$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa File: 728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa (raw, json) Hash identifier: 1WspsKLLw9p6QNxx6rgoMRphELD+Wz2TRtmlo+PA0X0= Subject key identifier: 1E:35:99:5B:69:8C:EF:49:61:35:39:6D:BA:83:49:0D:76:33:FF:DC Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B95A7A0F7435EF3326BE448C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 9009 IP address blocks: 172.94.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:a0:f7:43:5e:f3:32:6b:e4:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=a37f9d0a-9660-46fc-9aee-e6f45f8b8ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d9:56:02:64:2c:d8:8f:e5:83:62:aa:41:1c: da:31:e3:e7:de:ff:a7:79:38:f8:da:64:cf:98:ab: dd:c9:78:f4:5a:ba:86:05:a1:33:b2:39:01:67:97: 41:56:f2:5b:96:07:3e:79:1d:c5:d2:7f:19:d4:08: ad:a8:3d:38:d3:16:5d:ef:a9:9b:8e:bd:1a:a4:fe: ba:cc:0b:6d:ba:02:31:d1:8e:b6:55:da:24:70:3f: 75:71:b4:98:11:5c:c5:0f:78:db:43:0a:71:f1:0f: e7:7d:8e:57:4a:0a:37:66:ab:8d:c0:23:1f:c1:fd: 19:41:15:93:9b:7c:62:43:9c:68:e6:42:4d:a3:0a: 4c:db:93:8e:8b:36:7e:44:9d:e6:fd:a8:2c:38:2b: 73:5f:a9:d6:47:c3:b4:9d:b3:f6:fe:dd:6a:91:d2: 49:84:be:c9:80:da:3b:0f:a4:55:5b:ae:07:d3:4a: 80:e2:7b:16:8e:40:36:6e:00:f8:f7:d5:49:88:f6: eb:48:5c:a1:04:a0:ec:11:d8:c1:28:53:d1:f4:d0: f1:68:30:a3:54:1b:68:7e:48:32:ec:42:ba:f2:be: 4c:44:a8:cc:8d:05:4f:d0:3a:34:03:82:f1:66:19: 72:7b:32:a8:02:36:43:63:c9:7d:68:85:53:f6:db: ca:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:35:99:5B:69:8C:EF:49:61:35:39:6D:BA:83:49:0D:76:33:FF:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:6a:d3:45:40:6b:f8:8a:6e:2c:19:34:cc:fc:cd:fe:79:dd: 5f:db:86:57:f2:21:93:62:85:35:b6:b2:bd:40:96:9c:9b:e5: fc:99:2e:19:88:5e:ce:94:7a:b6:83:3f:7f:36:ac:86:0e:be: 82:d6:e0:55:c0:1b:f2:53:16:aa:75:0c:4a:19:53:a1:46:c5: 86:57:7f:fd:6c:8e:ef:07:a3:59:20:97:c1:09:26:53:eb:4d: 8a:f1:b2:4b:1c:9e:50:cc:c3:38:fd:a5:9b:de:10:33:2d:9e: 21:a2:ca:88:71:b5:aa:f6:f2:2d:5b:01:56:39:42:11:b9:06: e6:75:ee:90:2c:d4:98:d9:2c:7d:dc:af:e3:e7:b5:70:ce:06: 72:a1:3d:16:15:85:c7:4b:d7:69:27:8a:43:bb:b5:cc:5e:fe: ff:c1:e4:41:74:4e:c9:86:b1:74:e6:e6:5d:81:3f:a8:89:ec: 0a:90:0f:7f:3e:01:70:0c:dc:73:eb:4b:95:b9:f4:50:08:bf: f7:51:76:11:de:82:74:37:32:ef:c1:48:a0:d6:ca:f7:88:77: 8a:96:80:36:31:4a:25:dc:b9:3b:f4:73:40:ef:fa:83:b8:64: b0:7e:4f:dd:34:c7:39:16:8b:72:4a:01:4f:3c:db:00:16:66: 73:39:2f:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp6D3Q17zMmvkSMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YTM3ZjlkMGEtOTY2MC00NmZjLTlhZWUtZTZmNDVmOGI4ZmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdlWAmQs2I/lg2KqQRzaMePn3v+neTj42mTP mKvdyXj0WrqGBaEzsjkBZ5dBVvJblgc+eR3F0n8Z1AitqD040xZd76mbjr0apP66 zAttugIx0Y62VdokcD91cbSYEVzFD3jbQwpx8Q/nfY5XSgo3ZquNwCMfwf0ZQRWT m3xiQ5xo5kJNowpM25OOizZ+RJ3m/agsOCtzX6nWR8O0nbP2/t1qkdJJhL7JgNo7 D6RVW64H00qA4nsWjkA2bgD499VJiPbrSFyhBKDsEdjBKFPR9NDxaDCjVBtofkgy 7EK68r5MRKjMjQVP0Do0A4LxZhlyezKoAjZDY8l9aIVT9tvKKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB41mVtpjO9JYTU5bbqDSQ12M//cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzI4YTZkZGMtNmRmMy0z MWJiLWI5YWEtNTNkYzkzYTU3NjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpq00VAa/iKbiwZNMz8zf553V/bhlfyIZNihTW2sr1Alpyb5fyZLhmI Xs6UeraDP382rIYOvoLW4FXAG/JTFqp1DEoZU6FGxYZXf/1sju8Ho1kgl8EJJlPr TYrxskscnlDMwzj9pZveEDMtniGiyohxtar28i1bAVY5QhG5BuZ17pAs1JjZLH3c r+PntXDOBnKhPRYVhcdL12knikO7tcxe/v/B5EF0TsmGsXTm5l2BP6iJ7AqQD38+ AXAM3HPrS5W59FAIv/dRdhHegnQ3Mu/BSKDWyveId4qWgDYxSiXcuTv0c0Dv+oO4 ZLB+T900xzkWi3JKAU882wAWZnM5L9I= -----END CERTIFICATE-----Generated at Wed Nov 5 05:44:39 2025 by rpki-client