$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/faee21e8-c5a4-3d46-95b6-41c129d39826.roa File: faee21e8-c5a4-3d46-95b6-41c129d39826.roa (raw, json) Hash identifier: ZS20ufV0e6M24Z95w9kd66RPfbBdPpWCsIRn9HibpQE= Subject key identifier: 36:13:AB:3E:54:44:22:59:7E:0C:43:D4:F0:41:A4:DB:3B:0D:90:AF Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6DD76C2A579D19E087400 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/faee21e8-c5a4-3d46-95b6-41c129d39826.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 172.111.114.0/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:dd:76:c2:a5:79:d1:9e:08:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=475dfecc-f76d-44b2-b6a2-eb5c5455cb28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e9:9d:4e:e7:8f:b6:2d:39:e1:1a:93:31:e3: 50:5a:a8:6c:55:84:05:30:54:3f:76:a7:d2:90:d3: 50:c9:55:69:b6:0d:28:0c:2a:74:08:9b:34:8c:d4: 5f:6f:dc:c7:55:68:55:70:2b:e8:c9:b8:60:1e:1e: 78:1c:d0:57:79:ae:66:bb:87:90:fd:d9:9e:7c:6b: 50:ac:0b:47:06:ef:a1:5e:2f:d3:56:e0:92:bc:0a: 47:a3:aa:42:6a:ee:8d:66:c0:e5:10:d5:0f:f5:0e: 6b:8b:53:37:c5:98:6a:55:69:bb:21:86:2f:56:ef: 65:e3:46:26:ee:6d:21:93:da:27:87:50:2e:d7:4f: 37:f1:43:17:4c:66:39:8d:e0:e4:f5:11:ca:e7:1b: bd:b7:b8:08:1c:0c:ea:b2:49:87:e4:61:d9:5f:97: 4d:87:5d:ad:e5:47:3b:0e:a9:88:4a:f6:d7:1a:67: 60:a1:05:5d:95:ee:02:9d:dc:7c:af:0c:5d:03:6e: 25:cd:34:c4:06:6b:10:a5:f6:ee:e7:5c:f8:93:42: e7:ec:3e:54:83:5f:8f:33:86:98:83:26:52:fb:b2: 30:f7:0d:1b:fd:a6:ba:a4:96:0b:39:35:73:97:22: 5c:c6:f2:c9:17:f7:17:d8:58:24:d3:59:03:66:22: d3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:13:AB:3E:54:44:22:59:7E:0C:43:D4:F0:41:A4:DB:3B:0D:90:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/faee21e8-c5a4-3d46-95b6-41c129d39826.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 172.111.114.0/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:9f:f4:bc:b8:3e:56:d1:04:c7:fb:a7:d4:77:cf:24:07:0f: 10:6e:75:1b:9b:84:6f:c5:b2:c4:57:71:4a:a5:f3:ad:ee:3c: 49:21:f0:cb:8d:9f:5a:f4:43:2b:c7:18:38:8d:0d:f3:37:9b: 87:e7:10:ba:20:f6:33:b6:19:f9:bd:22:f4:ee:85:ce:77:13: d7:7a:c0:31:9d:6a:ee:1e:fd:21:d8:08:84:2d:44:7c:22:14: 4b:de:5b:67:da:6b:be:93:a5:4a:0f:8f:c1:55:6d:e0:96:99: 4f:87:88:b2:2f:49:9e:0a:90:0c:85:68:42:2f:92:92:c8:8a: d9:97:26:a8:87:c2:02:54:d7:16:c2:a1:2c:06:8f:2f:67:25: 4f:d0:95:1f:17:cb:ab:df:99:a3:68:f8:b8:25:87:da:fb:1d: 82:08:ac:04:6b:6c:f6:0c:80:52:d2:56:d4:b1:35:ce:35:d7: 3d:04:fa:25:31:03:f9:dc:fc:ea:fe:0a:53:22:90:32:bd:6c: 17:df:3a:ae:ee:d4:54:24:64:d4:7f:2c:01:83:58:d3:b8:69: d4:82:17:cd:0a:bd:14:c9:26:7b:ca:d0:34:a4:93:a6:78:4d: af:d1:3f:71:04:a0:c8:a3:ac:91:3d:6e:ca:76:57:13:9d:2c: dd:0b:14:a1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1t12wqV50Z4IdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NDc1ZGZlY2MtZjc2ZC00NGIyLWI2YTItZWI1YzU0NTVjYjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnumdTuePti054RqTMeNQWqhsVYQFMFQ/dqfS kNNQyVVptg0oDCp0CJs0jNRfb9zHVWhVcCvoybhgHh54HNBXea5mu4eQ/dmefGtQ rAtHBu+hXi/TVuCSvApHo6pCau6NZsDlENUP9Q5ri1M3xZhqVWm7IYYvVu9l40Ym 7m0hk9onh1Au10838UMXTGY5jeDk9RHK5xu9t7gIHAzqskmH5GHZX5dNh12t5Uc7 DqmISvbXGmdgoQVdle4Cndx8rwxdA24lzTTEBmsQpfbu51z4k0Ln7D5Ug1+PM4aY gyZS+7Iw9w0b/aa6pJYLOTVzlyJcxvLJF/cX2Fgk01kDZiLTAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDYTqz5URCJZfgxD1PBBpNs7DZCvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZmFlZTIxZTgtYzVhNC0z ZDQ2LTk1YjYtNDFjMTI5ZDM5ODI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFrG9yADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA6n/S8uD5W0QTH+6fUd88kBw8QbnUbm4RvxbLEV3FKpfOt7jxJIfDL jZ9a9EMrxxg4jQ3zN5uH5xC6IPYzthn5vSL07oXOdxPXesAxnWruHv0h2AiELUR8 IhRL3ltn2mu+k6VKD4/BVW3glplPh4iyL0meCpAMhWhCL5KSyIrZlyaoh8ICVNcW wqEsBo8vZyVP0JUfF8ur35mjaPi4JYfa+x2CCKwEa2z2DIBS0lbUsTXONdc9BPol MQP53Pzq/gpTIpAyvWwX3zqu7tRUJGTUfywBg1jTuGnUghfNCr0UySZ7ytA0pJOm eE2v0T9xBKDIo6yRPW7KdlcTnSzdCxSh -----END CERTIFICATE-----Generated at Wed Nov 5 03:51:12 2025 by rpki-client