$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a8185e37-0964-36a8-8e4f-216aa1151622.roa File: a8185e37-0964-36a8-8e4f-216aa1151622.roa (raw, json) Hash identifier: /voioPjGvZjqLjut5pI8bkUpHzdjtdZ2iLFLpyXX/p4= Subject key identifier: 99:72:81:FB:E4:73:57:F6:24:03:79:40:CD:17:E8:B4:9E:7A:66:5D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BBC19258DD37B8694D5443B80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a8185e37-0964-36a8-8e4f-216aa1151622.roa Signing time: Mon 03 Nov 2025 07:30:20 +0000 ROA not before: Mon 03 Nov 2025 07:30:20 +0000 ROA not after: Sun 01 Feb 2026 07:30:20 +0000 asID: 205220 IP address blocks: 172.94.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:19:25:8d:d3:7b:86:94:d5:44:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 3 07:30:20 2025 GMT Not After : Feb 1 07:30:20 2026 GMT Subject: CN=53f421ab-ead8-4b29-a57c-83887293ff72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5c:98:8b:28:96:50:bf:1f:1d:47:46:61:be: ca:12:62:20:a2:dd:be:60:49:68:7f:66:e6:b5:67: 97:bb:79:99:de:99:f4:43:0e:44:cf:3d:c8:b6:1e: 8f:35:75:fb:62:92:1d:3b:c5:86:9c:ac:72:45:fa: e2:89:b4:35:5c:6a:da:12:14:3a:6d:34:ba:00:d5: d5:3b:72:db:1f:69:c7:2f:17:80:5a:87:94:44:3e: 9c:3f:d6:5e:59:d9:62:46:3e:92:2f:29:5b:9c:08: 27:49:6f:97:24:8f:b7:0c:08:c6:ea:55:c7:36:0b: db:71:c1:9d:12:d2:cb:37:01:ac:bc:7e:dd:13:0a: d0:3c:15:49:e3:74:c6:03:1e:43:b6:e4:30:f9:89: 24:a7:2f:47:a7:7a:e7:c2:b6:a9:77:7a:85:85:32: 43:07:94:44:f6:69:9f:1a:22:a9:4f:4a:0e:dc:57: 05:21:18:9e:6c:63:5c:8e:ba:f6:fb:8d:36:48:93: 86:fb:03:be:b6:d5:d6:c5:f2:81:44:5d:81:31:a3: 1d:fb:58:12:45:fd:81:c8:c2:b3:17:c7:95:c4:8f: 43:77:ef:de:bd:65:4c:64:80:a4:b2:d7:39:8f:cc: 14:b2:27:22:cc:30:a1:62:dc:84:b9:b5:d6:58:78: 9c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:72:81:FB:E4:73:57:F6:24:03:79:40:CD:17:E8:B4:9E:7A:66:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a8185e37-0964-36a8-8e4f-216aa1151622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:28:4e:23:27:f5:1e:38:08:1a:a7:a0:8b:97:6d:eb:2a:0d: 56:ee:26:81:64:01:40:c7:d3:3d:02:53:cd:ec:64:67:c9:3b: 05:23:6d:6d:32:7b:05:2c:76:d3:2c:13:23:00:d3:ea:67:3d: 6d:8d:77:61:ee:be:f4:9b:e2:ec:b9:3d:2f:e0:09:2a:a6:09: 68:99:41:5e:0c:dc:18:38:7b:5a:96:76:f2:15:d0:a6:ba:cf: d3:78:95:41:0b:fb:42:98:52:9b:1b:3e:db:da:30:bb:f5:98: 35:cd:60:08:9b:da:5f:2f:92:29:47:42:65:18:44:f1:eb:f5: e9:24:c9:29:99:9f:eb:c6:98:0c:bb:7a:f0:f1:41:f1:37:a3: 5d:94:bc:df:bd:09:c2:04:bd:dc:c5:eb:4b:de:57:f8:b6:1d: cc:4a:af:11:66:03:f7:6e:ba:bf:a0:eb:9e:af:83:9a:96:90: 99:c9:c2:f8:07:d9:8c:85:f7:6c:66:58:20:9f:e7:50:7d:6c: db:50:43:41:c6:34:9e:75:50:51:a5:ae:81:f6:80:11:d6:c1: 74:32:94:e3:a6:4c:bd:09:ee:3d:62:7f:19:c4:4b:84:2d:bf: f1:16:b8:fa:02:a4:35:4d:29:28:a3:bb:d8:b1:9e:1b:9c:8d: 67:13:0d:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu8GSWN03uGlNVEO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTEwMzA3MzAyMFoXDTI2MDIwMTA3MzAyMFowLzEtMCsGA1UEAxMk NTNmNDIxYWItZWFkOC00YjI5LWE1N2MtODM4ODcyOTNmZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51yYiyiWUL8fHUdGYb7KEmIgot2+YElof2bm tWeXu3mZ3pn0Qw5Ezz3Ith6PNXX7YpIdO8WGnKxyRfriibQ1XGraEhQ6bTS6ANXV O3LbH2nHLxeAWoeURD6cP9ZeWdliRj6SLylbnAgnSW+XJI+3DAjG6lXHNgvbccGd EtLLNwGsvH7dEwrQPBVJ43TGAx5DtuQw+Ykkpy9Hp3rnwrapd3qFhTJDB5RE9mmf GiKpT0oO3FcFIRiebGNcjrr2+402SJOG+wO+ttXWxfKBRF2BMaMd+1gSRf2ByMKz F8eVxI9Dd+/evWVMZICkstc5j8wUsicizDChYtyEubXWWHicrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlygfvkc1f2JAN5QM0X6LSeemZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTgxODVlMzctMDk2NC0z NmE4LThlNGYtMjE2YWExMTUxNjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADooTiMn9R44CBqnoIuXbesqDVbuJoFkAUDH0z0CU83sZGfJOwUjbW0y ewUsdtMsEyMA0+pnPW2Nd2HuvvSb4uy5PS/gCSqmCWiZQV4M3Bg4e1qWdvIV0Ka6 z9N4lUEL+0KYUpsbPtvaMLv1mDXNYAib2l8vkilHQmUYRPHr9ekkySmZn+vGmAy7 evDxQfE3o12UvN+9CcIEvdzF60veV/i2HcxKrxFmA/duur+g656vg5qWkJnJwvgH 2YyF92xmWCCf51B9bNtQQ0HGNJ51UFGlroH2gBHWwXQylOOmTL0J7j1ifxnES4Qt v/EWuPoCpDVNKSiju9ixnhucjWcTDZI= -----END CERTIFICATE-----Generated at Wed Nov 5 15:28:25 2025 by rpki-client