$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa File: 127335ac-7835-339e-98cf-19520d8ce2e9.roa (raw, json) Hash identifier: +fgRAc+QH+yeHh/uPDNLAdZUOQUlbJZsmXGXG4YSlh0= Subject key identifier: AF:60:9E:2C:15:FD:68:12:83:6D:A4:76:8F:DE:64:F1:3A:92:60:BA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BA39D1B2CD2A7D79A5225E2C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 3223 IP address blocks: 172.94.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:1b:2c:d2:a7:d7:9a:52:25:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=c4c8a942-ec68-4ee4-aba0-4c342db05925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:28:29:ae:49:1a:59:f4:84:9d:4c:cc:eb:22: a8:e8:bc:6e:a5:6e:22:c8:99:08:a7:11:c4:cb:87: 24:75:e7:e5:c5:36:44:de:4c:df:dd:35:d5:03:6a: cf:ac:40:64:22:fd:60:a1:75:41:21:ca:4f:82:3a: b7:2b:4e:65:63:55:3d:40:82:5f:0d:28:d3:b0:c4: e2:04:ef:e8:b9:83:45:b4:f1:c1:93:eb:02:69:09: 13:9c:e1:7c:ad:64:7e:ba:be:fd:fc:32:7a:8c:5a: 70:f4:e1:16:18:96:d2:9e:5c:22:cb:a1:58:8f:19: 8c:fd:9a:68:14:20:c9:31:04:7f:aa:4e:c9:cf:d2: 62:7a:55:4a:2e:93:b9:30:a3:53:56:e2:87:33:23: 73:6b:d4:de:2d:eb:6c:48:07:1c:1b:f9:75:3d:04: 78:14:12:f0:2f:ec:93:d6:be:53:b6:94:ec:61:20: c6:7d:83:50:10:e3:02:72:df:89:ee:c8:4e:48:6a: 13:0f:43:eb:77:8c:16:6a:e8:10:f2:13:22:59:8d: f4:d5:36:22:4e:50:b0:97:4c:0e:9a:78:f0:3e:06: a2:61:ed:73:e9:55:e1:db:a9:90:fa:7e:a6:dc:bd: a2:2f:2e:42:b9:a1:b7:fc:1f:07:d4:96:ae:05:97: 8a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:60:9E:2C:15:FD:68:12:83:6D:A4:76:8F:DE:64:F1:3A:92:60:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b6:9d:b8:79:c4:aa:43:86:28:95:b4:91:89:df:5c:4b:8c: f5:05:49:28:1f:5b:3b:e0:43:3a:07:3d:d4:25:e9:6a:1b:4f: ab:d7:4d:f6:f0:78:67:47:11:5e:77:a5:0a:ea:4e:ac:c6:5d: 51:e4:99:a2:ce:92:7c:fd:a2:92:a8:0b:a7:26:57:4a:60:b1: ad:7d:0d:9d:7c:a5:ca:55:12:1b:4f:b0:9e:9e:1b:1b:4f:38: bf:28:ab:ff:fe:fc:1a:59:4a:f0:27:39:bf:27:f8:59:f1:d7: 07:d9:48:c3:5d:a8:11:9a:de:65:93:f0:32:3d:4e:79:7c:27: 92:3f:f4:af:12:33:d1:31:4c:f8:d8:2e:b6:de:5e:11:cf:66: 44:e9:8e:69:8c:52:a7:b7:41:08:0e:ca:d4:d1:13:e0:09:14: ec:5c:97:64:b4:78:56:2f:41:58:4e:82:2c:b3:4b:37:fc:58: 52:81:8a:f0:14:42:af:ee:91:e1:02:b8:e6:d4:a2:a4:6d:0f: 9c:7b:0f:e3:48:ff:07:77:e4:4f:66:7c:43:f0:5c:b5:0f:c3: 2c:e4:3d:93:ce:0a:83:46:81:8c:2c:7b:8d:a2:17:eb:11:64: c8:d4:ec:ad:c3:91:ff:1d:95:1e:e5:05:98:13:f4:de:9b:27: 68:05:c2:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRss0qfXmlIl4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YzRjOGE5NDItZWM2OC00ZWU0LWFiYTAtNGMzNDJkYjA1OTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCgprkkaWfSEnUzM6yKo6LxupW4iyJkIpxHE y4ckdeflxTZE3kzf3TXVA2rPrEBkIv1goXVBIcpPgjq3K05lY1U9QIJfDSjTsMTi BO/ouYNFtPHBk+sCaQkTnOF8rWR+ur79/DJ6jFpw9OEWGJbSnlwiy6FYjxmM/Zpo FCDJMQR/qk7Jz9JielVKLpO5MKNTVuKHMyNza9TeLetsSAccG/l1PQR4FBLwL+yT 1r5TtpTsYSDGfYNQEOMCct+J7shOSGoTD0Prd4wWaugQ8hMiWY301TYiTlCwl0wO mnjwPgaiYe1z6VXh26mQ+n6m3L2iLy5CuaG3/B8H1JauBZeK4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9gniwV/WgSg22kdo/eZPE6kmC6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTI3MzM1YWMtNzgzNS0z MzllLTk4Y2YtMTk1MjBkOGNlMmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi2nbh5xKpDhiiVtJGJ31xLjPUFSSgfWzvgQzoHPdQl6WobT6vXTfbw eGdHEV53pQrqTqzGXVHkmaLOknz9opKoC6cmV0pgsa19DZ18pcpVEhtPsJ6eGxtP OL8oq//+/BpZSvAnOb8n+Fnx1wfZSMNdqBGa3mWT8DI9Tnl8J5I/9K8SM9ExTPjY LrbeXhHPZkTpjmmMUqe3QQgOytTRE+AJFOxcl2S0eFYvQVhOgiyzSzf8WFKBivAU Qq/ukeECuObUoqRtD5x7D+NI/wd35E9mfEPwXLUPwyzkPZPOCoNGgYwse42iF+sR ZMjU7K3Dkf8dlR7lBZgT9N6bJ2gFwjw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:32:20 2025 by rpki-client