$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/073dc821-d26a-3531-84e3-8bef385953d7.roa File: 073dc821-d26a-3531-84e3-8bef385953d7.roa (raw, json) Hash identifier: b5M28/BrsGfZr6i3U4Ah1aMvsMq+4QhA+1cFoqTr5mQ= Subject key identifier: CD:5B:11:40:A3:01:9E:D4:A4:E9:5E:0E:19:95:35:25:5F:00:E2:03 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BB3B7EC788A539332F0D56D00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/073dc821-d26a-3531-84e3-8bef385953d7.roa Signing time: Fri 31 Oct 2025 07:27:59 +0000 ROA not before: Fri 31 Oct 2025 07:27:59 +0000 ROA not after: Thu 29 Jan 2026 08:27:59 +0000 asID: 55154 IP address blocks: 172.94.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b3:b7:ec:78:8a:53:93:32:f0:d5:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 31 07:27:59 2025 GMT Not After : Jan 29 08:27:59 2026 GMT Subject: CN=e9f5c301-4f4a-4345-8da5-dd98cea3ce9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7e:4d:b0:0d:c6:4e:9f:b0:9d:7b:ac:cc:80: ca:5b:e3:bb:2c:ba:28:c9:97:52:00:36:d8:77:61: 53:53:99:8f:1e:c3:e5:7c:31:63:04:f1:31:44:53: d1:f7:1b:09:17:bc:19:f2:d5:8e:bc:05:e0:18:c4: 4e:3d:6f:06:dd:b3:fb:48:99:e1:91:52:f5:67:dd: 76:83:e5:cc:49:d7:2b:d7:08:97:55:71:64:23:d3: b6:b1:7b:30:f8:29:cc:2e:33:c6:2d:a1:4b:2d:d0: 7e:15:9e:15:e0:a6:70:22:06:2d:14:32:4e:f3:1e: 3f:d6:40:e0:d4:27:74:e1:93:60:74:c4:55:50:dd: 05:4b:6a:94:cc:aa:c5:aa:17:bc:ba:72:46:e2:c3: 31:84:a3:d5:fd:a0:3f:9c:23:6c:14:45:32:34:f0: 20:9e:e8:6e:bd:c9:3e:58:ed:79:c6:49:93:9d:32: 5f:e1:48:c4:37:42:e3:34:09:79:ad:82:6e:cd:3d: af:56:d7:62:09:f1:b0:83:aa:85:87:25:f3:b9:42: 05:96:d8:3c:21:4c:e3:09:b8:88:5f:72:a2:03:bd: 4c:e8:27:11:e9:7b:f4:8d:ad:98:b3:fb:e0:dc:ea: 3a:e3:70:f1:a5:d6:80:c1:bf:00:2f:b8:fe:15:9f: 74:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5B:11:40:A3:01:9E:D4:A4:E9:5E:0E:19:95:35:25:5F:00:E2:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/073dc821-d26a-3531-84e3-8bef385953d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:13:b4:64:25:f8:7a:e5:95:95:b4:8b:b3:ca:15:71:a4:cb: 95:c0:36:e3:ab:7a:88:4c:d6:72:e7:ae:60:ba:9f:57:13:90: 65:ab:fa:fd:08:91:dd:64:f9:15:0f:17:b8:57:ee:e7:22:54: 56:1f:07:9f:97:61:f7:9f:36:34:89:0c:36:d8:b9:56:3d:c1: 71:6d:34:49:01:ba:6a:0a:b3:3f:fd:3c:93:a2:a6:09:0e:37: 47:3d:01:97:9b:52:df:6f:e5:de:9e:62:7b:b7:1b:e9:0b:7a: 2d:68:2d:1e:5d:69:c6:d8:4b:96:43:6f:ce:d2:35:5f:17:85: 5e:5b:88:d2:73:0d:87:30:17:6d:2e:9f:f4:67:66:3d:bf:fd: 1a:05:08:11:14:53:b2:13:48:78:ee:d7:0c:9f:0e:09:d7:71: 91:cc:6e:7f:33:60:56:90:dd:54:11:04:d5:8f:be:10:62:f8: 82:a1:20:f6:6b:0e:74:ce:3b:2a:35:46:2f:8c:6f:2e:ef:31: 53:0d:e6:e3:ee:10:a1:ac:e3:5c:94:0d:c1:6b:05:16:ba:35: fe:93:09:c6:c5:37:7b:8e:b4:0d:15:5d:bf:38:c3:be:93:36: 2b:38:71:25:8f:9d:9e:7a:98:cd:62:23:2a:ab:36:54:15:0f: 70:b4:4c:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuzt+x4ilOTMvDVbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAzMTA3Mjc1OVoXDTI2MDEyOTA4Mjc1OVowLzEtMCsGA1UEAxMk ZTlmNWMzMDEtNGY0YS00MzQ1LThkYTUtZGQ5OGNlYTNjZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn5NsA3GTp+wnXuszIDKW+O7LLooyZdSADbY d2FTU5mPHsPlfDFjBPExRFPR9xsJF7wZ8tWOvAXgGMROPW8G3bP7SJnhkVL1Z912 g+XMSdcr1wiXVXFkI9O2sXsw+CnMLjPGLaFLLdB+FZ4V4KZwIgYtFDJO8x4/1kDg 1Cd04ZNgdMRVUN0FS2qUzKrFqhe8unJG4sMxhKPV/aA/nCNsFEUyNPAgnuhuvck+ WO15xkmTnTJf4UjEN0LjNAl5rYJuzT2vVtdiCfGwg6qFhyXzuUIFltg8IUzjCbiI X3KiA71M6CcR6Xv0ja2Ys/vg3Oo643DxpdaAwb8AL7j+FZ90ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1bEUCjAZ7UpOleDhmVNSVfAOIDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDczZGM4MjEtZDI2YS0z NTMxLTg0ZTMtOGJlZjM4NTk1M2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMTtGQl+HrllZW0i7PKFXGky5XANuOreohM1nLnrmC6n1cTkGWr+v0I kd1k+RUPF7hX7uciVFYfB5+XYfefNjSJDDbYuVY9wXFtNEkBumoKsz/9PJOipgkO N0c9AZebUt9v5d6eYnu3G+kLei1oLR5dacbYS5ZDb87SNV8XhV5biNJzDYcwF20u n/RnZj2//RoFCBEUU7ITSHju1wyfDgnXcZHMbn8zYFaQ3VQRBNWPvhBi+IKhIPZr DnTOOyo1Ri+Mby7vMVMN5uPuEKGs41yUDcFrBRa6Nf6TCcbFN3uOtA0VXb84w76T Nis4cSWPnZ56mM1iIyqrNlQVD3C0TN8= -----END CERTIFICATE-----Generated at Wed Nov 5 15:30:34 2025 by rpki-client