$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/739f0ac6-9dd4-32b9-b4a7-f375ea71a75a.roa File: 739f0ac6-9dd4-32b9-b4a7-f375ea71a75a.roa (raw, json) Hash identifier: LhgssUtnTJ2VEATcMFqOqy60Q8S/i4ESoTUOpNmDgPo= Subject key identifier: BE:54:BB:61:C9:6E:AE:03:FC:0A:C1:A1:9A:D2:54:6E:45:9A:E3:CE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B047C0ACAC7669EE1C4190700 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/739f0ac6-9dd4-32b9-b4a7-f375ea71a75a.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 137409 IP address blocks: 172.94.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:0a:ca:c7:66:9e:e1:c4:19:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=bbd4e9e6-a7b8-4252-84c2-927369e92b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3c:de:e9:a2:13:05:11:32:03:6a:b0:3c:3d: fa:61:79:86:de:af:a0:d5:47:95:c1:a7:07:50:f5: 7d:d5:0a:6d:03:95:8d:2c:db:4d:ac:bf:6b:89:37: b5:e4:81:ac:36:bf:c7:aa:40:e9:1c:c5:2f:8d:4c: 99:d3:d3:95:c4:2d:d1:78:3e:74:9c:a6:bf:45:48: 65:56:a3:c5:bd:df:90:a2:46:da:0f:17:df:0d:dd: e4:08:27:7f:ad:a6:83:0f:74:19:3a:55:83:ae:e2: f4:00:bd:88:2f:31:83:c0:6f:fe:0c:da:e8:fc:4f: b1:55:4d:d8:ca:2e:0d:7d:37:79:a2:e5:b3:2a:9d: e8:6f:6f:22:2c:d6:d2:f9:1b:9a:5e:0a:98:7f:68: e9:c9:bb:c8:47:3d:c9:43:59:ed:50:0c:ba:99:f8: c2:33:3d:80:45:da:56:b5:01:c5:35:e4:44:6e:ff: e5:e1:ec:ed:38:b4:ae:14:27:6f:6b:69:41:4a:cf: 85:50:ba:db:2d:c2:77:7e:e4:11:0f:41:41:57:42: b9:f9:a8:8e:53:be:b7:8d:68:18:d3:ae:db:62:05: a3:62:93:e6:b9:3f:95:3c:22:87:94:72:35:41:14: 5e:fc:d9:3c:71:9b:6b:13:27:37:98:9b:4d:87:f9: 26:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:54:BB:61:C9:6E:AE:03:FC:0A:C1:A1:9A:D2:54:6E:45:9A:E3:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/739f0ac6-9dd4-32b9-b4a7-f375ea71a75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:9a:d5:f0:b2:c0:46:8b:ee:0b:dd:73:83:c7:55:63:aa:ad: a1:75:ad:10:0e:11:10:be:9c:02:74:80:a2:b5:c3:e0:0c:05: b1:d4:8e:2d:b5:80:76:93:f9:85:b8:11:48:55:4c:87:3b:ec: 62:0a:3d:dd:0d:f3:68:e1:dd:63:be:e0:63:f8:1b:c4:0d:34: b2:2e:68:01:99:f1:8d:6e:c0:e4:ce:82:87:ba:59:99:ce:d0: ea:8f:53:5c:2b:ca:b5:10:68:0f:52:9c:0c:ce:d3:0e:c1:b4: d9:08:72:30:5b:60:8b:81:4d:43:d2:e3:ab:76:e5:0a:ea:65: 6d:97:a6:30:b9:ef:0a:b9:d5:2d:ed:27:93:48:9f:a6:db:47: 9f:ab:53:78:01:c9:7e:f1:91:82:b0:12:95:35:82:bf:f7:8e: 3d:7f:82:8c:c2:39:73:bc:41:45:c3:b8:d5:b2:38:ea:60:50: e4:c5:c3:09:07:87:14:4d:94:64:5e:4e:ff:5f:5a:4d:f5:43: d1:5e:6d:9b:c6:1a:be:d6:30:b7:f1:06:d1:b1:60:1e:48:f5: 30:e6:3d:36:7a:bd:a5:12:c0:ba:41:df:5a:92:6f:65:65:a6: 81:f0:82:1e:7a:63:11:be:63:74:9a:0c:33:83:63:bc:d1:dd: 4e:49:e7:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfArKx2ae4cQZBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk YmJkNGU5ZTYtYTdiOC00MjUyLTg0YzItOTI3MzY5ZTkyYjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDze6aITBREyA2qwPD36YXmG3q+g1UeVwacH UPV91QptA5WNLNtNrL9riTe15IGsNr/HqkDpHMUvjUyZ09OVxC3ReD50nKa/RUhl VqPFvd+QokbaDxffDd3kCCd/raaDD3QZOlWDruL0AL2ILzGDwG/+DNro/E+xVU3Y yi4NfTd5ouWzKp3ob28iLNbS+RuaXgqYf2jpybvIRz3JQ1ntUAy6mfjCMz2ARdpW tQHFNeREbv/l4eztOLSuFCdva2lBSs+FULrbLcJ3fuQRD0FBV0K5+aiOU763jWgY 067bYgWjYpPmuT+VPCKHlHI1QRRe/Nk8cZtrEyc3mJtNh/kmgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5Uu2HJbq4D/ArBoZrSVG5FmuPOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzM5ZjBhYzYtOWRkNC0z MmI5LWI0YTctZjM3NWVhNzFhNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWa1fCywEaL7gvdc4PHVWOqraF1rRAOERC+nAJ0gKK1w+AMBbHUji21 gHaT+YW4EUhVTIc77GIKPd0N82jh3WO+4GP4G8QNNLIuaAGZ8Y1uwOTOgoe6WZnO 0OqPU1wryrUQaA9SnAzO0w7BtNkIcjBbYIuBTUPS46t25QrqZW2XpjC57wq51S3t J5NIn6bbR5+rU3gByX7xkYKwEpU1gr/3jj1/gozCOXO8QUXDuNWyOOpgUOTFwwkH hxRNlGReTv9fWk31Q9FebZvGGr7WMLfxBtGxYB5I9TDmPTZ6vaUSwLpB31qSb2Vl poHwgh56YxG+Y3SaDDODY7zR3U5J54s= -----END CERTIFICATE-----Generated at Wed Nov 5 00:34:08 2025 by rpki-client