$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c2244cd9-f184-3b51-8e39-b59d8106f00d.roa File: c2244cd9-f184-3b51-8e39-b59d8106f00d.roa (raw, json) Hash identifier: mWWrpCbupCbOt0NvGLe9MPbb82zBm+bNhA9eJ0Fdacc= Subject key identifier: DE:1A:2C:77:5F:BA:CD:DC:F6:C4:C8:8B:3E:EC:C0:50:42:98:1F:75 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B9D997E6B1253D6678D0F0100 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c2244cd9-f184-3b51-8e39-b59d8106f00d.roa Signing time: Thu 23 Oct 2025 09:18:53 +0000 ROA not before: Thu 23 Oct 2025 09:18:53 +0000 ROA not after: Wed 21 Jan 2026 10:18:53 +0000 asID: 401650 IP address blocks: 172.94.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9d:99:7e:6b:12:53:d6:67:8d:0f:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 23 09:18:53 2025 GMT Not After : Jan 21 10:18:53 2026 GMT Subject: CN=56bb1551-e3f4-4383-acd9-85375ef7a99b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:e0:40:50:81:8c:9c:c1:60:cf:cc:10:f1: f3:11:b8:c3:8f:2a:6f:41:7f:cf:3a:9e:5c:98:c1: 52:7a:33:59:28:19:6c:4b:ac:4e:ba:64:8a:5c:4d: d8:ba:a2:ea:4d:1c:ee:13:44:34:70:ea:3f:ac:ad: 4d:16:2d:90:82:77:48:4f:9b:d2:5b:95:4d:ff:6f: 54:f4:85:dd:3d:f8:d6:99:7f:02:00:8f:22:9a:30: 47:35:33:47:68:73:8a:4a:1d:2e:3d:e5:a3:f5:d4: 60:40:b3:7c:56:a7:ac:a7:d5:f4:eb:47:33:fb:b4: 99:23:b7:78:9c:94:2b:0a:c9:cb:a1:52:06:1c:c9: 9f:a4:07:97:28:60:da:dd:19:f9:b0:59:3b:06:a2: fd:75:0d:22:31:7e:e7:6d:1d:4a:f3:3c:35:07:1d: f9:a5:d4:98:d7:77:22:8d:74:ff:26:a0:b1:5d:3a: 59:d1:40:7f:6b:ba:29:1b:1f:07:97:8d:75:76:0b: 8d:2e:66:16:22:45:b8:4b:93:81:59:72:f6:cd:12: 85:9c:00:bc:20:f8:82:e8:cd:41:20:3b:09:18:83: 25:01:44:e5:ff:00:28:68:bc:4b:0b:fe:90:c8:c1: 70:93:e1:0e:ca:16:a9:e1:0d:e3:17:db:78:05:bb: ff:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1A:2C:77:5F:BA:CD:DC:F6:C4:C8:8B:3E:EC:C0:50:42:98:1F:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c2244cd9-f184-3b51-8e39-b59d8106f00d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:6b:82:9f:00:81:94:8a:78:be:97:28:dc:d7:c8:97:b1:8f: 37:ca:c9:18:c8:1a:0a:98:98:f3:0c:8f:9a:ce:6c:60:82:2b: 38:09:73:55:de:25:79:b1:fd:04:e8:d1:2b:88:6f:c6:9c:d5: 8e:49:88:9a:76:54:d1:30:91:a8:53:32:db:cd:a7:10:3e:cb: 54:82:1e:7f:36:76:d2:fd:d4:70:f9:c7:11:89:71:94:2c:16: 27:99:a5:78:0c:9f:74:de:b4:f0:4e:ee:99:44:93:e1:67:38: 7d:a3:0d:80:3c:41:da:ee:3f:65:9e:9f:36:98:06:06:9e:bc: 18:1e:c2:95:76:d2:d6:9d:69:00:a2:83:46:8f:b9:84:00:84: c3:f3:7c:90:24:74:27:1c:a7:ae:c2:23:7a:cc:81:d5:12:af: 04:0e:20:fc:6e:cd:ac:af:fb:b2:1d:23:f9:c8:87:ca:29:6a: 28:e2:2c:b1:f0:71:4b:9b:b2:62:f6:b5:35:28:af:32:28:aa: 0c:ae:04:82:31:e6:92:e6:53:1e:29:df:b4:61:9d:a2:5f:d5: 2b:99:d8:aa:de:e3:6c:f7:76:91:87:e2:a0:19:22:54:65:71: 98:39:d5:f9:1a:fd:26:d3:b7:d9:e1:48:79:bf:42:30:11:b1: 87:d4:94:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEudmX5rElPWZ40PAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyMzA5MTg1M1oXDTI2MDEyMTEwMTg1M1owLzEtMCsGA1UEAxMk NTZiYjE1NTEtZTNmNC00MzgzLWFjZDktODUzNzVlZjdhOTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeDgQFCBjJzBYM/MEPHzEbjDjypvQX/POp5c mMFSejNZKBlsS6xOumSKXE3YuqLqTRzuE0Q0cOo/rK1NFi2QgndIT5vSW5VN/29U 9IXdPfjWmX8CAI8imjBHNTNHaHOKSh0uPeWj9dRgQLN8Vqesp9X060cz+7SZI7d4 nJQrCsnLoVIGHMmfpAeXKGDa3Rn5sFk7BqL9dQ0iMX7nbR1K8zw1Bx35pdSY13ci jXT/JqCxXTpZ0UB/a7opGx8Hl411dguNLmYWIkW4S5OBWXL2zRKFnAC8IPiC6M1B IDsJGIMlAUTl/wAoaLxLC/6QyMFwk+EOyhap4Q3jF9t4Bbv/zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4aLHdfus3c9sTIiz7swFBCmB91MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzIyNDRjZDktZjE4NC0z YjUxLThlMzktYjU5ZDgxMDZmMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhrgp8AgZSKeL6XKNzXyJexjzfKyRjIGgqYmPMMj5rObGCCKzgJc1Xe JXmx/QTo0SuIb8ac1Y5JiJp2VNEwkahTMtvNpxA+y1SCHn82dtL91HD5xxGJcZQs FieZpXgMn3TetPBO7plEk+FnOH2jDYA8QdruP2WenzaYBgaevBgewpV20tadaQCi g0aPuYQAhMPzfJAkdCccp67CI3rMgdUSrwQOIPxuzayv+7IdI/nIh8opaijiLLHw cUubsmL2tTUorzIoqgyuBIIx5pLmUx4p37RhnaJf1SuZ2Kre42z3dpGH4qAZIlRl cZg51fka/SbTt9nhSHm/QjARsYfUlEk= -----END CERTIFICATE-----Generated at Wed Nov 5 06:15:00 2025 by rpki-client