:b9:10:43:c3:fc:a7:d6:a9:87:85:2c:fa: 28:4b:2f:fe:34:48:4f:02:c8:24:4c:b6:40:4c:23:c1:d3:e1: 4a:46:b4:52:f8:12:84:94:3d:bb:e1:3a:bc:8b:f4:67:3a:36: 18:7f:e9:2e:16:5e:1b:86:fa:df:c2:77:13:21:39:5c:57:5a: c0:3c:78:dd:37:00:cf:c5:90:dd:89:86:22:8c:06:2e:e7:cb: 5c:cd:53:9f:1b:b7:ae:45:a7:10:3c:cb:c6:f2:f2:8d:ba:f8: ad:22:ff:c9:11:8f:74:a6:56:ca:08:92:c4:0a:6c:95:49:71: a8:2a:20:d7:9f:8e:64:59:c0:d9:ed:13:48:a3:58:04:34:e4: 5f:f2:87:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZQyRW1YNWRcXmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4 MGMzMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk OTkwNGY4OGYtMTViOC00MzdmLWJjNGEtOWM4YTQ5MWI0OGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN16quRw2uh4M49i36DopbjH3VSigJs3G3If 8bo7QX866hECxsu3BStIXuk1wgsN8R86FsVBVYOxIao6sg2EtypQqwAeEqHfDgCl hsm3Ofoz2prMDSDlvqZKOZXxJfZNPHhtOo5xAgYhSLrxNDec49xgj/MFtJd5ujDw vku+n54Lq3rta2zgMOjgzJ9E5r0ogNbw8nQoiR3DGie/0VqL/Ig8rk24Tkvy7iRX d7OxkxjjR2lOJWJpEL8RsNSHBsSho3U691PNQLGQSD6lbcOCfdF2kA/CofnAelTJ mtiTRCeQeisZQitJDh1oxr078qTji/Pg/a5j0omPVo5dBJ+AuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQD5WNSY33uFWDZGDQSUVvAHWl/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvMDA0N2ZjZmQtN2FlYy0z NGJiLWFlZGUtYTM5OWI0MDRkMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3 ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG85MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHA3Kv+PzLzy9RPqJgPiRo6+jbLs0MM2apkAvEx3NA1oUV6VKxBiBS+M U2akhEO0RDhZ/RqNlNNATDBxz5kqtHQTeTU/J4FmN8pcpwEfJKVVtg+ctSEJ22g5 tAxUiklZkIGbfMwYNTHBXMOn9pIEbbzORLkQQ8P8p9aph4Us+ihLL/40SE8CyCRM tkBMI8HT4UpGtFL4EoSUPbvhOryL9Gc6Nhh/6S4WXhuG+t/CdxMhOVxXWsA8eN03 AM/FkN2JhiKMBi7ny1zNU58bt65FpxA8y8by8o26+K0i/8kRj3SmVsoIksQKbJVJ cagqINefjmRZwNntE0ijWAQ05F/yh/s= -----END CERTIFICATE-----Generated at Wed Nov 5 13:20:45 2025 by rpki-client