$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8fc129be-d6c2-30e2-a10b-763f106381f7.roa File: 8fc129be-d6c2-30e2-a10b-763f106381f7.roa (raw, json) Hash identifier: VGcYgo+L2nUp57Gs/3ECMysdRBSXFJt9PdZbrvqv1B0= Subject key identifier: 5E:A6:EF:7B:B3:0F:96:89:2A:FB:21:66:59:00:95:CB:59:CB:57:A2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BB3B7BE4F44322C8F4319C2B8 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8fc129be-d6c2-30e2-a10b-763f106381f7.roa Signing time: Fri 31 Oct 2025 07:27:37 +0000 ROA not before: Fri 31 Oct 2025 07:27:37 +0000 ROA not after: Thu 29 Jan 2026 08:27:37 +0000 asID: 55154 IP address blocks: 172.94.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b3:b7:be:4f:44:32:2c:8f:43:19:c2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 31 07:27:37 2025 GMT Not After : Jan 29 08:27:37 2026 GMT Subject: CN=38c422f6-9f11-4f44-b7a5-6990b1f3e19a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d1:a2:24:37:b3:f5:89:90:55:76:00:0b:a6: ed:93:8c:50:72:e2:71:47:e0:eb:a8:df:e7:db:87: 31:bf:71:16:77:ad:e2:4c:e6:d9:87:e9:51:3f:c4: 30:6b:b1:a9:51:6c:d5:b8:d1:7f:c3:43:8a:ae:55: b5:ae:52:2c:f5:9e:c3:b9:ec:0e:57:75:68:90:25: 6f:51:04:14:09:2d:87:bd:57:f2:47:9c:9e:78:8a: 28:a4:ad:e3:1b:06:11:95:18:0e:7d:c0:7e:ce:df: 69:30:61:f4:cb:ed:36:ef:1c:e2:c9:f3:ea:15:e1: 15:01:26:9b:41:e6:e4:f5:ac:25:5d:ab:7b:62:99: 8b:e8:31:d2:00:fb:eb:cf:7d:99:41:48:1c:99:99: 99:f3:71:92:b4:b0:7b:4e:5b:0e:49:d9:77:c6:e0: bf:d8:0a:e6:91:d7:5c:0d:4a:23:dd:09:ef:3b:5a: c9:6d:5f:c9:7f:2c:d3:8b:b3:21:6c:36:e3:84:56: 07:a4:9e:70:fe:05:5f:cb:0b:50:db:92:80:f2:77: d1:99:80:6a:c9:db:ff:fd:93:a6:d8:e1:b1:44:03: 87:83:8e:78:66:8b:4f:83:37:ef:66:ad:01:1b:c0: ca:71:f5:f7:b5:23:5e:bc:b0:70:83:4c:8b:94:27: a1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A6:EF:7B:B3:0F:96:89:2A:FB:21:66:59:00:95:CB:59:CB:57:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8fc129be-d6c2-30e2-a10b-763f106381f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:23:19:9d:ca:35:06:79:da:2a:e7:e2:57:52:e9:15:ea:f2: c2:55:60:8a:8d:ea:b6:5c:68:63:f6:ee:73:4a:f0:ba:a3:e2: 2a:fe:86:c2:05:b1:2b:d7:5e:0e:47:2e:73:0b:43:8d:59:0c: a6:05:f7:73:fd:f3:c9:e6:67:4b:91:0c:0e:3b:89:b1:e8:ac: f2:d3:3b:a6:64:df:3e:df:2b:67:9d:a0:58:35:03:66:4f:4c: 8e:0b:d1:f1:c2:e8:38:e2:f0:08:71:b0:cc:19:1b:90:a7:89: 4a:2f:a6:f5:a0:e8:88:57:a8:db:8e:72:ad:bf:7e:76:cf:9b: d3:92:09:2f:a6:8c:ac:a1:66:b1:66:4b:0d:79:ba:93:41:31: 68:07:c7:73:4b:be:f8:30:a2:c8:0d:34:b1:e7:da:fb:cf:1e: 52:2d:1c:cf:5e:a2:4c:f7:a7:ff:5e:60:47:93:d3:26:f3:af: 83:4e:c6:da:1e:2c:be:41:46:52:4c:ad:21:6a:74:ea:74:04: bb:3f:84:d7:0a:e8:a6:cc:d1:36:ab:f2:a5:6a:8f:60:1c:b8: d3:ca:a8:55:b2:fd:f5:85:7a:19:ad:5f:d3:c6:67:be:24:de: 53:8d:08:8e:b9:4c:2f:3e:74:83:45:f9:b2:d2:e2:49:ce:39: 1e:f3:a7:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuzt75PRDIsj0MZwrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAzMTA3MjczN1oXDTI2MDEyOTA4MjczN1owLzEtMCsGA1UEAxMk MzhjNDIyZjYtOWYxMS00ZjQ0LWI3YTUtNjk5MGIxZjNlMTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdGiJDez9YmQVXYAC6btk4xQcuJxR+DrqN/n 24cxv3EWd63iTObZh+lRP8Qwa7GpUWzVuNF/w0OKrlW1rlIs9Z7DuewOV3VokCVv UQQUCS2HvVfyR5yeeIoopK3jGwYRlRgOfcB+zt9pMGH0y+027xziyfPqFeEVASab Qebk9awlXat7YpmL6DHSAPvrz32ZQUgcmZmZ83GStLB7TlsOSdl3xuC/2Armkddc DUoj3QnvO1rJbV/JfyzTi7MhbDbjhFYHpJ5w/gVfywtQ25KA8nfRmYBqydv//ZOm 2OGxRAOHg454ZotPgzfvZq0BG8DKcfX3tSNevLBwg0yLlCehCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6m73uzD5aJKvshZlkAlctZy1eiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOGZjMTI5YmUtZDZjMi0z MGUyLWExMGItNzYzZjEwNjM4MWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUjGZ3KNQZ52irn4ldS6RXq8sJVYIqN6rZcaGP27nNK8Lqj4ir+hsIF sSvXXg5HLnMLQ41ZDKYF93P988nmZ0uRDA47ibHorPLTO6Zk3z7fK2edoFg1A2ZP TI4L0fHC6Dji8AhxsMwZG5CniUovpvWg6IhXqNuOcq2/fnbPm9OSCS+mjKyhZrFm Sw15upNBMWgHx3NLvvgwosgNNLHn2vvPHlItHM9eokz3p/9eYEeT0ybzr4NOxtoe LL5BRlJMrSFqdOp0BLs/hNcK6KbM0Tar8qVqj2AcuNPKqFWy/fWFehmtX9PGZ74k 3lONCI65TC8+dINF+bLS4knOOR7zp+k= -----END CERTIFICATE-----Generated at Wed Nov 5 06:02:56 2025 by rpki-client