$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa File: 28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa (raw, json) Hash identifier: YfN5Ht5uF5EfASscrpbqOWgOIxi0wAq3USoYkcROl6Q= Subject key identifier: BC:8B:14:97:10:0C:AA:B0:FF:C5:72:9E:85:58:A7:46:17:5B:4C:23 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BAA97A5546697797DD9B2FE80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 40676 IP address blocks: 172.94.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a5:54:66:97:79:7d:d9:b2:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=d328b2c6-738e-4343-b9e4-ec853670b7c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:12:48:67:13:79:7e:38:94:b3:ec:95:94:c1: 4a:a7:5a:87:32:84:f4:2f:0f:3e:16:dd:40:8b:70: 00:f2:f8:89:55:31:df:3b:f1:cd:61:84:50:10:52: ff:cf:48:47:77:e3:35:db:91:e8:e1:92:ff:db:c9: dc:5b:21:7a:21:f9:6f:91:fb:64:1d:a5:5f:b1:c6: 1a:88:56:f9:3a:04:f0:92:05:be:39:25:a4:a0:54: bc:fd:4b:55:35:80:26:92:41:94:52:a9:b6:83:7b: 08:75:e7:13:ea:a3:80:bd:23:a8:38:ac:98:7d:d7: f1:71:a1:35:fa:e9:85:56:a6:62:f9:31:30:46:f7: 8c:c3:a8:c3:f4:41:67:60:15:cf:a3:2c:83:79:ce: 93:29:69:b4:9d:51:50:92:14:9f:0b:ce:57:fb:1c: ad:e3:ff:a4:62:05:7f:a1:64:23:fa:aa:df:c9:88: 55:56:b8:4b:9a:06:b1:fc:9a:12:49:f4:61:e6:b4: cf:f3:c1:9b:6c:9b:ff:d8:35:c8:0d:ef:0c:3a:a4: 50:d1:7e:fa:ab:7e:f9:90:58:e9:bf:5a:56:95:68: 6b:83:93:d0:79:6c:3e:17:a4:47:16:16:37:a3:bb: b4:4b:31:5a:56:14:6c:fc:01:94:e2:e5:e2:46:67: c9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8B:14:97:10:0C:AA:B0:FF:C5:72:9E:85:58:A7:46:17:5B:4C:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:22:ab:18:3f:4b:33:66:20:59:24:4d:6e:ca:31:bf:5b:db: ba:22:d7:8d:db:9b:16:91:a5:66:d3:d0:05:ad:a8:19:f2:bc: a1:9c:db:67:44:6b:82:1e:69:3a:b9:37:f5:f8:64:67:e9:0d: 44:d3:32:c7:65:3e:b1:8e:e1:05:fd:a8:30:36:69:1c:4a:35: 13:bc:51:f8:89:b6:eb:50:e5:c7:11:a0:14:97:83:f1:34:de: d2:b6:b8:32:31:8e:86:52:20:5d:1b:0d:ee:93:32:13:87:58: 7f:72:cb:fe:19:45:3b:a9:3f:bb:60:e8:95:6f:6b:c7:94:38: f3:8a:39:ce:2d:ba:0f:c8:fe:a6:04:38:e2:33:a4:17:e4:25: c8:ba:d9:c6:8a:df:7e:53:f1:b8:f3:5f:ab:9b:51:04:50:b2: 33:40:46:34:57:9b:7f:25:ce:16:da:11:a2:52:fd:de:70:e5: e4:2f:42:d4:a1:3a:6c:4f:a7:93:24:fd:c5:87:61:19:29:34: 91:0a:dc:2e:d9:79:9d:ba:96:dc:55:18:65:49:d3:3a:4a:4a: c9:50:db:11:50:58:1a:fb:d7:4d:15:a2:07:95:aa:ec:19:5c: bb:23:72:f9:a2:91:9e:ad:b0:cd:cd:8c:82:62:7a:de:3a:43: 5d:f0:f1:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6VUZpd5fdmy/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ZDMyOGIyYzYtNzM4ZS00MzQzLWI5ZTQtZWM4NTM2NzBiN2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxJIZxN5fjiUs+yVlMFKp1qHMoT0Lw8+Ft1A i3AA8viJVTHfO/HNYYRQEFL/z0hHd+M125Ho4ZL/28ncWyF6IflvkftkHaVfscYa iFb5OgTwkgW+OSWkoFS8/UtVNYAmkkGUUqm2g3sIdecT6qOAvSOoOKyYfdfxcaE1 +umFVqZi+TEwRveMw6jD9EFnYBXPoyyDec6TKWm0nVFQkhSfC85X+xyt4/+kYgV/ oWQj+qrfyYhVVrhLmgax/JoSSfRh5rTP88GbbJv/2DXIDe8MOqRQ0X76q375kFjp v1pWlWhrg5PQeWw+F6RHFhY3o7u0SzFaVhRs/AGU4uXiRmfJ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyLFJcQDKqw/8VynoVYp0YXW0wjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjgyMTVhYmItNGNiMS0z YjUyLWFhYzUtNWEwM2MxYzYzYjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF51MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEiqxg/SzNmIFkkTW7KMb9b27oi143bmxaRpWbT0AWtqBnyvKGc22dE a4IeaTq5N/X4ZGfpDUTTMsdlPrGO4QX9qDA2aRxKNRO8UfiJtutQ5ccRoBSXg/E0 3tK2uDIxjoZSIF0bDe6TMhOHWH9yy/4ZRTupP7tg6JVva8eUOPOKOc4tug/I/qYE OOIzpBfkJci62caK335T8bjzX6ubUQRQsjNARjRXm38lzhbaEaJS/d5w5eQvQtSh OmxPp5Mk/cWHYRkpNJEK3C7ZeZ26ltxVGGVJ0zpKSslQ2xFQWBr7100VogeVquwZ XLsjcvmikZ6tsM3NjIJiet46Q13w8bw= -----END CERTIFICATE-----Generated at Tue Nov 4 22:49:05 2025 by rpki-client