$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/239a9b05-76d0-3db5-93ab-c4719788eb60.roa File: 239a9b05-76d0-3db5-93ab-c4719788eb60.roa (raw, json) Hash identifier: jCSaKfnSRoN5Hobt9WcHeWqOFgjdEXCEe0C+N2YyuHI= Subject key identifier: 8F:7D:86:94:EE:E2:80:C1:81:27:09:24:44:28:CF:B9:D2:D8:13:1B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BB3B844649C2AB3F8E0C63400 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/239a9b05-76d0-3db5-93ab-c4719788eb60.roa Signing time: Fri 31 Oct 2025 07:28:40 +0000 ROA not before: Fri 31 Oct 2025 07:28:40 +0000 ROA not after: Thu 29 Jan 2026 08:28:40 +0000 asID: 55154 IP address blocks: 172.94.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b3:b8:44:64:9c:2a:b3:f8:e0:c6:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 31 07:28:40 2025 GMT Not After : Jan 29 08:28:40 2026 GMT Subject: CN=86a2efe8-bf8b-4446-8700-93a66a1d8b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f9:a3:91:3a:4b:10:77:36:f9:14:ee:a2:d5: bb:6c:f9:9e:12:8f:ea:18:e2:c4:b6:55:04:eb:de: 1f:cb:5c:1d:25:1c:ca:8b:3e:11:40:79:16:cf:92: f7:e9:29:7a:c3:0d:f5:be:cb:74:da:61:25:a9:16: bb:1e:cc:bc:87:2c:7c:07:f6:b1:0d:aa:58:67:72: 97:1b:54:51:ff:0c:05:16:dc:ea:d4:98:f7:3a:43: ee:d1:fa:9c:fc:c1:fd:c5:a5:74:2d:87:52:04:a3: 3a:e2:bc:2e:eb:98:a9:e4:09:3c:4c:38:ba:f6:6f: d5:fa:01:fb:1e:4d:df:e7:00:bf:ba:96:3b:7d:06: 5d:ed:13:b0:e2:3b:42:7c:a8:a5:5a:20:74:a2:42: 43:5a:4e:09:03:85:c9:07:9d:ff:33:e4:3f:c2:c1: 3c:cf:92:5b:a5:e0:2c:fb:cf:d6:56:d2:13:2a:e7: f7:e9:c9:3e:e6:b0:53:34:a4:03:3c:7b:3a:38:96: 4c:16:c1:fd:f7:77:86:02:56:27:04:19:5f:f7:93: 5a:96:4d:1d:b7:27:18:09:8d:b9:5b:88:5e:db:07: 00:0d:86:7e:82:00:55:27:49:49:8f:70:a1:23:53: bd:44:45:b0:03:5d:73:e5:f5:29:b0:62:3f:21:18: df:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7D:86:94:EE:E2:80:C1:81:27:09:24:44:28:CF:B9:D2:D8:13:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/239a9b05-76d0-3db5-93ab-c4719788eb60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c5:da:09:1c:1a:eb:75:b5:63:fd:92:71:ef:da:f6:df:b8: 57:0d:97:ea:50:9e:ed:69:c2:d1:53:27:b7:11:ff:00:c2:34: 54:e3:4b:f1:7b:2c:7b:3e:cc:e9:60:08:83:0c:c0:6d:7a:32: ca:4d:dc:01:03:a7:b6:cb:cd:a6:d2:f4:eb:87:b9:2d:09:a8: 89:b6:10:4e:00:ad:99:ea:af:e3:66:53:9c:c3:b4:eb:8c:51: 51:18:ca:4e:85:f7:20:c4:e4:a3:5f:b6:b5:c1:da:3f:88:2d: e6:a2:9f:04:89:50:f2:3f:c3:f2:e7:85:21:5b:67:e1:3a:63: 8f:f6:e5:9f:8c:9c:ee:27:f4:13:57:d1:e4:b5:4e:a1:a5:09: d6:af:9c:17:a1:85:fc:59:fb:17:dc:ff:93:d2:46:62:83:08: e5:0b:3c:4d:5a:5d:79:9a:e2:d3:58:a1:88:c9:7f:a3:9d:c8: 35:09:a8:50:f6:20:6d:45:01:9c:6b:21:74:24:4f:55:b5:40: f8:33:0d:b8:6b:e8:d7:a4:86:75:c5:b7:78:14:a3:30:38:92: 41:e7:52:26:36:5e:fa:ed:a2:d6:cd:12:39:60:4e:da:2f:aa: 45:40:12:4b:53:a7:1f:39:7e:f8:79:17:e7:8c:d4:a2:f4:be: 81:b4:8f:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuzuERknCqz+ODGNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAzMTA3Mjg0MFoXDTI2MDEyOTA4Mjg0MFowLzEtMCsGA1UEAxMk ODZhMmVmZTgtYmY4Yi00NDQ2LTg3MDAtOTNhNjZhMWQ4YjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivmjkTpLEHc2+RTuotW7bPmeEo/qGOLEtlUE 694fy1wdJRzKiz4RQHkWz5L36Sl6ww31vst02mElqRa7Hsy8hyx8B/axDapYZ3KX G1RR/wwFFtzq1Jj3OkPu0fqc/MH9xaV0LYdSBKM64rwu65ip5Ak8TDi69m/V+gH7 Hk3f5wC/upY7fQZd7ROw4jtCfKilWiB0okJDWk4JA4XJB53/M+Q/wsE8z5JbpeAs +8/WVtITKuf36ck+5rBTNKQDPHs6OJZMFsH993eGAlYnBBlf95Nalk0dtycYCY25 W4he2wcADYZ+ggBVJ0lJj3ChI1O9REWwA11z5fUpsGI/IRjf+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI99hpTu4oDBgScJJEQoz7nS2BMbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjM5YTliMDUtNzZkMC0z ZGI1LTkzYWItYzQ3MTk3ODhlYjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDF2gkcGut1tWP9knHv2vbfuFcNl+pQnu1pwtFTJ7cR/wDCNFTjS/F7 LHs+zOlgCIMMwG16MspN3AEDp7bLzabS9OuHuS0JqIm2EE4ArZnqr+NmU5zDtOuM UVEYyk6F9yDE5KNftrXB2j+ILeainwSJUPI/w/LnhSFbZ+E6Y4/25Z+MnO4n9BNX 0eS1TqGlCdavnBehhfxZ+xfc/5PSRmKDCOULPE1aXXma4tNYoYjJf6OdyDUJqFD2 IG1FAZxrIXQkT1W1QPgzDbhr6NekhnXFt3gUozA4kkHnUiY2XvrtotbNEjlgTtov qkVAEktTpx85fvh5F+eM1KL0voG0jyo= -----END CERTIFICATE-----Generated at Wed Nov 5 06:02:59 2025 by rpki-client