$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cee79d1b-cce7-3052-ae73-f8a64c2aaa3c.roa File: cee79d1b-cce7-3052-ae73-f8a64c2aaa3c.roa (raw, json) Hash identifier: CJcsbwvHrcBhxKtrv5e8pYiG+iz84cYmYHA74JiGbn4= Subject key identifier: 5F:97:22:3F:F7:35:4D:54:A5:81:C3:30:A0:67:A6:BE:65:51:56:06 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BBC7FA9B0B403A49E80A8AE00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cee79d1b-cce7-3052-ae73-f8a64c2aaa3c.roa Signing time: Mon 03 Nov 2025 10:56:54 +0000 ROA not before: Mon 03 Nov 2025 10:56:54 +0000 ROA not after: Sun 01 Feb 2026 10:56:54 +0000 asID: 151704 IP address blocks: 172.94.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:7f:a9:b0:b4:03:a4:9e:80:a8:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 3 10:56:54 2025 GMT Not After : Feb 1 10:56:54 2026 GMT Subject: CN=63e06a9c-8d48-4dac-93b1-a14ad33690ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ed:96:d9:29:bb:93:ff:71:45:28:bc:9e:a9: 9d:ff:9a:ba:89:c8:22:09:01:6c:46:41:34:cb:93: de:a3:1b:49:c5:66:63:15:80:9e:4d:9f:49:fe:88: 89:49:a3:e0:a2:1e:27:3b:b7:b5:9b:1b:4d:19:9c: 83:2f:c8:38:5f:c5:e9:7b:2a:bc:2c:87:c6:08:92: 37:bb:b1:53:78:52:7e:ce:77:a9:a3:00:8c:d5:aa: ba:26:9d:32:b9:8a:9b:a3:f1:c4:d2:c4:b3:44:81: ca:b4:a6:95:d4:2f:d8:3e:41:28:56:19:6a:c7:4b: b1:2f:a1:d8:23:19:6d:9f:85:fa:f0:ba:e3:66:01: de:57:d3:c4:15:fa:79:58:02:dc:7f:db:2a:90:23: 8d:4c:33:65:f2:d9:8d:24:1d:8b:9b:31:74:6e:fe: b5:6b:dd:e3:97:38:eb:f7:77:b8:f3:f1:ab:c9:b5: 36:d7:26:f0:97:2a:fb:da:46:6f:77:1a:25:10:52: 3b:72:e0:bb:12:62:5f:d3:4d:6f:3a:1b:77:3f:56: 89:ef:3b:99:72:52:cd:6d:6e:fa:4a:df:1d:1e:35: fa:a7:1a:ef:a1:7d:90:d5:e1:30:7e:7d:ff:63:a8: c0:90:e3:fc:28:83:56:e7:8e:11:d6:aa:88:7e:ba: c9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:97:22:3F:F7:35:4D:54:A5:81:C3:30:A0:67:A6:BE:65:51:56:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cee79d1b-cce7-3052-ae73-f8a64c2aaa3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:9f:ba:7a:52:f3:e2:88:d2:f4:e3:f3:2e:31:f4:28:1c:e5: d1:26:f3:63:59:fa:6e:19:81:5a:f6:3f:b4:88:a5:69:10:47: ed:5f:ab:ec:9d:e1:e7:b6:a5:1e:c8:d1:a5:28:fe:d4:d1:17: 81:fd:0c:c8:f5:44:af:f9:a4:cb:42:f1:c7:3d:9a:c8:94:a0: 6d:79:dc:25:d0:1d:4e:74:54:8f:c2:65:b5:7f:16:47:a6:5c: d0:a2:5b:93:f0:67:df:cd:4a:ce:49:b7:07:98:56:26:63:33: 81:14:a7:95:f7:69:bd:25:d6:27:77:eb:ff:e6:4a:45:fa:59: dd:0b:34:b5:2a:d1:be:49:69:41:51:fc:18:70:a9:a5:7c:5a: 16:ad:5b:55:37:c6:a5:9c:61:91:1e:7c:f5:6c:98:a6:4d:ff: b6:6e:32:23:09:e5:e4:b7:bd:0f:71:2e:d8:c1:b2:c6:c7:60: b0:71:e8:da:8d:84:c1:36:a5:50:80:f1:2d:8a:f3:dc:3c:94: 9f:20:f9:a0:c1:33:f8:d8:e3:76:87:aa:6b:a8:53:c5:26:e6: 59:41:07:41:88:fb:78:79:2e:3d:94:72:29:68:e2:22:81:73: d7:e5:89:75:a5:56:59:e3:28:37:de:7d:fe:fc:51:9f:1a:58: 81:05:50:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu8f6mwtAOknoCorgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTEwMzEwNTY1NFoXDTI2MDIwMTEwNTY1NFowLzEtMCsGA1UEAxMk NjNlMDZhOWMtOGQ0OC00ZGFjLTkzYjEtYTE0YWQzMzY5MGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO2W2Sm7k/9xRSi8nqmd/5q6icgiCQFsRkE0 y5PeoxtJxWZjFYCeTZ9J/oiJSaPgoh4nO7e1mxtNGZyDL8g4X8Xpeyq8LIfGCJI3 u7FTeFJ+znepowCM1aq6Jp0yuYqbo/HE0sSzRIHKtKaV1C/YPkEoVhlqx0uxL6HY Ixltn4X68LrjZgHeV9PEFfp5WALcf9sqkCONTDNl8tmNJB2LmzF0bv61a93jlzjr 93e48/GrybU21ybwlyr72kZvdxolEFI7cuC7EmJf001vOht3P1aJ7zuZclLNbW76 St8dHjX6pxrvoX2Q1eEwfn3/Y6jAkOP8KINW544R1qqIfrrJrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+XIj/3NU1UpYHDMKBnpr5lUVYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvY2VlNzlkMWItY2NlNy0z MDUyLWFlNzMtZjhhNjRjMmFhYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2funpS8+KI0vTj8y4x9Cgc5dEm82NZ+m4ZgVr2P7SIpWkQR+1fq+yd 4ee2pR7I0aUo/tTRF4H9DMj1RK/5pMtC8cc9msiUoG153CXQHU50VI/CZbV/Fkem XNCiW5PwZ9/NSs5JtweYViZjM4EUp5X3ab0l1id36//mSkX6Wd0LNLUq0b5JaUFR /BhwqaV8WhatW1U3xqWcYZEefPVsmKZN/7ZuMiMJ5eS3vQ9xLtjBssbHYLBx6NqN hME2pVCA8S2K89w8lJ8g+aDBM/jY43aHqmuoU8Um5llBB0GI+3h5Lj2Ucilo4iKB c9fliXWlVlnjKDfeff78UZ8aWIEFUCU= -----END CERTIFICATE-----Generated at Wed Nov 5 06:03:03 2025 by rpki-client