$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53e525d4-39a8-3e09-a5e2-111cbb592081.roa File: 53e525d4-39a8-3e09-a5e2-111cbb592081.roa (raw, json) Hash identifier: zX1mU31orOQVPsjRtg6USt/xf5ot/FAcFqdZVSP6Vn0= Subject key identifier: B8:AF:1D:EB:1E:91:4E:14:3D:80:17:29:1E:62:A5:EE:F0:C5:B8:1C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B6BC75E00369463AADC969280 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53e525d4-39a8-3e09-a5e2-111cbb592081.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 45671 IP address blocks: 172.94.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:5e:00:36:94:63:aa:dc:96:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=41afe432-73ed-4eff-bb8a-a49903e9cdb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:08:0d:70:ff:54:c9:e9:83:9e:f0:5f:fa:8a: 2b:b4:be:0b:6f:76:8b:d2:92:f5:f9:a7:e4:b4:42: 60:bd:aa:9c:7d:f1:c7:b9:d4:fd:e5:b7:27:8a:20: ba:fc:a2:2a:5a:11:06:54:51:fc:cc:de:83:bd:18: b8:11:70:28:33:f3:f3:1f:b3:19:fe:1a:0f:23:7c: bf:f3:3d:c3:8e:bc:2c:a2:cd:c9:be:42:32:11:d0: 12:f6:f7:0d:a9:f5:2d:98:33:69:96:6f:1a:7c:1c: a9:58:b0:32:db:77:ba:ef:ec:5b:d2:e6:db:4e:31: 8c:b7:5a:a5:a5:e1:8b:64:64:a1:ae:f7:42:ab:6e: f6:90:17:83:08:36:7b:ef:33:5e:12:ab:22:9d:4b: 76:89:90:1f:96:d1:42:69:8d:92:40:05:79:af:89: 13:ef:7b:b1:4c:43:60:60:d4:fe:2e:b5:21:d6:79: 09:8e:de:af:84:a1:80:21:0f:5f:01:4d:cf:72:c0: 2f:0e:01:eb:5a:b4:ae:18:fc:19:84:86:84:36:c1: 6e:96:2f:82:11:d0:9b:30:db:1c:4d:5a:15:7f:ec: 6c:ab:71:f8:c8:b1:29:dd:d9:24:72:ad:ae:3d:81: 47:1d:3b:c3:2e:b9:64:4e:d2:88:12:6f:34:63:e1: 99:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AF:1D:EB:1E:91:4E:14:3D:80:17:29:1E:62:A5:EE:F0:C5:B8:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53e525d4-39a8-3e09-a5e2-111cbb592081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:6b:97:03:15:13:64:1e:1f:ed:96:49:19:69:f1:b3:15:9e: 87:9a:5a:03:39:a9:5d:84:ad:1d:9f:b6:69:cb:68:32:d2:60: 84:4c:97:75:4f:49:8b:9e:9a:76:cc:37:91:75:b9:e9:f5:b2: d1:f8:5f:37:9a:55:e0:d4:86:5c:49:5b:62:8d:25:6c:39:1d: ae:ca:c2:ee:fd:88:86:7d:4c:3d:ba:17:04:85:45:24:5c:bd: 96:64:b1:67:24:17:a9:c6:19:66:2a:21:5d:a4:20:66:0a:ad: 1e:46:84:2d:2d:8d:99:c2:d0:be:97:fe:4c:a6:86:0e:65:72: 4e:02:e9:d8:de:34:6b:26:e0:da:61:1a:a9:0a:4b:36:c9:8f: 76:37:92:72:11:22:80:8c:39:4f:90:09:b4:8d:ea:fe:94:e3: 58:26:74:08:14:fa:b5:66:4e:cd:06:5e:48:8a:d6:0d:dc:c9: fb:84:73:49:ea:4f:e7:5a:6f:67:8e:51:e1:30:9c:68:6a:90: 7b:98:8f:ba:33:36:48:22:e2:e3:f9:2c:84:88:af:e2:71:c1: 4b:38:99:bf:75:17:ef:0b:9f:3d:09:f3:66:06:e9:21:23:af: c2:52:64:c9:08:cb:03:98:96:75:df:d9:50:c3:a6:67:f7:17: d2:fb:ef:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx14ANpRjqtyWkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NDFhZmU0MzItNzNlZC00ZWZmLWJiOGEtYTQ5OTAzZTljZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQgNcP9UyemDnvBf+oortL4Lb3aL0pL1+afk tEJgvaqcffHHudT95bcniiC6/KIqWhEGVFH8zN6DvRi4EXAoM/PzH7MZ/hoPI3y/ 8z3Djrwsos3JvkIyEdAS9vcNqfUtmDNplm8afBypWLAy23e67+xb0ubbTjGMt1ql peGLZGShrvdCq272kBeDCDZ77zNeEqsinUt2iZAfltFCaY2SQAV5r4kT73uxTENg YNT+LrUh1nkJjt6vhKGAIQ9fAU3PcsAvDgHrWrSuGPwZhIaENsFuli+CEdCbMNsc TVoVf+xsq3H4yLEp3dkkcq2uPYFHHTvDLrlkTtKIEm80Y+GZ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLivHesekU4UPYAXKR5ipe7wxbgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTNlNTI1ZDQtMzlhOC0z ZTA5LWE1ZTItMTExY2JiNTkyMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBrlwMVE2QeH+2WSRlp8bMVnoeaWgM5qV2ErR2ftmnLaDLSYIRMl3VP SYuemnbMN5F1uen1stH4XzeaVeDUhlxJW2KNJWw5Ha7Kwu79iIZ9TD26FwSFRSRc vZZksWckF6nGGWYqIV2kIGYKrR5GhC0tjZnC0L6X/kymhg5lck4C6djeNGsm4Nph GqkKSzbJj3Y3knIRIoCMOU+QCbSN6v6U41gmdAgU+rVmTs0GXkiK1g3cyfuEc0nq T+dab2eOUeEwnGhqkHuYj7ozNkgi4uP5LISIr+JxwUs4mb91F+8Lnz0J82YG6SEj r8JSZMkIywOYlnXf2VDDpmf3F9L773c= -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:12 2025 by rpki-client