$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b2b59981-e68e-385b-9e67-4a9271825459.roa File: b2b59981-e68e-385b-9e67-4a9271825459.roa (raw, json) Hash identifier: IQJDp3RFKQ0h3tcRxA9khH9zKhagE1RT1Qmwx7UZhyc= Subject key identifier: 02:F3:91:C7:E6:70:FD:EB:28:9F:47:26:61:B0:27:87:8E:95:F0:1C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B9E07AEE191A155A8E520A880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b2b59981-e68e-385b-9e67-4a9271825459.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 3223 IP address blocks: 172.94.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:ae:e1:91:a1:55:a8:e5:20:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=d24d1f38-ea5a-4051-ab9f-bb62e771c225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d0:3e:ff:87:4c:1c:e8:e5:08:0d:e8:09:38: fc:ed:2b:f3:b7:ad:3c:5a:a4:1b:04:ff:83:3f:41: 6e:eb:0f:8d:de:92:20:f5:83:35:84:1d:9c:ac:18: 50:a5:dd:a3:cc:82:03:85:0b:3a:80:f4:a8:b8:7c: 38:33:8c:d0:a8:99:1f:00:51:8d:c3:a4:ed:8b:fa: c5:20:a7:82:65:e2:68:2c:5d:a4:8f:4f:2e:30:4a: 8b:74:85:58:bd:3c:5e:69:4b:8e:cb:72:a1:ba:55: 45:1b:a4:5a:f0:c8:8f:db:c3:c6:a8:85:0e:cf:91: fe:31:f3:04:0e:96:2f:25:72:fd:4f:c0:b4:3d:f2: 14:14:2b:07:ab:f3:d6:ae:8b:1d:2e:ad:f0:13:9a: ee:7e:53:61:ad:40:de:b7:91:9f:72:a2:84:b5:6c: b7:69:da:e1:cf:de:b6:47:84:22:35:e9:75:cf:37: e9:c2:c6:dc:01:97:5e:63:c0:b2:4c:55:b6:bd:06: a5:63:59:6b:5e:91:07:1b:ed:2c:9c:1c:bf:e3:9b: 8d:2a:57:af:00:16:10:cb:38:15:97:14:f3:69:6c: b4:2e:7c:c4:f7:56:b6:ed:87:60:18:e1:26:ba:a0: 84:00:56:42:22:a9:2c:97:da:81:2a:3c:1a:8f:12: db:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F3:91:C7:E6:70:FD:EB:28:9F:47:26:61:B0:27:87:8E:95:F0:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b2b59981-e68e-385b-9e67-4a9271825459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:a8:e6:f5:1e:10:2a:60:c6:a0:d3:35:cc:03:96:66:25:00: 54:07:12:33:b3:40:5d:d8:10:f3:b0:cb:30:25:9a:2a:96:b2: 65:be:4c:05:7d:93:f5:67:ad:63:b8:dd:1e:68:6b:b9:3c:d2: 60:02:00:61:a3:68:38:00:e4:8f:9d:14:89:f0:7a:f7:d7:a1: 90:b2:84:61:4b:4f:1f:38:74:c0:d5:66:ff:a5:16:bb:eb:f1: c8:1b:63:8b:72:f2:7d:51:48:f8:c7:80:67:bc:ad:ea:94:14: ea:6c:dc:1a:98:89:70:60:24:5b:8d:3a:2c:82:eb:f2:3d:e2: 11:60:71:dc:78:b2:28:18:1e:d2:92:70:d3:ea:0d:4e:10:4a: f6:31:71:74:04:d5:ec:c8:de:4a:e5:0e:a0:76:0e:f3:53:4c: d4:9f:48:e9:54:78:1b:ae:67:a2:33:ac:3d:47:e5:35:fd:c9: 7c:5e:60:5a:9c:94:d7:d1:7c:e1:65:88:f0:40:01:07:ac:e3: 79:91:4f:67:f8:b2:58:14:92:53:b1:4b:93:d7:d5:f9:65:77: d2:a3:d7:e0:1f:35:2d:8b:4d:d1:d9:be:52:c9:22:01:c0:49: c9:aa:df:9d:2a:9f:54:c0:5d:f3:68:e5:28:11:1b:be:a6:2f: 4b:e7:60:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB67hkaFVqOUgqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZDI0ZDFmMzgtZWE1YS00MDUxLWFiOWYtYmI2MmU3NzFjMjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNA+/4dMHOjlCA3oCTj87Svzt608WqQbBP+D P0Fu6w+N3pIg9YM1hB2crBhQpd2jzIIDhQs6gPSouHw4M4zQqJkfAFGNw6Tti/rF IKeCZeJoLF2kj08uMEqLdIVYvTxeaUuOy3KhulVFG6Ra8MiP28PGqIUOz5H+MfME DpYvJXL9T8C0PfIUFCsHq/PWrosdLq3wE5ruflNhrUDet5GfcqKEtWy3adrhz962 R4QiNel1zzfpwsbcAZdeY8CyTFW2vQalY1lrXpEHG+0snBy/45uNKlevABYQyzgV lxTzaWy0LnzE91a27YdgGOEmuqCEAFZCIqksl9qBKjwajxLbUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALzkcfmcP3rKJ9HJmGwJ4eOlfAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjJiNTk5ODEtZTY4ZS0z ODViLTllNjctNGE5MjcxODI1NDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmo5vUeECpgxqDTNcwDlmYlAFQHEjOzQF3YEPOwyzAlmiqWsmW+TAV9 k/VnrWO43R5oa7k80mACAGGjaDgA5I+dFInwevfXoZCyhGFLTx84dMDVZv+lFrvr 8cgbY4ty8n1RSPjHgGe8reqUFOps3BqYiXBgJFuNOiyC6/I94hFgcdx4sigYHtKS cNPqDU4QSvYxcXQE1ezI3krlDqB2DvNTTNSfSOlUeBuuZ6IzrD1H5TX9yXxeYFqc lNfRfOFliPBAAQes43mRT2f4slgUklOxS5PX1flld9Kj1+AfNS2LTdHZvlLJIgHA Scmq350qn1TAXfNo5SgRG76mL0vnYH8= -----END CERTIFICATE-----Generated at Wed Nov 5 08:01:05 2025 by rpki-client