$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/37f5f60d-78ab-3d8b-85f7-6e5372bbce5f.roa File: 37f5f60d-78ab-3d8b-85f7-6e5372bbce5f.roa (raw, json) Hash identifier: NHqkmUAvE3EMcncKw7stD0IzpiLfbdC2pSTIq9+cmTs= Subject key identifier: 5B:FA:9A:AB:BF:36:A9:54:45:2A:27:79:86:7C:D8:7B:9B:05:17:30 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B795039382B76041FFD3951C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/37f5f60d-78ab-3d8b-85f7-6e5372bbce5f.roa Signing time: Fri 10 Oct 2025 09:22:09 +0000 ROA not before: Fri 10 Oct 2025 09:22:09 +0000 ROA not after: Thu 08 Jan 2026 10:22:09 +0000 asID: 208185 IP address blocks: 172.94.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:50:39:38:2b:76:04:1f:fd:39:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 09:22:09 2025 GMT Not After : Jan 8 10:22:09 2026 GMT Subject: CN=25a4d96a-af7d-40fd-85ee-7c82207cfb67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a4:c2:3d:7a:17:59:c3:87:ab:e7:de:77:59: 9c:21:2a:f6:49:00:01:be:73:35:48:ec:d6:1b:5e: a0:ad:2e:c2:a2:b7:13:b2:fa:5d:9b:e8:38:f7:6d: 20:43:9d:7c:72:03:e3:cc:29:74:92:56:d9:dc:3c: e1:7a:3b:8c:aa:59:ff:d3:e5:06:89:04:2c:cd:5d: 81:c4:de:c3:81:f9:26:9b:e7:5b:4b:50:f8:49:5c: c2:36:3a:41:6a:2e:0c:01:11:97:93:2e:b3:9a:94: 09:f9:82:94:f1:76:25:e4:72:2d:63:bb:4c:76:25: a9:99:c0:9b:c0:9f:eb:df:e9:cb:15:97:a5:ab:10: 53:87:54:44:87:97:76:bd:92:53:b5:18:d0:13:e0: 3b:c3:d7:cc:79:0b:1c:4f:bf:37:01:9b:f0:3f:1f: ee:57:2d:d8:9c:75:a5:94:56:ec:fc:b9:31:c4:61: 15:9f:34:f0:6c:d0:6b:86:b4:9f:0c:e8:e1:3f:85: cd:0d:27:c8:26:94:4b:d4:87:bc:48:a1:0f:3f:fd: cc:bf:e4:ff:65:e1:04:23:a9:b9:89:95:d6:5c:a8: 82:9f:97:1c:d7:d4:d7:a3:65:a7:6a:c7:49:5d:52: fd:67:cb:c4:67:d8:c9:1b:8b:3b:d0:0b:0b:c4:e6: a5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FA:9A:AB:BF:36:A9:54:45:2A:27:79:86:7C:D8:7B:9B:05:17:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/37f5f60d-78ab-3d8b-85f7-6e5372bbce5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b1:29:37:53:51:c7:2b:5c:ab:6e:e4:f7:24:9b:9b:31:e5: 53:6d:58:a8:ad:b6:7e:84:b6:c9:8d:68:dd:53:1c:8a:e8:21: 82:91:8c:67:15:04:fe:51:26:66:0e:fa:d1:90:6a:7e:3d:fb: bc:41:6d:d7:cc:1a:47:32:1b:0a:e1:20:2e:9f:91:fa:53:fb: 45:54:31:6b:f0:86:0e:d8:85:eb:a8:74:17:19:4d:3e:11:54: 42:e3:a8:1e:37:a1:47:35:4e:ce:6d:13:88:f5:d2:e6:e6:c0: 03:89:9e:d0:fd:fa:e3:91:4a:62:f3:43:30:d4:3d:28:61:5a: 29:09:7c:77:b5:40:1c:6d:89:88:53:e5:a6:b4:37:20:b1:c1: 87:1f:9a:d6:60:47:0d:2c:de:ed:6d:59:f2:ec:a1:cb:fe:74: 80:67:77:c1:da:61:73:06:48:ea:d2:52:14:0f:76:41:60:e2: 53:7b:02:15:e9:22:86:da:29:82:d3:89:ed:22:67:35:64:0b: bf:71:15:b6:6e:94:88:52:5b:17:72:d7:28:f3:76:1c:0a:c1: 23:68:bc:4d:7c:b4:d1:12:78:54:06:03:89:10:6e:1c:90:72: f0:7b:bf:88:7f:d4:45:a7:97:29:9a:f9:d7:fd:c6:af:f2:aa: 98:a3:67:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5UDk4K3YEH/05UcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxMDA5MjIwOVoXDTI2MDEwODEwMjIwOVowLzEtMCsGA1UEAxMk MjVhNGQ5NmEtYWY3ZC00MGZkLTg1ZWUtN2M4MjIwN2NmYjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aTCPXoXWcOHq+fed1mcISr2SQABvnM1SOzW G16grS7CorcTsvpdm+g4920gQ518cgPjzCl0klbZ3DzhejuMqln/0+UGiQQszV2B xN7Dgfkmm+dbS1D4SVzCNjpBai4MARGXky6zmpQJ+YKU8XYl5HItY7tMdiWpmcCb wJ/r3+nLFZelqxBTh1REh5d2vZJTtRjQE+A7w9fMeQscT783AZvwPx/uVy3YnHWl lFbs/LkxxGEVnzTwbNBrhrSfDOjhP4XNDSfIJpRL1Ie8SKEPP/3Mv+T/ZeEEI6m5 iZXWXKiCn5cc19TXo2WnasdJXVL9Z8vEZ9jJG4s70AsLxOalawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFv6mqu/NqlURSoneYZ82HubBRcwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzdmNWY2MGQtNzhhYi0z ZDhiLTg1ZjctNmU1MzcyYmJjZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF57MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGxKTdTUccrXKtu5Pckm5sx5VNtWKittn6EtsmNaN1THIroIYKRjGcV BP5RJmYO+tGQan49+7xBbdfMGkcyGwrhIC6fkfpT+0VUMWvwhg7YheuodBcZTT4R VELjqB43oUc1Ts5tE4j10ubmwAOJntD9+uORSmLzQzDUPShhWikJfHe1QBxtiYhT 5aa0NyCxwYcfmtZgRw0s3u1tWfLsocv+dIBnd8HaYXMGSOrSUhQPdkFg4lN7AhXp IobaKYLTie0iZzVkC79xFbZulIhSWxdy1yjzdhwKwSNovE18tNESeFQGA4kQbhyQ cvB7v4h/1EWnlyma+df9xq/yqpijZ9I= -----END CERTIFICATE-----Generated at Mon Oct 20 12:48:47 2025 by rpki-client