$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dbb5573c-c694-319f-9142-5b684a5de9fa.roa File: dbb5573c-c694-319f-9142-5b684a5de9fa.roa (raw, json) Hash identifier: LmgFE7wtE6Kk9uCNSlNvBNEMCMuoJyUufp22BhScwzI= Subject key identifier: A2:F2:F2:2D:2A:71:45:01:B8:90:9C:59:A5:35:7E:03:E5:83:80:05 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BB67E886C035EE2C2DDD41C40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dbb5573c-c694-319f-9142-5b684a5de9fa.roa Signing time: Sat 01 Nov 2025 07:19:46 +0000 ROA not before: Sat 01 Nov 2025 07:19:46 +0000 ROA not after: Fri 30 Jan 2026 08:19:46 +0000 asID: 205220 IP address blocks: 172.94.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b6:7e:88:6c:03:5e:e2:c2:dd:d4:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 1 07:19:46 2025 GMT Not After : Jan 30 08:19:46 2026 GMT Subject: CN=01288a94-c880-4dfa-8235-d245f1ae784e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a1:92:53:01:9f:53:87:8d:9a:75:0c:95:ca: c9:6d:32:15:b5:59:f2:1c:42:6f:2d:52:dd:64:46: 31:27:d7:21:a0:dd:32:4d:1a:a0:2e:db:9e:e6:ab: 14:c5:37:8e:fe:1b:c7:e1:88:4f:47:dd:f8:8c:ea: 2d:53:71:19:0a:cf:87:51:01:90:43:23:a9:9f:e4: 19:e8:68:14:a2:84:d1:17:fb:8d:1e:c9:9b:97:4a: 70:b8:49:bf:51:0d:2a:5c:7d:2d:8a:cf:04:9a:a7: a3:c2:90:6e:e3:e4:6c:d5:cd:8f:ed:06:29:da:c1: 09:85:56:cd:07:96:f3:73:3d:02:66:67:bb:e4:2a: 49:a6:2f:46:9b:4e:0b:de:ff:f5:ab:81:ee:03:60: e6:e4:a6:71:40:0f:45:85:ae:67:29:18:59:2b:cb: 82:aa:79:da:b5:1f:c3:fa:86:69:ea:49:af:81:af: b3:f5:fc:ae:b5:ee:61:23:a3:87:8b:24:d4:7a:9c: 85:25:4d:c6:2e:c1:a9:d0:30:56:97:fa:4b:41:33: d2:82:28:d9:fc:fb:f9:78:f7:0f:44:d2:0b:ef:42: 31:51:38:ee:ce:8d:82:ee:a8:ed:d3:ab:74:2f:15: e8:d0:45:c1:9c:4b:0a:eb:dc:3b:5d:73:09:9d:42: eb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F2:F2:2D:2A:71:45:01:B8:90:9C:59:A5:35:7E:03:E5:83:80:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dbb5573c-c694-319f-9142-5b684a5de9fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:40:50:a0:c8:11:8e:40:88:a7:5c:d2:43:e8:fe:62:ad:fc: 12:28:e6:75:9f:00:de:d4:2a:78:77:28:7e:0c:25:1d:be:d1: 6e:28:ed:38:46:45:d3:25:ce:70:1d:2b:8f:0a:a3:3f:4b:7a: cf:74:6c:38:fa:99:b5:5c:b4:c9:8c:31:01:50:c5:71:6b:9d: 38:1d:92:e4:78:71:af:76:07:85:82:d6:ab:22:52:d6:bc:c9: 6a:d4:3c:04:ed:9c:ef:a6:8d:48:d0:89:5d:2f:2a:17:0d:41: e9:67:0d:46:fb:fc:57:97:89:c7:57:a9:a2:f4:06:f3:8b:2c: a8:65:0a:ff:9d:2f:15:e1:20:2c:af:29:c6:4f:8b:17:8e:85: 77:fb:4b:44:46:fb:db:f3:9b:73:82:bb:9d:7c:64:06:92:fe: eb:75:45:a1:9d:f2:6c:dc:2e:de:fd:58:46:cf:d2:38:55:7f: ba:43:da:c3:62:63:3d:2e:bb:1b:1e:3e:5a:ac:1e:d0:45:be: b8:bb:42:92:56:11:5b:1c:80:4b:3b:48:47:82:3f:85:c5:85: de:ac:e2:a6:81:c2:20:a4:54:a8:6c:ed:7d:2e:40:3b:c9:f8: 7f:d1:ef:95:04:62:2a:fe:ad:1e:38:c1:ae:2b:2b:33:16:59: 2a:91:e5:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu2fohsA17iwt3UHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTEwMTA3MTk0NloXDTI2MDEzMDA4MTk0NlowLzEtMCsGA1UEAxMk MDEyODhhOTQtYzg4MC00ZGZhLTgyMzUtZDI0NWYxYWU3ODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaGSUwGfU4eNmnUMlcrJbTIVtVnyHEJvLVLd ZEYxJ9choN0yTRqgLtue5qsUxTeO/hvH4YhPR934jOotU3EZCs+HUQGQQyOpn+QZ 6GgUooTRF/uNHsmbl0pwuEm/UQ0qXH0tis8EmqejwpBu4+Rs1c2P7QYp2sEJhVbN B5bzcz0CZme75CpJpi9Gm04L3v/1q4HuA2Dm5KZxQA9Fha5nKRhZK8uCqnnatR/D +oZp6kmvga+z9fyute5hI6OHiyTUepyFJU3GLsGp0DBWl/pLQTPSgijZ/Pv5ePcP RNIL70IxUTjuzo2C7qjt06t0LxXo0EXBnEsK69w7XXMJnULrYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLy8i0qcUUBuJCcWaU1fgPlg4AFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGJiNTU3M2MtYzY5NC0z MTlmLTkxNDItNWI2ODRhNWRlOWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpAUKDIEY5AiKdc0kPo/mKt/BIo5nWfAN7UKnh3KH4MJR2+0W4o7ThG RdMlznAdK48Koz9Les90bDj6mbVctMmMMQFQxXFrnTgdkuR4ca92B4WC1qsiUta8 yWrUPATtnO+mjUjQiV0vKhcNQelnDUb7/FeXicdXqaL0BvOLLKhlCv+dLxXhICyv KcZPixeOhXf7S0RG+9vzm3OCu518ZAaS/ut1RaGd8mzcLt79WEbP0jhVf7pD2sNi Yz0uuxsePlqsHtBFvri7QpJWEVscgEs7SEeCP4XFhd6s4qaBwiCkVKhs7X0uQDvJ +H/R75UEYir+rR44wa4rKzMWWSqR5RE= -----END CERTIFICATE-----Generated at Wed Nov 5 03:22:57 2025 by rpki-client