$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/188eb713-ed72-3553-9db1-4d6059ecb5bb.roa File: 188eb713-ed72-3553-9db1-4d6059ecb5bb.roa (raw, json) Hash identifier: ZurivVSfKYptG4iof4o9483GMpSiu8hJHBWjPgMwUIU= Subject key identifier: E3:1D:FF:72:A9:ED:2F:24:9F:BC:D3:F8:FC:9C:28:31:4D:15:68:53 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B741ED5FD039A169AA6A94380 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/188eb713-ed72-3553-9db1-4d6059ecb5bb.roa Signing time: Wed 08 Oct 2025 12:43:36 +0000 ROA not before: Wed 08 Oct 2025 12:43:36 +0000 ROA not after: Tue 06 Jan 2026 13:43:36 +0000 asID: 55154 IP address blocks: 172.94.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:1e:d5:fd:03:9a:16:9a:a6:a9:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 8 12:43:36 2025 GMT Not After : Jan 6 13:43:36 2026 GMT Subject: CN=b77d4824-2d20-477d-b328-898f6c8d5cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:eb:65:a9:16:67:63:21:57:12:06:1b:10:ef: 3c:68:7a:a7:99:9c:d4:2e:6b:4b:d7:c7:b8:d2:63: 71:b2:e9:49:79:8f:48:c0:21:8f:65:22:ed:b9:56: ce:0d:21:a9:36:47:76:13:5f:af:ed:b2:01:bf:81: 3a:12:8c:ce:3f:ea:04:3a:51:fe:f9:8b:01:37:f6: b5:be:bd:53:74:e7:03:dd:0a:97:da:de:20:40:7d: 8c:e7:d2:e7:38:cb:c6:3c:fc:d0:08:0c:c1:3a:0b: 7b:ef:52:04:33:db:20:c7:af:2d:d5:59:f2:ef:b0: d6:12:94:8f:f4:5a:4b:9a:35:0b:07:49:33:8b:72: 09:8c:8f:73:09:07:0c:4f:4c:7f:4b:66:f2:11:76: c2:6b:07:07:20:e0:ea:e9:34:88:66:26:24:a8:86: 63:ca:bb:2b:c4:3e:ca:7c:45:ab:b6:c7:4a:5b:01: 48:4d:0f:7d:81:ff:8f:2c:f7:27:b0:35:41:38:b2: e3:bb:93:3a:f1:d1:17:03:f0:54:4e:c8:b7:0c:cf: c1:ca:5e:71:3c:40:47:98:f1:c7:a0:33:6e:49:19: c5:d7:a6:0b:dd:74:48:b9:07:64:a7:6a:19:7b:5c: a7:1e:e2:85:a6:f1:a5:a5:34:a5:99:d6:f0:db:2f: 70:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1D:FF:72:A9:ED:2F:24:9F:BC:D3:F8:FC:9C:28:31:4D:15:68:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/188eb713-ed72-3553-9db1-4d6059ecb5bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:4e:e7:4e:00:bc:e7:2c:05:16:e8:c2:6a:7b:4a:fc:ed:b7: 93:73:40:4e:c8:55:5b:37:dc:5f:15:a8:ca:e4:2d:5a:12:87: d4:1d:b7:d5:2c:52:11:bc:78:88:f1:3d:05:b4:7c:85:20:b3: 52:0e:0b:8e:0f:83:b0:41:83:a3:7f:ab:c8:df:6a:0e:ee:12: 2c:01:22:33:92:19:3c:56:11:5f:b6:93:96:b1:11:03:1b:6b: 10:85:f1:c2:b6:b5:ab:63:67:21:22:45:4f:95:20:1b:d6:0e: ac:0c:a4:08:08:7c:08:5b:a6:53:84:78:23:e4:b8:73:b5:54: d2:8b:38:f4:27:87:fb:f7:86:3c:af:b6:16:eb:f3:a0:73:36: 56:f8:b5:2f:67:a9:52:ee:92:f3:e0:83:01:4f:dd:3c:14:22: 52:69:55:22:56:94:df:7e:72:ef:08:f9:1a:5e:9f:74:f8:07: 26:b8:e0:fd:44:d9:34:50:54:eb:89:da:6c:36:16:c3:c4:46: c2:8b:8d:a4:3d:8e:cc:ad:76:6a:79:fe:3f:a6:ad:2c:fd:1c: c3:b2:70:91:90:73:35:d0:34:37:f5:6f:fd:57:d6:47:91:3b: 68:6a:41:05:8a:8b:5c:86:ab:e7:eb:83:39:3f:1e:5d:54:66: 94:db:ee:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0HtX9A5oWmqapQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAwODEyNDMzNloXDTI2MDEwNjEzNDMzNlowLzEtMCsGA1UEAxMk Yjc3ZDQ4MjQtMmQyMC00NzdkLWIzMjgtODk4ZjZjOGQ1Y2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAietlqRZnYyFXEgYbEO88aHqnmZzULmtL18e4 0mNxsulJeY9IwCGPZSLtuVbODSGpNkd2E1+v7bIBv4E6EozOP+oEOlH++YsBN/a1 vr1TdOcD3QqX2t4gQH2M59LnOMvGPPzQCAzBOgt771IEM9sgx68t1Vny77DWEpSP 9FpLmjULB0kzi3IJjI9zCQcMT0x/S2byEXbCawcHIODq6TSIZiYkqIZjyrsrxD7K fEWrtsdKWwFITQ99gf+PLPcnsDVBOLLju5M68dEXA/BUTsi3DM/Byl5xPEBHmPHH oDNuSRnF16YL3XRIuQdkp2oZe1ynHuKFpvGlpTSlmdbw2y9wOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMd/3Kp7S8kn7zT+PycKDFNFWhTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTg4ZWI3MTMtZWQ3Mi0z NTUzLTlkYjEtNGQ2MDU5ZWNiNWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5O504AvOcsBRbowmp7Svztt5NzQE7IVVs33F8VqMrkLVoSh9Qdt9Us UhG8eIjxPQW0fIUgs1IOC44Pg7BBg6N/q8jfag7uEiwBIjOSGTxWEV+2k5axEQMb axCF8cK2tatjZyEiRU+VIBvWDqwMpAgIfAhbplOEeCPkuHO1VNKLOPQnh/v3hjyv thbr86BzNlb4tS9nqVLukvPggwFP3TwUIlJpVSJWlN9+cu8I+Rpen3T4Bya44P1E 2TRQVOuJ2mw2FsPERsKLjaQ9jsytdmp5/j+mrSz9HMOycJGQczXQNDf1b/1X1keR O2hqQQWKi1yGq+frgzk/Hl1UZpTb7go= -----END CERTIFICATE-----Generated at Mon Oct 20 05:10:22 2025 by rpki-client