$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c3099e8-4776-3332-8209-8899066187f6.roa File: 3c3099e8-4776-3332-8209-8899066187f6.roa (raw, json) Hash identifier: aCWCtpc9bxlSfvxqn7UMzMcjdzmTZ2rggy26HYoeRu0= Subject key identifier: A1:9A:47:42:86:75:BB:E6:51:71:A4:33:79:AB:9D:68:D3:B4:5B:EE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BB44ACAE90E06A83509E44600 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c3099e8-4776-3332-8209-8899066187f6.roa Signing time: Fri 31 Oct 2025 12:23:54 +0000 ROA not before: Fri 31 Oct 2025 12:23:54 +0000 ROA not after: Thu 29 Jan 2026 13:23:54 +0000 asID: 55154 IP address blocks: 172.94.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:4a:ca:e9:0e:06:a8:35:09:e4:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 31 12:23:54 2025 GMT Not After : Jan 29 13:23:54 2026 GMT Subject: CN=289ec519-03ff-4c4f-ad26-6caa8005895b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7c:c2:ba:03:72:f6:45:42:60:f1:c0:00:40: 81:7f:07:d9:a3:37:7a:d5:08:38:d7:31:a7:03:15: d7:bc:21:8d:07:e3:5e:79:64:a6:62:ab:c7:11:10: 02:e6:b5:cd:83:5a:47:89:8f:2b:dd:04:09:52:12: 9d:aa:4b:81:e5:2d:6c:f9:08:1d:ea:04:91:33:72: af:ed:e4:65:e8:50:60:e7:40:2e:f2:6a:de:ee:97: 44:f0:3a:4e:88:b3:5a:b1:e1:28:eb:9c:e1:c3:64: 87:c3:25:a3:46:49:8e:3e:01:ff:ef:5f:7e:08:3c: 7a:c3:2d:fd:bd:bc:26:5c:2c:f6:37:aa:d0:e4:37: c2:54:7d:d0:a7:0b:41:37:78:f5:99:5b:25:b5:4e: 0d:2c:ca:45:05:2d:3b:80:00:ed:c8:3f:7a:56:72: 5d:26:99:a3:2a:bd:6d:9c:34:7e:a6:c0:5c:13:92: 0a:ee:a6:70:65:b0:a2:d0:0e:d1:94:e1:de:32:03: 50:82:84:ad:7d:9e:53:d8:f1:a1:4c:09:1a:5f:86: 00:7d:b6:f6:04:f7:c4:22:76:9f:db:86:07:94:0c: 4a:4c:25:74:f6:16:a6:75:cb:2a:a6:25:18:fb:7c: 44:1a:9e:a7:70:d7:2d:a9:25:ee:ba:6a:4a:98:1a: 70:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9A:47:42:86:75:BB:E6:51:71:A4:33:79:AB:9D:68:D3:B4:5B:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c3099e8-4776-3332-8209-8899066187f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:da:c5:65:3b:29:77:bf:c4:a7:15:4f:90:00:53:e0:3c:1d: 3b:67:bd:1e:45:d9:6e:5e:f0:35:74:c8:49:1c:82:78:a9:8e: 4a:2e:7f:26:ad:09:7c:8a:91:8b:89:9f:45:f4:22:c3:72:75: 75:72:2c:26:4a:0a:34:d5:37:05:e6:98:b6:3b:d7:30:c0:97: a1:7e:11:8a:b9:39:94:42:eb:09:79:59:09:e0:82:5e:7b:8f: 70:08:e1:09:80:76:9e:65:c0:b9:f8:b8:91:69:d4:b6:32:12: 8f:92:82:f0:bc:c7:74:42:ec:b6:7f:18:0a:31:b0:ed:a6:07: 63:11:c3:d6:ca:93:e0:90:1e:de:17:27:4e:85:0f:d1:13:9c: 50:cf:b5:b8:76:14:e2:c8:ff:26:6e:4a:c4:57:3d:68:31:45: 68:a0:74:eb:34:69:17:f1:9f:82:70:21:b2:39:42:ed:9b:91: a8:41:91:d5:c1:f3:27:7a:69:12:0a:ef:8f:4f:39:ab:65:89: db:28:ae:50:62:ad:c2:3a:e2:29:a9:eb:79:ff:a5:05:62:b1: b4:74:e3:51:5f:1e:04:99:7e:01:60:9a:8b:64:d1:af:a1:e9: 2d:d7:a9:11:a4:d5:65:ed:13:93:33:e4:62:39:7b:96:b3:f5: c3:d4:65:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0SsrpDgaoNQnkRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAzMTEyMjM1NFoXDTI2MDEyOTEzMjM1NFowLzEtMCsGA1UEAxMk Mjg5ZWM1MTktMDNmZi00YzRmLWFkMjYtNmNhYTgwMDU4OTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHzCugNy9kVCYPHAAECBfwfZozd61Qg41zGn AxXXvCGNB+NeeWSmYqvHERAC5rXNg1pHiY8r3QQJUhKdqkuB5S1s+Qgd6gSRM3Kv 7eRl6FBg50Au8mre7pdE8DpOiLNaseEo65zhw2SHwyWjRkmOPgH/719+CDx6wy39 vbwmXCz2N6rQ5DfCVH3QpwtBN3j1mVsltU4NLMpFBS07gADtyD96VnJdJpmjKr1t nDR+psBcE5IK7qZwZbCi0A7RlOHeMgNQgoStfZ5T2PGhTAkaX4YAfbb2BPfEInaf 24YHlAxKTCV09hamdcsqpiUY+3xEGp6ncNctqSXuumpKmBpwzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGaR0KGdbvmUXGkM3mrnWjTtFvuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2MzMDk5ZTgtNDc3Ni0z MzMyLTgyMDktODg5OTA2NjE4N2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLaxWU7KXe/xKcVT5AAU+A8HTtnvR5F2W5e8DV0yEkcgnipjkoufyat CXyKkYuJn0X0IsNydXVyLCZKCjTVNwXmmLY71zDAl6F+EYq5OZRC6wl5WQnggl57 j3AI4QmAdp5lwLn4uJFp1LYyEo+SgvC8x3RC7LZ/GAoxsO2mB2MRw9bKk+CQHt4X J06FD9ETnFDPtbh2FOLI/yZuSsRXPWgxRWigdOs0aRfxn4JwIbI5Qu2bkahBkdXB 8yd6aRIK749POatlidsorlBircI64imp63n/pQVisbR041FfHgSZfgFgmotk0a+h 6S3XqRGk1WXtE5Mz5GI5e5az9cPUZQI= -----END CERTIFICATE-----Generated at Wed Nov 5 09:45:43 2025 by rpki-client