$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/467d56ea-7d41-34f1-84fb-31f2ccd204f6.roa File: 467d56ea-7d41-34f1-84fb-31f2ccd204f6.roa (raw, json) Hash identifier: XZ8vnj7a3/hfv6aDEUBOC2SeXex96C5IIA+tFGWp+pw= Subject key identifier: 22:42:51:E4:52:B0:C5:D4:F0:01:B8:E3:17:C5:86:7D:F4:A9:CC:08 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BB3AEF2FC30B97FD99D330080 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/467d56ea-7d41-34f1-84fb-31f2ccd204f6.roa Signing time: Fri 31 Oct 2025 07:09:54 +0000 ROA not before: Fri 31 Oct 2025 07:09:54 +0000 ROA not after: Thu 29 Jan 2026 08:09:54 +0000 asID: 55154 IP address blocks: 172.94.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b3:ae:f2:fc:30:b9:7f:d9:9d:33:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 31 07:09:54 2025 GMT Not After : Jan 29 08:09:54 2026 GMT Subject: CN=3885d76d-f6ba-46a6-8765-116bcd7a4a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fc:a7:b4:7f:c2:5c:c9:d8:60:ee:c9:1a:66: 32:22:62:8d:57:56:ea:2b:ce:7c:1d:78:0a:b9:e5: 3f:d7:05:3f:57:d8:7c:0d:f9:cf:c1:48:c5:fc:bd: 22:16:49:4f:33:f0:92:96:84:39:71:e6:aa:dc:53: 71:ff:00:5d:cd:13:65:da:bd:7e:ca:c8:79:2a:64: d6:a4:42:5f:6e:7c:5c:13:db:9c:5a:66:d7:c8:d1: b9:26:34:cd:12:98:e6:17:69:da:c6:19:47:f6:75: cb:01:b3:4d:f5:1d:67:d7:64:b3:3e:bb:d7:b2:58: 7f:04:07:fd:60:48:fc:a1:15:d2:12:00:a3:75:e9: 67:49:f4:2e:59:18:ee:95:73:d8:84:f7:2a:1e:75: a5:f1:bb:59:a6:2a:13:20:48:6d:dd:13:91:03:2f: a5:4c:94:66:38:b2:d1:4e:41:b3:2b:51:d5:e7:d1: b3:16:79:a3:f8:af:c3:8e:8d:f0:06:35:b2:d0:10: a8:ad:cb:b1:c9:b5:9e:19:0a:f8:a5:1d:f4:f3:7a: c8:e4:6b:b8:ef:a9:35:03:fc:9b:cd:58:db:06:93: 06:9e:a0:ff:ab:d1:43:15:4c:7d:a9:6b:a3:34:e9: 60:5d:f1:34:ee:87:b5:a8:41:fb:4b:23:2c:ad:d6: fb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:42:51:E4:52:B0:C5:D4:F0:01:B8:E3:17:C5:86:7D:F4:A9:CC:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/467d56ea-7d41-34f1-84fb-31f2ccd204f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:21:c0:f4:3c:21:4b:33:0c:02:af:6b:07:38:13:56:bf:3f: 02:75:80:69:95:44:7d:7a:92:1e:94:99:9f:13:b5:89:a3:90: 02:12:b1:a5:ed:c2:62:b7:b2:39:1a:c2:51:6a:6f:04:e5:01: cf:74:31:9d:ab:dc:07:f0:89:94:03:b7:14:22:a1:d2:e5:19: 4c:de:de:ed:2e:ed:50:0e:96:86:fd:32:77:cb:85:11:e1:79: c3:23:de:eb:14:45:94:74:12:3e:6d:c6:2c:67:ee:19:cb:a2: 3c:e2:e5:e0:f2:42:6d:27:40:3e:20:c1:b7:08:f1:5e:68:e8: 89:81:21:88:6f:5f:fc:24:dc:5e:84:bb:d9:36:bf:9f:02:b6: 27:c3:47:7a:d1:9d:98:0d:c5:40:c1:32:51:ea:75:59:0b:a3: 0b:47:8e:42:58:85:c7:93:38:da:3f:02:dc:07:3f:18:09:ab: 42:ad:c4:77:67:83:34:f2:a6:81:bc:17:2e:c7:9d:35:7f:1c: fc:68:9b:6e:d6:77:18:50:3d:e3:79:1a:f4:28:9f:2e:7f:ad: 95:dc:ab:bc:b2:a7:b0:dc:e9:03:a5:cd:ee:19:5e:db:0e:11: 44:82:9e:f4:5c:7a:51:d5:de:42:c2:05:0d:06:8a:e2:d3:5d: 4c:bb:b0:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuzrvL8MLl/2Z0zAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAzMTA3MDk1NFoXDTI2MDEyOTA4MDk1NFowLzEtMCsGA1UEAxMk Mzg4NWQ3NmQtZjZiYS00NmE2LTg3NjUtMTE2YmNkN2E0YTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfyntH/CXMnYYO7JGmYyImKNV1bqK858HXgK ueU/1wU/V9h8DfnPwUjF/L0iFklPM/CSloQ5ceaq3FNx/wBdzRNl2r1+ysh5KmTW pEJfbnxcE9ucWmbXyNG5JjTNEpjmF2naxhlH9nXLAbNN9R1n12SzPrvXslh/BAf9 YEj8oRXSEgCjdelnSfQuWRjulXPYhPcqHnWl8btZpioTIEht3RORAy+lTJRmOLLR TkGzK1HV59GzFnmj+K/Djo3wBjWy0BCorcuxybWeGQr4pR3083rI5Gu476k1A/yb zVjbBpMGnqD/q9FDFUx9qWujNOlgXfE07oe1qEH7SyMsrdb7vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJCUeRSsMXU8AG44xfFhn30qcwIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDY3ZDU2ZWEtN2Q0MS0z NGYxLTg0ZmItMzFmMmNjZDIwNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEohwPQ8IUszDAKvawc4E1a/PwJ1gGmVRH16kh6UmZ8TtYmjkAISsaXt wmK3sjkawlFqbwTlAc90MZ2r3AfwiZQDtxQiodLlGUze3u0u7VAOlob9MnfLhRHh ecMj3usURZR0Ej5txixn7hnLojzi5eDyQm0nQD4gwbcI8V5o6ImBIYhvX/wk3F6E u9k2v58CtifDR3rRnZgNxUDBMlHqdVkLowtHjkJYhceTONo/AtwHPxgJq0KtxHdn gzTypoG8Fy7HnTV/HPxom27WdxhQPeN5GvQony5/rZXcq7yyp7Dc6QOlze4ZXtsO EUSCnvRcelHV3kLCBQ0GiuLTXUy7sJI= -----END CERTIFICATE-----Generated at Wed Nov 5 06:02:59 2025 by rpki-client