$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf59dab7-cd9f-3dc0-85d9-26b5cc9b4882.roa File: bf59dab7-cd9f-3dc0-85d9-26b5cc9b4882.roa (raw, json) Hash identifier: AIbA6SHRbjlCC4MXPissnKg4YxGmxfsrU3x8J5IUdCg= Subject key identifier: 4C:2C:AB:99:33:1B:EA:35:F7:B4:83:E3:6D:83:05:74:38:14:89:D1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AF0F146FF9431C815EB10F180 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf59dab7-cd9f-3dc0-85d9-26b5cc9b4882.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 9009 IP address blocks: 172.94.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:46:ff:94:31:c8:15:eb:10:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=42cb4a85-2225-4b92-ab34-446a08d4727c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bc:e4:a6:a6:80:0d:c1:41:d3:6e:5a:14:f5: 02:ab:6f:c8:0d:ac:36:07:e0:97:02:dd:58:7e:b4: da:95:c2:55:17:da:20:17:22:8d:59:c1:7e:c1:3a: 37:91:6f:3f:8d:8d:b9:18:c4:2a:c9:01:dc:3b:99: c0:77:1c:14:65:92:fa:72:a8:ff:e4:69:b2:e1:85: 81:2f:89:1f:af:50:a2:b8:c0:6e:a2:18:0c:f5:7b: 1b:30:b2:75:db:41:70:10:0f:d4:e7:6e:de:e6:4c: e5:bd:1f:51:7d:25:2a:8e:e2:d2:da:cd:ca:e8:71: 62:c9:3d:ae:05:54:c6:9f:9a:0d:d6:22:d8:48:3d: 03:ea:d8:e8:5b:ba:33:9e:79:4c:9d:ee:1b:67:c0: ca:2a:04:e0:e2:20:6f:d8:89:b6:3c:04:f2:70:2b: 00:fd:b2:14:d6:22:46:4e:5e:f5:07:5a:9d:90:a2: cb:ce:10:70:59:37:a1:10:14:33:f8:e0:e2:db:9e: 29:d3:c8:c7:b4:6a:5d:80:f8:56:77:f7:15:d7:ab: b2:c8:a3:09:41:ae:e3:aa:8f:4d:5e:f6:89:4d:cd: 81:de:23:5a:02:6c:48:5b:cd:78:84:8d:8b:80:92: 42:58:fc:bd:c8:98:e4:0c:6d:af:82:17:10:d5:38: d4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2C:AB:99:33:1B:EA:35:F7:B4:83:E3:6D:83:05:74:38:14:89:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf59dab7-cd9f-3dc0-85d9-26b5cc9b4882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:c1:bc:15:6a:89:99:f5:19:1a:59:cb:a2:3f:4c:2c:e0:90: 0b:2b:d6:41:8b:7a:69:89:70:40:f1:b1:e9:f1:63:80:8f:fa: 18:08:8f:02:25:1e:b4:e0:d1:df:ce:66:be:a0:c9:58:95:16: b6:59:a4:d7:1f:79:0c:9a:7b:a4:bc:b5:18:58:82:2e:94:77: 9b:d5:9f:fc:08:2b:4a:b9:48:75:00:3f:0f:55:90:91:1d:4f: 8d:24:4f:b3:93:e0:0c:f5:06:7b:b7:a5:64:38:cd:a0:86:ea: 20:79:88:8a:b5:96:d3:3b:25:a2:c0:fb:94:8c:3c:73:f8:62: 7d:8f:c9:43:73:9e:bb:1b:7e:dd:d3:6b:9e:e7:40:80:65:6c: a7:32:fe:b6:2a:93:2c:58:9a:46:98:0d:4e:ae:da:d3:c1:f9: 3e:3d:38:ca:42:ee:f8:03:65:41:9c:ca:20:a2:b1:11:6c:8d: e3:07:4f:f8:c1:a3:c6:66:a8:35:dc:aa:be:93:b3:aa:24:ef: 10:a5:9e:a2:f6:fe:5d:ba:c3:f1:1c:58:23:64:4c:86:65:17: 3a:25:11:c7:26:ad:81:62:16:5d:d6:cd:02:96:0c:e1:0c:fe: af:b8:56:c8:41:22:2a:48:a7:52:54:92:29:27:d2:56:e1:79: ca:e3:78:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8Ub/lDHIFesQ8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NDJjYjRhODUtMjIyNS00YjkyLWFiMzQtNDQ2YTA4ZDQ3MjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbzkpqaADcFB025aFPUCq2/IDaw2B+CXAt1Y frTalcJVF9ogFyKNWcF+wTo3kW8/jY25GMQqyQHcO5nAdxwUZZL6cqj/5Gmy4YWB L4kfr1CiuMBuohgM9XsbMLJ120FwEA/U527e5kzlvR9RfSUqjuLS2s3K6HFiyT2u BVTGn5oN1iLYSD0D6tjoW7oznnlMne4bZ8DKKgTg4iBv2Im2PATycCsA/bIU1iJG Tl71B1qdkKLLzhBwWTehEBQz+ODi254p08jHtGpdgPhWd/cV16uyyKMJQa7jqo9N XvaJTc2B3iNaAmxIW814hI2LgJJCWPy9yJjkDG2vghcQ1TjUbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwsq5kzG+o197SD422DBXQ4FInRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmY1OWRhYjctY2Q5Zi0z ZGMwLTg1ZDktMjZiNWNjOWI0ODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPBvBVqiZn1GRpZy6I/TCzgkAsr1kGLemmJcEDxsenxY4CP+hgIjwIl HrTg0d/OZr6gyViVFrZZpNcfeQyae6S8tRhYgi6Ud5vVn/wIK0q5SHUAPw9VkJEd T40kT7OT4Az1Bnu3pWQ4zaCG6iB5iIq1ltM7JaLA+5SMPHP4Yn2PyUNznrsbft3T a57nQIBlbKcy/rYqkyxYmkaYDU6u2tPB+T49OMpC7vgDZUGcyiCisRFsjeMHT/jB o8ZmqDXcqr6Ts6ok7xClnqL2/l26w/EcWCNkTIZlFzolEccmrYFiFl3WzQKWDOEM /q+4VshBIipIp1JUkikn0lbhecrjeIQ= -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:03 2025 by rpki-client