$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a929555f-9352-337b-a8b7-403f6d57c296.roa File: a929555f-9352-337b-a8b7-403f6d57c296.roa (raw, json) Hash identifier: 868dKkkUaZPzs1ULB6BLsGh0kxyvj0Uxl9AyEZ0SulI= Subject key identifier: 84:F8:DB:BC:5B:D9:1E:CC:59:08:87:38:A8:02:04:46:E6:A9:EF:89 Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584BB45D1532C64B783149A89800 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a929555f-9352-337b-a8b7-403f6d57c296.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 394111 IP address blocks: 172.97.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:15:32:c6:4b:78:31:49:a8:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=33233ef1-5f80-482e-beb4-00c0e6f93ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5a:03:d4:ec:11:7f:76:35:ac:96:e0:59:14: 3d:82:66:ba:a3:43:a5:45:3c:08:8a:97:d2:87:41: 53:e4:41:e7:5b:23:55:a7:73:45:b0:8c:84:63:b3: 47:b6:48:01:7e:25:65:45:9d:cc:cf:cb:17:21:b8: 7c:b0:5c:a8:76:af:50:0c:f6:4b:df:8f:ea:d7:ce: 7b:52:25:28:b7:0c:4a:70:ae:08:46:8b:8c:4c:89: 82:3a:a6:d4:94:7e:aa:74:86:f8:6e:8e:67:a6:ec: dc:5f:f1:b5:ba:2a:f1:ba:7e:57:da:af:a2:ec:7c: 96:c5:4f:00:06:ae:95:b8:7a:0f:50:98:10:98:8e: 91:99:a8:d8:63:2b:2a:f9:c1:50:c2:20:1f:8e:5b: ac:7c:89:c2:1d:70:33:1a:a6:08:10:6b:5d:4b:ed: 7e:7e:d0:53:dd:ac:91:4a:e4:0f:4e:66:ad:b0:cb: 7c:b1:3c:3e:57:e4:c0:74:6c:3c:3b:fc:85:24:f1: 75:43:3e:c3:ba:e2:e1:86:73:99:a0:79:fc:e9:8e: 87:e1:56:23:9b:db:58:51:b6:f8:3e:85:ce:79:3d: 81:31:7e:2b:c0:88:bb:37:7a:8f:ed:46:12:7b:bf: 97:e9:27:8d:0e:32:4a:e7:17:5e:89:d6:f7:01:bd: 11:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F8:DB:BC:5B:D9:1E:CC:59:08:87:38:A8:02:04:46:E6:A9:EF:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a929555f-9352-337b-a8b7-403f6d57c296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 172.97.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:71:9b:3f:d5:bd:e3:cf:cf:a1:20:14:cc:28:ee:87:ef:05: 1d:17:3e:f8:b2:0a:00:bc:f6:d4:eb:25:e8:38:a0:49:64:15: 7e:b0:ce:37:c7:8f:09:5e:d0:01:53:84:b7:3d:cf:8e:1a:f6: 6f:61:48:f1:fe:53:3c:a6:6e:97:11:c9:0f:a7:d5:22:9e:0d: 4e:ce:85:3d:2e:0b:15:8b:9e:e1:ae:a0:6b:f9:f0:5d:b5:a5: 4e:25:72:90:19:ce:c5:61:eb:3e:f1:2a:3d:86:7d:cd:52:ea: 1c:cf:81:80:fb:95:98:5b:ba:42:58:ec:fd:25:09:22:4a:5f: f5:ef:38:8b:95:de:df:ab:41:ce:d9:b5:af:c9:ad:8a:bd:a3: 90:4f:41:98:8e:ec:b1:89:38:68:4e:2b:83:10:d3:de:33:3e: 48:bd:65:63:f2:24:be:25:02:9f:2b:a6:ba:17:25:81:0a:cb: 5f:19:50:ac:35:96:4a:73:95:30:7c:bd:8a:eb:50:58:fd:67: fd:d3:ba:a0:c9:a5:7e:5d:df:9f:0b:c9:00:6c:5f:33:d5:1a: 8d:a3:76:50:bb:1d:bd:65:b2:75:4d:32:6e:6e:56:be:23:80: 09:57:68:89:36:dc:f8:3d:a2:a0:3c:cc:62:fd:35:c7:78:52: 18:e4:59:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRUyxkt4MUmomAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MzMyMzNlZjEtNWY4MC00ODJlLWJlYjQtMDBjMGU2ZjkzYWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVoD1OwRf3Y1rJbgWRQ9gma6o0OlRTwIipfS h0FT5EHnWyNVp3NFsIyEY7NHtkgBfiVlRZ3Mz8sXIbh8sFyodq9QDPZL34/q1857 UiUotwxKcK4IRouMTImCOqbUlH6qdIb4bo5npuzcX/G1uirxun5X2q+i7HyWxU8A Bq6VuHoPUJgQmI6RmajYYysq+cFQwiAfjlusfInCHXAzGqYIEGtdS+1+ftBT3ayR SuQPTmatsMt8sTw+V+TAdGw8O/yFJPF1Qz7DuuLhhnOZoHn86Y6H4VYjm9tYUbb4 PoXOeT2BMX4rwIi7N3qP7UYSe7+X6SeNDjJK5xdeidb3Ab0RmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIT427xb2R7MWQiHOKgCBEbmqe+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYTkyOTU1NWYtOTM1Mi0z MzdiLWE4YjctNDAzZjZkNTdjMjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErGEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZxmz/VvePPz6EgFMwo7ofvBR0XPviyCgC89tTrJeg4oElkFX6wzjfH jwle0AFThLc9z44a9m9hSPH+UzymbpcRyQ+n1SKeDU7OhT0uCxWLnuGuoGv58F21 pU4lcpAZzsVh6z7xKj2Gfc1S6hzPgYD7lZhbukJY7P0lCSJKX/XvOIuV3t+rQc7Z ta/JrYq9o5BPQZiO7LGJOGhOK4MQ094zPki9ZWPyJL4lAp8rproXJYEKy18ZUKw1 lkpzlTB8vYrrUFj9Z/3TuqDJpX5d358LyQBsXzPVGo2jdlC7Hb1lsnVNMm5uVr4j gAlXaIk23Pg9oqA8zGL9Ncd4UhjkWfo= -----END CERTIFICATE-----Generated at Wed Nov 5 11:06:08 2025 by rpki-client