$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a8b5e25e-51af-35c8-83de-e7cfee23aab6.roa File: a8b5e25e-51af-35c8-83de-e7cfee23aab6.roa (raw, json) Hash identifier: Hr3hibAqTWa5QjxtRuiloVZh6tj1GIrRVKof68CJfnE= Subject key identifier: 4F:15:4D:6D:EA:50:40:0D:73:80:05:F7:69:70:EA:55:45:E6:5A:D1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BB3AD84B098FCD7E206C9A960 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a8b5e25e-51af-35c8-83de-e7cfee23aab6.roa Signing time: Fri 31 Oct 2025 07:07:01 +0000 ROA not before: Fri 31 Oct 2025 07:07:01 +0000 ROA not after: Thu 29 Jan 2026 08:07:01 +0000 asID: 55154 IP address blocks: 172.94.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b3:ad:84:b0:98:fc:d7:e2:06:c9:a9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 31 07:07:01 2025 GMT Not After : Jan 29 08:07:01 2026 GMT Subject: CN=87e7c1cf-ce10-46d2-aa73-517a9998a171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:16:1a:63:6f:76:5c:67:52:fa:e1:f4:6c:18: f6:39:29:81:a8:0c:7e:a4:e5:8e:46:f0:97:d4:72: af:a4:dc:8a:d4:f0:ce:3c:e0:4b:10:99:79:bf:3c: 38:63:dd:60:5d:e4:f8:cb:0f:db:b0:ab:d2:1a:62: 2d:43:48:be:60:00:a3:1d:40:c7:47:31:05:b2:33: 3e:0b:58:5d:21:f3:2c:fe:14:d9:0a:62:53:0e:25: db:b0:e2:29:15:19:d0:94:b5:95:28:3d:0c:ae:d2: 13:af:6d:80:45:5b:48:8b:a8:c0:48:fa:c5:80:ef: 12:ec:ea:44:1a:22:05:bc:39:43:34:a7:69:23:cc: 05:73:1b:f2:30:10:a5:98:0f:8f:7e:ef:2b:b8:43: b0:b2:03:28:b5:a8:09:7c:f9:bd:8e:a5:1b:f4:b2: 41:4e:83:60:f2:18:65:a5:1c:01:bd:ee:ab:89:05: a6:93:dc:9a:fd:12:86:93:2c:d5:81:d4:68:f1:32: e6:2c:a8:14:4c:87:34:56:6c:64:e3:70:2f:b8:cf: 80:34:34:2e:61:ef:a0:0d:9a:46:ce:69:9d:a4:0e: 5c:d6:49:66:de:9b:7f:c3:19:4d:aa:30:a5:02:62: 0c:0b:81:3a:82:48:82:0d:7c:ec:14:8d:1a:4c:f9: a8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:15:4D:6D:EA:50:40:0D:73:80:05:F7:69:70:EA:55:45:E6:5A:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a8b5e25e-51af-35c8-83de-e7cfee23aab6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d0:7f:16:23:60:df:be:d3:81:43:9f:82:92:d9:6d:d6:b2: ed:52:fd:d9:dd:5a:d8:ac:c6:5c:03:22:56:0e:48:7d:91:aa: 07:91:7b:db:2f:a0:08:99:40:c5:5f:15:32:5b:d4:91:17:11: 8c:bc:03:2b:48:08:67:69:d6:64:6b:74:68:f4:d4:02:df:fc: f1:29:1a:3f:e3:9c:6e:2f:91:34:9c:5d:c5:81:c1:cf:89:66: 7e:14:4f:d4:7c:4f:4f:68:65:67:f5:62:4c:21:59:8f:e4:6e: 9a:a6:fb:fc:b4:18:1e:a4:42:01:fd:c5:40:9e:8f:29:d8:7f: dd:8a:58:bb:de:3f:f8:87:1a:8a:8e:20:0c:a4:51:dc:35:d0: 7b:fc:02:9c:2e:fa:b3:99:b6:75:23:64:c1:fb:80:ae:f4:85: 84:81:0d:01:ab:3f:bb:23:3c:6a:3a:9a:51:1b:8c:9b:bc:1a: 61:73:5f:15:4e:ed:ba:49:a9:aa:86:8b:55:26:61:b4:1b:83: e5:e6:6f:21:24:82:97:8e:a2:cc:3c:d5:88:bd:17:96:bb:0c: 18:7f:c8:31:87:fe:70:b7:e5:dd:15:fa:3e:1b:c7:ad:8f:0a: b0:1b:b3:e7:b8:ce:13:f9:1a:9f:cb:d7:2c:1d:ac:fa:1d:12: 5e:4d:cf:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuzrYSwmPzX4gbJqWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAzMTA3MDcwMVoXDTI2MDEyOTA4MDcwMVowLzEtMCsGA1UEAxMk ODdlN2MxY2YtY2UxMC00NmQyLWFhNzMtNTE3YTk5OThhMTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBYaY292XGdS+uH0bBj2OSmBqAx+pOWORvCX 1HKvpNyK1PDOPOBLEJl5vzw4Y91gXeT4yw/bsKvSGmItQ0i+YACjHUDHRzEFsjM+ C1hdIfMs/hTZCmJTDiXbsOIpFRnQlLWVKD0MrtITr22ARVtIi6jASPrFgO8S7OpE GiIFvDlDNKdpI8wFcxvyMBClmA+Pfu8ruEOwsgMotagJfPm9jqUb9LJBToNg8hhl pRwBve6riQWmk9ya/RKGkyzVgdRo8TLmLKgUTIc0Vmxk43AvuM+ANDQuYe+gDZpG zmmdpA5c1klm3pt/wxlNqjClAmIMC4E6gkiCDXzsFI0aTPmoZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8VTW3qUEANc4AF92lw6lVF5lrRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYThiNWUyNWUtNTFhZi0z NWM4LTgzZGUtZTdjZmVlMjNhYWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7QfxYjYN++04FDn4KS2W3Wsu1S/dndWtisxlwDIlYOSH2RqgeRe9sv oAiZQMVfFTJb1JEXEYy8AytICGdp1mRrdGj01ALf/PEpGj/jnG4vkTScXcWBwc+J Zn4UT9R8T09oZWf1YkwhWY/kbpqm+/y0GB6kQgH9xUCejynYf92KWLveP/iHGoqO IAykUdw10Hv8Apwu+rOZtnUjZMH7gK70hYSBDQGrP7sjPGo6mlEbjJu8GmFzXxVO 7bpJqaqGi1UmYbQbg+XmbyEkgpeOosw81Yi9F5a7DBh/yDGH/nC35d0V+j4bx62P CrAbs+e4zhP5Gp/L1ywdrPodEl5Nz6w= -----END CERTIFICATE-----Generated at Wed Nov 5 06:02:58 2025 by rpki-client