$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bcfe518a-c45a-3360-bc0b-3181466e2a1a.roa File: bcfe518a-c45a-3360-bc0b-3181466e2a1a.roa (raw, json) Hash identifier: s4OV0VCYxgJA9FGXSuLI2YGZ6GSFlxZS7YNIU75GkWo= Subject key identifier: C3:DD:F9:3B:0E:B2:57:AC:09:F8:AD:A9:2B:FF:BF:D1:39:4C:E4:54 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BB3B04DF36BDDB1E319116998 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bcfe518a-c45a-3360-bc0b-3181466e2a1a.roa Signing time: Fri 31 Oct 2025 07:12:38 +0000 ROA not before: Fri 31 Oct 2025 07:12:38 +0000 ROA not after: Thu 29 Jan 2026 08:12:38 +0000 asID: 55154 IP address blocks: 172.94.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b3:b0:4d:f3:6b:dd:b1:e3:19:11:69:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 31 07:12:38 2025 GMT Not After : Jan 29 08:12:38 2026 GMT Subject: CN=b239e1f9-8d8d-4661-9255-23d2864b61b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:02:85:57:59:91:28:03:cf:2e:40:68:ec:95: 52:93:59:ba:c0:2c:09:7d:b8:3a:f6:5c:1f:5d:1a: 6e:87:2e:b1:1d:fd:53:66:5f:9c:03:fe:c7:51:5c: 41:27:04:8a:29:6a:5e:b8:23:2a:b2:e6:61:2e:e0: c1:1a:6d:6b:2b:2b:db:28:12:66:77:f5:72:d4:4e: 1e:b2:f6:cc:96:84:5d:f1:3d:cf:e5:60:a7:92:d0: 30:17:e8:ec:db:8f:59:27:6c:0c:b4:07:82:76:7d: f9:4e:96:00:54:1e:44:cc:54:8a:5b:87:09:49:38: e4:06:64:ce:6a:33:de:17:40:5a:62:94:ce:17:59: 4f:40:ad:c4:e9:9d:c3:68:36:dd:4a:9f:8b:d9:8f: ec:a3:d4:93:e8:6e:81:76:34:ca:54:91:f4:8c:08: ef:a9:5a:03:ed:e9:2e:57:24:a5:ea:93:f0:b2:c5: fb:08:c0:db:0c:3b:5a:53:62:b1:78:22:9b:22:84: 25:e2:7f:f9:da:d9:03:dc:8a:fc:f9:3d:07:a6:1a: c0:69:d7:c1:4f:7b:e4:3a:89:b9:a4:31:82:67:3d: d9:29:e6:a3:12:92:bb:f8:20:b5:0d:ea:1c:15:ff: 72:42:c5:3c:03:b0:13:76:1f:3c:ce:f2:be:33:37: f8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DD:F9:3B:0E:B2:57:AC:09:F8:AD:A9:2B:FF:BF:D1:39:4C:E4:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bcfe518a-c45a-3360-bc0b-3181466e2a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a6:1f:04:ee:e6:4b:c2:f8:55:b5:51:17:04:3b:2d:f8:95: f1:72:5a:da:85:be:01:b5:e8:79:cf:30:8b:53:59:ce:20:2e: 76:01:36:45:78:c0:75:f6:ee:b3:79:b4:ce:98:98:66:3c:e1: 8e:20:1a:3c:ef:49:c7:2c:32:d2:0f:5a:24:78:61:66:6d:89: 92:94:02:78:27:b3:cc:fa:0d:e1:ea:ae:42:87:6d:a1:50:ec: 16:1f:26:b0:4f:79:79:75:2c:65:60:81:10:44:1a:35:cc:30: 39:b2:0f:14:ff:6b:30:0d:06:f8:41:00:dd:1b:13:2e:ea:84: c7:12:2b:c3:40:1e:a9:1e:30:14:5d:a9:35:d2:59:21:93:67: ae:4b:79:c9:16:0a:7b:7c:ba:98:6e:78:c8:5b:13:aa:d9:61: 7f:6e:5a:4f:0a:7f:51:8e:ac:44:d3:9d:38:06:64:96:b6:6f: 66:c0:56:ff:dc:0e:a5:54:87:c3:57:9b:3e:14:1f:c0:fe:5a: 5b:59:32:b4:27:3c:c4:6c:f7:ae:69:85:10:db:f8:98:47:52: f3:75:7b:0d:93:36:e2:e1:33:2d:90:e8:63:c9:ab:73:d2:c7: 66:5c:bb:ec:7d:87:02:43:ea:48:d6:2d:7e:cd:26:1d:e6:ae: 8b:ad:45:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuzsE3za92x4xkRaZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAzMTA3MTIzOFoXDTI2MDEyOTA4MTIzOFowLzEtMCsGA1UEAxMk YjIzOWUxZjktOGQ4ZC00NjYxLTkyNTUtMjNkMjg2NGI2MWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQKFV1mRKAPPLkBo7JVSk1m6wCwJfbg69lwf XRpuhy6xHf1TZl+cA/7HUVxBJwSKKWpeuCMqsuZhLuDBGm1rKyvbKBJmd/Vy1E4e svbMloRd8T3P5WCnktAwF+js249ZJ2wMtAeCdn35TpYAVB5EzFSKW4cJSTjkBmTO ajPeF0BaYpTOF1lPQK3E6Z3DaDbdSp+L2Y/so9ST6G6BdjTKVJH0jAjvqVoD7eku VySl6pPwssX7CMDbDDtaU2KxeCKbIoQl4n/52tkD3Ir8+T0HphrAadfBT3vkOom5 pDGCZz3ZKeajEpK7+CC1DeocFf9yQsU8A7ATdh88zvK+Mzf4WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPd+TsOslesCfitqSv/v9E5TORUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmNmZTUxOGEtYzQ1YS0z MzYwLWJjMGItMzE4MTQ2NmUyYTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSmHwTu5kvC+FW1URcEOy34lfFyWtqFvgG16HnPMItTWc4gLnYBNkV4 wHX27rN5tM6YmGY84Y4gGjzvSccsMtIPWiR4YWZtiZKUAngns8z6DeHqrkKHbaFQ 7BYfJrBPeXl1LGVggRBEGjXMMDmyDxT/azANBvhBAN0bEy7qhMcSK8NAHqkeMBRd qTXSWSGTZ65LeckWCnt8uphueMhbE6rZYX9uWk8Kf1GOrETTnTgGZJa2b2bAVv/c DqVUh8NXmz4UH8D+WltZMrQnPMRs965phRDb+JhHUvN1ew2TNuLhMy2Q6GPJq3PS x2Zcu+x9hwJD6kjWLX7NJh3mroutRUA= -----END CERTIFICATE-----Generated at Wed Nov 5 15:30:04 2025 by rpki-client