$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ed4f7a6-9337-31a1-8905-289b7eb5dfe3.roa File: 4ed4f7a6-9337-31a1-8905-289b7eb5dfe3.roa (raw, json) Hash identifier: zyFYxt6/66dGjscIk6J817RPzIzWd+hMF8BAzUF5AQc= Subject key identifier: C7:DF:F1:E7:00:77:89:92:3D:8A:0F:78:D5:24:1C:A0:0F:DE:04:C0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BA8BC098D825F14B3B7DA4280 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ed4f7a6-9337-31a1-8905-289b7eb5dfe3.roa Signing time: Mon 27 Oct 2025 09:02:22 +0000 ROA not before: Mon 27 Oct 2025 09:02:22 +0000 ROA not after: Sun 25 Jan 2026 10:02:22 +0000 asID: 208185 IP address blocks: 172.94.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a8:bc:09:8d:82:5f:14:b3:b7:da:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 27 09:02:22 2025 GMT Not After : Jan 25 10:02:22 2026 GMT Subject: CN=f7128c0f-09e1-4c8a-8426-5055ee6892e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c4:16:80:2a:ee:b3:17:16:bb:50:6a:64:94: b4:4c:87:a1:c4:d6:1b:04:20:2f:73:97:27:b2:82: c6:4a:22:97:e8:64:fa:94:c8:c7:b6:4e:fc:c5:58: d4:c0:a1:6a:56:db:97:2d:d3:de:60:f4:6b:2d:a9: 40:04:6f:ad:8b:02:a3:b9:08:99:dc:e9:8b:82:59: 50:bb:67:fb:73:f1:bd:04:d4:b3:23:45:93:b5:f2: 8c:cd:7b:c4:45:24:f9:03:fe:a3:19:7f:79:b4:4e: 00:16:35:05:86:c3:11:a7:6f:2e:aa:e6:83:09:20: c7:fa:1b:ba:61:2d:06:2e:a2:21:45:f4:99:04:82: a4:15:d4:0c:a3:b3:10:53:0f:f3:d2:04:90:2a:20: 9d:12:44:59:70:5c:36:f4:94:96:46:51:01:de:41: 9d:dc:de:0f:fa:c0:46:8b:42:a3:f5:c9:c4:c6:dc: 67:2a:df:06:7d:4a:86:04:55:ba:58:16:e6:63:68: d5:07:1b:92:c4:14:de:45:3d:d2:fb:c3:bd:c4:77: 16:dc:dc:85:a9:eb:d4:68:0d:d0:63:07:01:23:3d: 57:19:1b:34:12:79:a3:13:06:0e:c7:39:63:de:85: 94:ad:5a:a9:d6:b6:37:1d:1e:4b:96:ba:ce:e1:a4: 76:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DF:F1:E7:00:77:89:92:3D:8A:0F:78:D5:24:1C:A0:0F:DE:04:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4ed4f7a6-9337-31a1-8905-289b7eb5dfe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:59:ea:36:26:1c:d0:f1:e8:2b:92:30:80:9b:83:57:d0:9e: bb:d7:99:77:d4:c6:73:44:9f:15:e0:83:87:a0:66:c8:83:2b: 4b:b1:6a:2e:a3:0c:60:55:e3:65:d8:37:08:87:7f:e1:4f:3e: ec:86:f2:aa:ed:0e:36:f7:1e:51:fd:27:a1:7e:1f:31:7c:e1: 63:3b:db:88:42:01:4a:ee:f2:66:a8:cd:21:fd:c8:c6:8a:df: 2f:f0:1b:ff:ec:03:8f:54:66:79:7e:72:4a:36:4f:9b:21:0f: 1e:82:f6:7b:73:fe:5b:35:bd:f0:cf:10:c0:95:95:b2:7b:ae: 3d:f7:5d:ec:5a:e3:22:50:32:cf:a3:6b:04:7b:7c:c3:ee:70: ee:f7:33:94:b9:ad:b6:e0:b6:e2:5f:49:23:3d:0d:65:91:89: 57:16:93:a3:99:63:db:bc:17:45:d0:31:f0:11:2a:d4:38:ec: 34:6e:6b:51:b9:54:d2:4a:d7:40:66:e0:64:3a:9c:71:e9:66: 3a:44:ad:ed:73:55:a3:0d:90:2a:51:99:57:76:a7:09:cd:e0: f8:a2:4c:43:01:07:70:2b:56:0d:00:ea:43:1e:2e:3a:e2:47: 6a:9f:d1:c8:17:d7:c0:b7:f7:db:42:fd:5c:33:5c:a3:73:94: ae:9c:75:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuovAmNgl8Us7faQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyNzA5MDIyMloXDTI2MDEyNTEwMDIyMlowLzEtMCsGA1UEAxMk ZjcxMjhjMGYtMDllMS00YzhhLTg0MjYtNTA1NWVlNjg5MmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8QWgCrusxcWu1BqZJS0TIehxNYbBCAvc5cn soLGSiKX6GT6lMjHtk78xVjUwKFqVtuXLdPeYPRrLalABG+tiwKjuQiZ3OmLgllQ u2f7c/G9BNSzI0WTtfKMzXvERST5A/6jGX95tE4AFjUFhsMRp28uquaDCSDH+hu6 YS0GLqIhRfSZBIKkFdQMo7MQUw/z0gSQKiCdEkRZcFw29JSWRlEB3kGd3N4P+sBG i0Kj9cnExtxnKt8GfUqGBFW6WBbmY2jVBxuSxBTeRT3S+8O9xHcW3NyFqevUaA3Q YwcBIz1XGRs0EnmjEwYOxzlj3oWUrVqp1rY3HR5LlrrO4aR2hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMff8ecAd4mSPYoPeNUkHKAP3gTAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGVkNGY3YTYtOTMzNy0z MWExLTg5MDUtMjg5YjdlYjVkZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBZ6jYmHNDx6CuSMICbg1fQnrvXmXfUxnNEnxXgg4egZsiDK0uxai6j DGBV42XYNwiHf+FPPuyG8qrtDjb3HlH9J6F+HzF84WM724hCAUru8maozSH9yMaK 3y/wG//sA49UZnl+cko2T5shDx6C9ntz/ls1vfDPEMCVlbJ7rj33Xexa4yJQMs+j awR7fMPucO73M5S5rbbgtuJfSSM9DWWRiVcWk6OZY9u8F0XQMfARKtQ47DRua1G5 VNJK10Bm4GQ6nHHpZjpEre1zVaMNkCpRmVd2pwnN4PiiTEMBB3ArVg0A6kMeLjri R2qf0cgX18C399tC/VwzXKNzlK6cdSQ= -----END CERTIFICATE-----Generated at Wed Nov 5 03:22:11 2025 by rpki-client