$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa File: 3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa (raw, json) Hash identifier: X5K7+Z9CzG+/15CvEfV0H1AvLKC7aSnm/KWCQOPXFe4= Subject key identifier: 03:63:F0:0F:39:27:17:C9:84:E8:6F:80:DD:77:15:07:3D:1B:90:99 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BA0D2601933D34B5663368A80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 9009 IP address blocks: 172.94.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:60:19:33:d3:4b:56:63:36:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=54c2fd9a-8e24-4387-9c7a-3e3ccd5479c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5d:ad:65:4e:ab:eb:bc:6f:1b:34:2a:86:8c: f5:e4:46:06:f2:d2:93:1f:9d:8e:bd:d1:2d:4d:fa: cc:8b:7a:30:97:38:6f:16:83:0c:f3:fc:f5:57:99: 02:1d:b2:94:c4:83:0b:85:74:2c:da:3b:e3:e5:54: 0e:d8:87:79:44:79:65:a2:9f:2a:4c:f3:2e:4b:fb: 88:26:ce:8c:4d:7e:c6:e0:e5:74:3d:ef:c1:3c:9c: e8:09:01:ca:76:5b:cf:a0:e4:7f:d5:ef:a9:4d:dc: 27:8e:e0:24:77:90:a4:97:46:08:43:55:ea:eb:63: 33:83:1f:86:78:44:1c:e0:a4:c2:d3:de:79:a7:20: 6e:e9:61:ca:6d:3e:2c:ab:82:e9:97:32:45:b1:c3: f6:18:a5:6a:4b:b7:48:31:3f:b5:c0:f5:c9:38:7c: 9c:d9:fb:cc:8b:c2:d7:dd:f3:fc:19:8f:56:28:ba: 38:71:91:82:93:cd:2d:14:77:db:de:51:60:47:33: aa:a3:a2:08:ca:c7:ae:d0:54:f9:d6:41:81:2b:ab: 33:e4:1e:0a:25:57:b4:30:9a:b9:3a:ce:af:d1:2d: 3d:48:d1:92:fc:e5:b0:05:74:b2:37:f9:64:64:9a: 5e:1f:be:c4:eb:77:a3:a0:05:c7:fb:06:9b:d4:0b: 2c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:63:F0:0F:39:27:17:C9:84:E8:6F:80:DD:77:15:07:3D:1B:90:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:89:fa:c8:45:ec:18:70:00:d2:31:2a:69:6d:47:74:d3:c4: 70:35:0a:c7:bd:4e:0e:95:32:06:0f:82:1c:d1:cf:c5:71:87: 25:1c:30:d5:b3:42:24:64:a2:d7:7b:61:29:e3:69:67:47:30: f7:9a:13:39:53:cb:e3:cd:c3:2b:de:7d:29:58:8d:fe:fd:71: b4:1c:59:83:ee:32:60:43:4a:4a:8e:91:63:f3:c0:2f:a7:b6: d2:99:7c:9e:da:29:d7:be:9b:ef:c2:0c:77:6a:8e:c8:8e:fc: a5:0b:04:8f:46:6a:b8:28:9c:d7:1a:54:1b:44:e4:ff:30:d8: 09:9f:43:ef:9b:21:00:f7:c5:69:53:a2:58:28:42:ac:44:9d: c1:7b:0b:14:b6:e6:02:94:ad:24:e1:c1:65:e5:a1:a4:4d:53: 91:cb:b6:68:17:16:fe:08:a4:cc:37:7f:7d:b2:bd:a9:fd:35: 9a:75:13:e7:75:dc:d2:c5:70:5a:65:c9:f9:2f:26:f9:0e:ab: 73:c2:dc:b0:0f:a1:de:b5:1c:c3:6f:e1:76:6d:46:1f:39:23: 33:e9:72:62:06:0d:f3:2f:95:59:79:11:8f:89:79:fd:f7:70: 33:c5:62:9b:38:cb:6f:fb:b5:6e:08:97:87:8b:ae:3b:93:e6: 9d:f1:40:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mAZM9NLVmM2ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NTRjMmZkOWEtOGUyNC00Mzg3LTljN2EtM2UzY2NkNTQ3OWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF2tZU6r67xvGzQqhoz15EYG8tKTH52OvdEt TfrMi3owlzhvFoMM8/z1V5kCHbKUxIMLhXQs2jvj5VQO2Id5RHllop8qTPMuS/uI Js6MTX7G4OV0Pe/BPJzoCQHKdlvPoOR/1e+pTdwnjuAkd5Ckl0YIQ1Xq62Mzgx+G eEQc4KTC0955pyBu6WHKbT4sq4LplzJFscP2GKVqS7dIMT+1wPXJOHyc2fvMi8LX 3fP8GY9WKLo4cZGCk80tFHfb3lFgRzOqo6IIyseu0FT51kGBK6sz5B4KJVe0MJq5 Os6v0S09SNGS/OWwBXSyN/lkZJpeH77E63ejoAXH+wab1Ass6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANj8A85JxfJhOhvgN13FQc9G5CZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2FlYTJkYTAtNWUwZC0z ZGM4LTgyMTAtODBhYTllNjY5MzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKJ+shF7BhwANIxKmltR3TTxHA1Cse9Tg6VMgYPghzRz8VxhyUcMNWz QiRkotd7YSnjaWdHMPeaEzlTy+PNwyvefSlYjf79cbQcWYPuMmBDSkqOkWPzwC+n ttKZfJ7aKde+m+/CDHdqjsiO/KULBI9GargonNcaVBtE5P8w2AmfQ++bIQD3xWlT olgoQqxEncF7CxS25gKUrSThwWXloaRNU5HLtmgXFv4IpMw3f32yvan9NZp1E+d1 3NLFcFplyfkvJvkOq3PC3LAPod61HMNv4XZtRh85IzPpcmIGDfMvlVl5EY+Jef33 cDPFYps4y2/7tW4Il4eLrjuT5p3xQDw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:49:41 2025 by rpki-client