$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa File: 438abf06-355b-3925-b81c-ed0f431c4a35.roa (raw, json) Hash identifier: Bp2w/qPfa9uDTwrl8ZkLayyTQHTm4/pFWarNt+pkDIE= Subject key identifier: A3:12:B2:D1:36:F7:AF:15:FA:92:36:88:3E:99:A8:7F:67:4F:92:D7 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BA9326D0AA8AFC3B63F609B00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 3223 IP address blocks: 172.94.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:6d:0a:a8:af:c3:b6:3f:60:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=4cb9a1f9-e70c-495f-b8ed-316bc4b96235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5d:f1:92:14:b2:ea:fb:d8:83:c9:ff:17:37: 0f:76:8a:30:80:44:69:4b:e9:01:b7:f6:9d:3e:6b: e8:f8:37:d3:9b:08:c2:ca:ef:0b:7f:14:b3:8d:d2: 1d:63:19:df:5b:62:09:2d:63:a7:11:c2:95:da:aa: a3:c4:69:42:47:5a:4e:5c:0e:02:57:b8:10:99:20: a7:a3:dc:32:c2:0c:ba:b2:21:e3:dc:8b:9d:0f:87: a1:11:47:63:bd:38:8f:d1:74:2e:18:3a:20:08:fc: c5:e3:99:9d:b3:64:af:3b:ce:36:b5:f6:66:f6:06: 3e:fc:3d:a9:4f:7a:10:16:ca:08:bd:9a:ad:a9:82: 1f:de:56:3f:80:3c:c1:a9:71:13:70:b2:5c:17:39: f9:0d:a1:ee:e2:78:b4:fe:92:43:0d:68:ec:60:66: 31:f4:ce:02:37:b8:00:c4:61:0d:a0:3a:f3:b4:e4: 6b:43:e5:fe:fc:28:a9:29:83:85:55:06:bd:56:19: ab:fa:b2:3f:bf:ac:6c:05:77:f3:dc:db:41:24:73: bb:d6:21:04:fb:bf:6e:f6:fc:55:c6:9e:d9:74:d8: 27:94:92:14:94:4e:f4:11:9c:50:08:35:f4:46:c2: 33:b7:77:a8:3f:96:eb:b2:d0:0c:de:ac:9e:a9:15: ba:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:12:B2:D1:36:F7:AF:15:FA:92:36:88:3E:99:A8:7F:67:4F:92:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:08:b7:9b:47:74:de:d5:30:54:b4:b9:1f:9b:99:e9:c9:1f: 5d:29:0f:fa:d0:a3:f5:4a:ae:86:1e:67:79:2a:b0:31:2e:24: 4f:4c:49:61:8d:e9:a5:eb:64:eb:45:aa:34:f5:b7:17:0e:e2: a6:6a:45:6f:e3:b1:d2:74:c8:8c:91:3b:19:16:84:93:90:40: d7:67:d1:9e:c4:c2:a3:ab:16:88:3b:50:3e:92:37:da:34:1a: 50:9c:5b:c6:99:ce:0f:4e:15:4c:4c:b7:94:e5:10:be:46:c5: 90:4c:c6:e0:c2:60:b4:6f:56:b5:42:33:af:8c:df:ff:f7:21: 32:fd:07:e5:9b:0e:41:02:4b:6a:77:a0:8c:0e:8f:a9:60:e5: 12:56:eb:b7:18:06:c9:25:da:5e:a7:07:b1:37:77:dc:87:f7: 4d:a8:f6:9e:78:a3:5e:7b:c0:48:84:ce:c5:7e:0c:f0:95:18: e3:46:63:2f:7f:c7:ef:d0:d8:c9:64:c7:28:03:35:80:27:1b: a5:56:78:06:7f:c4:83:79:9c:28:7e:70:7c:62:53:4d:2b:ad: a4:9c:60:0f:f1:96:2b:5b:85:20:8e:7d:2b:fb:74:9e:b9:5a: 21:94:f6:9e:42:af:92:e1:59:d1:e6:da:b6:8c:66:6f:e8:a7: 4a:13:22:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMm0KqK/Dtj9gmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NGNiOWExZjktZTcwYy00OTVmLWI4ZWQtMzE2YmM0Yjk2MjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV3xkhSy6vvYg8n/FzcPdoowgERpS+kBt/ad Pmvo+DfTmwjCyu8LfxSzjdIdYxnfW2IJLWOnEcKV2qqjxGlCR1pOXA4CV7gQmSCn o9wywgy6siHj3IudD4ehEUdjvTiP0XQuGDogCPzF45mds2SvO842tfZm9gY+/D2p T3oQFsoIvZqtqYIf3lY/gDzBqXETcLJcFzn5DaHu4ni0/pJDDWjsYGYx9M4CN7gA xGENoDrztORrQ+X+/CipKYOFVQa9Vhmr+rI/v6xsBXfz3NtBJHO71iEE+79u9vxV xp7ZdNgnlJIUlE70EZxQCDX0RsIzt3eoP5brstAM3qyeqRW6qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMSstE2968V+pI2iD6ZqH9nT5LXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDM4YWJmMDYtMzU1Yi0z OTI1LWI4MWMtZWQwZjQzMWM0YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkIt5tHdN7VMFS0uR+bmenJH10pD/rQo/VKroYeZ3kqsDEuJE9MSWGN 6aXrZOtFqjT1txcO4qZqRW/jsdJ0yIyROxkWhJOQQNdn0Z7EwqOrFog7UD6SN9o0 GlCcW8aZzg9OFUxMt5TlEL5GxZBMxuDCYLRvVrVCM6+M3//3ITL9B+WbDkECS2p3 oIwOj6lg5RJW67cYBskl2l6nB7E3d9yH902o9p54o157wEiEzsV+DPCVGONGYy9/ x+/Q2MlkxygDNYAnG6VWeAZ/xIN5nCh+cHxiU00rraScYA/xlitbhSCOfSv7dJ65 WiGU9p5Cr5LhWdHm2raMZm/op0oTItk= -----END CERTIFICATE-----Generated at Tue Nov 4 23:50:06 2025 by rpki-client