$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7e34fffc-95f7-3415-bbe9-9ad3e94da65f.roa File: 7e34fffc-95f7-3415-bbe9-9ad3e94da65f.roa (raw, json) Hash identifier: o2lKBMdeyl8LQ7cQZU4tH8H1Eq9CGuVprqDf/wx9Vqo= Subject key identifier: 9D:96:40:9C:B2:4A:00:36:9C:01:38:81:77:A2:00:08:56:49:3C:AE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BB67E302EB074E8D083F08780 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7e34fffc-95f7-3415-bbe9-9ad3e94da65f.roa Signing time: Sat 01 Nov 2025 07:19:04 +0000 ROA not before: Sat 01 Nov 2025 07:19:04 +0000 ROA not after: Fri 30 Jan 2026 08:19:04 +0000 asID: 205220 IP address blocks: 172.94.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b6:7e:30:2e:b0:74:e8:d0:83:f0:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 1 07:19:04 2025 GMT Not After : Jan 30 08:19:04 2026 GMT Subject: CN=c560ea24-4af9-4a9e-81ac-a2754c460427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c4:cf:ed:b3:3c:c3:14:0a:8a:2f:d8:f4:e7: 3a:40:51:03:bb:d9:a4:89:67:4c:f4:8f:e4:79:bb: 8a:89:d0:1b:e2:49:92:4d:45:18:9f:78:16:13:1c: 83:cd:6f:8f:21:bf:b0:2b:e4:81:e1:e7:cb:54:48: 28:c6:1a:46:b0:39:14:4e:11:ef:ee:15:96:a1:dd: 6b:51:a9:30:a6:76:ac:ba:f3:a7:f3:95:de:23:5a: 1f:2e:bb:4c:d2:18:d4:21:39:9d:fd:79:97:f9:a2: 09:57:51:69:42:43:c6:da:3c:f1:6f:15:6f:d8:f3: 68:34:c1:d3:c9:0b:f9:7e:9b:44:3a:33:5b:c3:11: d7:a4:f8:2a:26:99:65:13:d6:94:a6:d9:f7:17:15: 8a:5c:e8:e8:0e:a7:b5:da:36:89:28:62:3d:f3:c3: 78:b6:cb:59:52:ca:c3:78:fa:f6:be:e2:56:50:e1: 1a:e4:21:e9:38:86:d9:e4:76:6f:68:e9:88:97:20: 76:4a:b0:5d:d5:68:ba:13:24:de:b6:08:77:7c:28: b5:9b:6f:43:a3:d0:ac:be:ab:5b:22:e1:0c:1e:4a: 26:35:a4:27:b1:7c:15:f8:9e:51:a5:b8:e7:1f:0c: 80:f2:14:f1:43:db:90:45:cc:bc:5d:78:12:04:b2: fd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:96:40:9C:B2:4A:00:36:9C:01:38:81:77:A2:00:08:56:49:3C:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7e34fffc-95f7-3415-bbe9-9ad3e94da65f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:de:ec:aa:be:fc:58:70:fa:d1:fe:ca:1b:66:14:4e:dc:cf: 1f:b1:b4:44:83:81:f0:c1:c5:c0:e6:a3:e7:2f:93:27:c8:e6: 11:82:c0:82:00:32:cf:57:4d:85:f0:2a:1c:e8:04:59:3c:3b: 73:6f:3d:3f:dd:e3:48:cc:cc:d5:6a:62:4e:91:01:27:aa:19: 0b:8e:cb:38:8c:3a:ed:62:92:95:78:9e:b2:6e:90:b4:ed:af: 5e:7d:8b:17:d4:ae:99:da:3b:1a:75:cd:d7:04:50:fa:23:a8: cd:4a:9d:45:c3:11:30:e1:ec:68:52:a0:e7:fd:df:20:6e:01: fe:27:a9:18:ee:35:c0:d9:b4:4e:93:f7:68:d8:f2:6e:9c:d4: 74:66:48:8c:ea:52:64:ee:8f:4c:0b:7a:dc:e1:91:54:23:74: fb:45:c3:a3:07:24:00:e3:78:70:5a:a8:47:a1:6b:2c:26:4b: c6:2a:26:e5:b6:11:cb:f2:55:92:c2:93:99:82:f1:ad:6d:b1: f4:17:56:8c:0d:b2:52:e4:dd:6e:e4:40:53:8a:69:02:aa:65: 9f:fe:99:e6:2c:15:92:5a:c2:4d:b4:d5:b8:7a:be:40:f3:84: 8e:7d:ac:0a:33:34:66:50:7f:32:6a:85:c5:b9:f0:d3:45:5c: f7:5a:99:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu2fjAusHTo0IPwh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTEwMTA3MTkwNFoXDTI2MDEzMDA4MTkwNFowLzEtMCsGA1UEAxMk YzU2MGVhMjQtNGFmOS00YTllLTgxYWMtYTI3NTRjNDYwNDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcTP7bM8wxQKii/Y9Oc6QFEDu9mkiWdM9I/k ebuKidAb4kmSTUUYn3gWExyDzW+PIb+wK+SB4efLVEgoxhpGsDkUThHv7hWWod1r UakwpnasuvOn85XeI1ofLrtM0hjUITmd/XmX+aIJV1FpQkPG2jzxbxVv2PNoNMHT yQv5fptEOjNbwxHXpPgqJpllE9aUptn3FxWKXOjoDqe12jaJKGI988N4tstZUsrD ePr2vuJWUOEa5CHpOIbZ5HZvaOmIlyB2SrBd1Wi6EyTetgh3fCi1m29Do9Csvqtb IuEMHkomNaQnsXwV+J5RpbjnHwyA8hTxQ9uQRcy8XXgSBLL9DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2WQJyySgA2nAE4gXeiAAhWSTyuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvN2UzNGZmZmMtOTVmNy0z NDE1LWJiZTktOWFkM2U5NGRhNjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPe7Kq+/Fhw+tH+yhtmFE7czx+xtESDgfDBxcDmo+cvkyfI5hGCwIIA Ms9XTYXwKhzoBFk8O3NvPT/d40jMzNVqYk6RASeqGQuOyziMOu1ikpV4nrJukLTt r159ixfUrpnaOxp1zdcEUPojqM1KnUXDETDh7GhSoOf93yBuAf4nqRjuNcDZtE6T 92jY8m6c1HRmSIzqUmTuj0wLetzhkVQjdPtFw6MHJADjeHBaqEehaywmS8YqJuW2 EcvyVZLCk5mC8a1tsfQXVowNslLk3W7kQFOKaQKqZZ/+meYsFZJawk201bh6vkDz hI59rAozNGZQfzJqhcW58NNFXPdamaU= -----END CERTIFICATE-----Generated at Wed Nov 5 09:43:39 2025 by rpki-client