$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/224ffc7c-fc28-304b-ac10-659b5e3f6aca.roa File: 224ffc7c-fc28-304b-ac10-659b5e3f6aca.roa (raw, json) Hash identifier: wEGkwWb2cyy5UGzBOMbqqLzuEY6VkerhEz15hJW1aW4= Subject key identifier: 21:99:70:21:80:1E:7A:D1:B6:D2:48:2B:9A:39:25:C3:4C:CC:6A:0C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B99D7AD29555B304B9A090E00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/224ffc7c-fc28-304b-ac10-659b5e3f6aca.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 212238 IP address blocks: 172.94.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ad:29:55:5b:30:4b:9a:09:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=07f6aac6-d028-41b2-92f9-542dc2483d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:90:a9:4c:5d:da:84:1b:f2:d7:f3:44:d2:01: 6d:82:51:ab:06:6a:ff:30:1f:c6:9b:03:7e:41:7a: b7:8f:5a:b1:c2:c0:df:90:22:13:d6:21:80:96:ae: 45:0e:9b:6e:83:28:19:34:0a:1a:e3:64:c6:d3:d3: 36:f7:fd:60:28:db:b9:c1:4a:19:7e:69:e6:a9:8a: 45:60:9b:4f:86:aa:23:49:11:e4:9c:4e:8f:4c:be: 64:2e:c4:76:76:4b:1a:ee:97:26:2d:6d:b2:7d:69: 32:cf:6a:0e:f8:58:57:26:22:54:11:5d:f3:ad:49: 81:71:54:e6:22:c7:37:08:ba:b3:95:a6:d6:24:e5: 54:45:39:92:06:72:cf:77:0c:89:00:09:b2:d7:ed: 06:43:f4:2b:4b:2c:b3:ac:42:7f:60:7b:7c:8d:3b: c0:0a:1d:48:a6:20:7b:ff:04:0c:be:bc:47:12:67: 17:95:97:cf:da:36:3e:46:7d:a1:21:ea:70:f1:80: 2f:ef:c2:07:07:bc:7d:26:11:5a:ad:90:df:54:bd: 27:a6:39:d8:cd:be:38:25:f2:78:03:27:ce:e4:e2: 05:88:d6:f7:86:46:43:0b:90:21:cc:00:78:c0:8f: ff:e1:c1:64:b0:1f:1c:2c:ec:6f:44:5c:ea:12:5d: a7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:99:70:21:80:1E:7A:D1:B6:D2:48:2B:9A:39:25:C3:4C:CC:6A:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/224ffc7c-fc28-304b-ac10-659b5e3f6aca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:64:6a:9b:04:77:1b:9a:0f:7f:37:be:f9:a2:7b:8d:82:60: 4a:50:f6:27:7d:cb:1b:c0:c6:8f:a7:e3:2d:aa:e3:13:7a:53: f2:c2:5d:08:b8:4d:36:ac:3d:60:47:a1:8a:91:ef:f8:d7:e7: fe:29:11:29:66:c8:b1:2d:8f:03:f5:92:e4:81:43:90:e1:4d: 49:4c:5f:a8:fe:c3:7f:f3:d6:eb:37:f7:94:95:5e:0d:3b:d0: 01:0a:98:10:1d:0b:11:01:77:47:83:a9:a6:7d:fc:a7:56:0f: 8b:8e:5b:13:68:9d:fb:37:b2:8d:32:66:f5:25:52:47:d7:9e: 5e:ed:da:74:d7:14:0b:53:4c:88:06:99:fe:f8:17:d8:35:0c: 0f:23:2d:e5:e1:53:4a:8f:80:70:b0:70:3d:af:32:b4:fa:69: b9:f6:f7:f2:e3:ce:05:f2:e2:b8:7c:93:29:b5:59:06:4f:27: f4:34:55:0e:25:2c:04:f1:8e:72:8e:dd:44:7a:26:9f:81:00: 5d:90:cc:81:7a:c8:3d:32:54:01:99:59:36:5a:81:41:8f:9e: be:88:cc:3e:5e:12:c9:cf:81:f5:a2:f9:88:59:26:84:00:58: 6b:d0:15:82:18:8c:86:41:ee:d5:53:ea:1c:8a:6d:9a:13:bb: cf:2e:0d:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ160pVVswS5oJDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MDdmNmFhYzYtZDAyOC00MWIyLTkyZjktNTQyZGMyNDgzZDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZCpTF3ahBvy1/NE0gFtglGrBmr/MB/GmwN+ QXq3j1qxwsDfkCIT1iGAlq5FDptugygZNAoa42TG09M29/1gKNu5wUoZfmnmqYpF YJtPhqojSRHknE6PTL5kLsR2dksa7pcmLW2yfWkyz2oO+FhXJiJUEV3zrUmBcVTm Isc3CLqzlabWJOVURTmSBnLPdwyJAAmy1+0GQ/QrSyyzrEJ/YHt8jTvACh1IpiB7 /wQMvrxHEmcXlZfP2jY+Rn2hIepw8YAv78IHB7x9JhFarZDfVL0npjnYzb44JfJ4 AyfO5OIFiNb3hkZDC5AhzAB4wI//4cFksB8cLOxvRFzqEl2nlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGZcCGAHnrRttJIK5o5JcNMzGoMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjI0ZmZjN2MtZmMyOC0z MDRiLWFjMTAtNjU5YjVlM2Y2YWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFkapsEdxuaD383vvmie42CYEpQ9id9yxvAxo+n4y2q4xN6U/LCXQi4 TTasPWBHoYqR7/jX5/4pESlmyLEtjwP1kuSBQ5DhTUlMX6j+w3/z1us395SVXg07 0AEKmBAdCxEBd0eDqaZ9/KdWD4uOWxNonfs3so0yZvUlUkfXnl7t2nTXFAtTTIgG mf74F9g1DA8jLeXhU0qPgHCwcD2vMrT6abn29/LjzgXy4rh8kym1WQZPJ/Q0VQ4l LATxjnKO3UR6Jp+BAF2QzIF6yD0yVAGZWTZagUGPnr6IzD5eEsnPgfWi+YhZJoQA WGvQFYIYjIZB7tVT6hyKbZoTu88uDbg= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:46 2025 by rpki-client