$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c4bbda0-0e60-3313-ba85-f2fd1390a439.roa File: 3c4bbda0-0e60-3313-ba85-f2fd1390a439.roa (raw, json) Hash identifier: 9n8p+rhW1E1v5B3/8O70klNeTfGHrYlVClCg3xy1rl8= Subject key identifier: 4B:75:AB:1B:00:36:8C:65:30:0C:96:76:DD:03:69:C8:93:07:83:2C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B741E384CE733A94798FE59E0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c4bbda0-0e60-3313-ba85-f2fd1390a439.roa Signing time: Wed 08 Oct 2025 12:42:21 +0000 ROA not before: Wed 08 Oct 2025 12:42:21 +0000 ROA not after: Tue 06 Jan 2026 13:42:21 +0000 asID: 55154 IP address blocks: 172.94.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:1e:38:4c:e7:33:a9:47:98:fe:59:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 8 12:42:21 2025 GMT Not After : Jan 6 13:42:21 2026 GMT Subject: CN=7a7e04fd-2ec6-4c7e-a47d-32d5cd2aaf98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c3:79:a4:63:9d:3d:3b:16:72:ca:63:62:01: 0b:1d:24:44:f7:5f:d5:ea:59:ff:f0:08:28:cf:2e: 09:2f:14:bb:f0:87:ee:b5:e1:1c:5c:64:7b:36:fa: bf:c8:08:22:a7:c9:3d:f8:fc:18:e6:6a:83:91:2e: cd:fa:9f:c5:90:30:b1:80:45:12:fd:2f:6d:3f:e7: 90:50:f8:ea:29:43:a2:86:32:67:bd:1d:24:c0:02: 99:c0:39:ed:b4:57:ee:1b:b5:51:0d:84:75:19:2c: 89:f8:d8:4d:6d:3b:37:9a:50:20:94:93:a0:f9:62: b9:4c:36:f6:12:0c:f8:a7:5a:e3:1b:e6:33:9a:6e: 28:ac:e5:cf:9a:4d:fa:dd:e3:80:92:95:b5:49:68: a0:cb:19:a7:67:69:aa:13:23:ce:3d:ad:31:22:d1: 30:9f:90:80:0e:a9:10:72:8a:c4:d1:d4:5d:dc:52: be:ee:db:e3:57:2b:f1:d5:7d:74:c8:61:cd:62:87: 8d:fa:a4:26:8a:6a:db:61:e5:e2:00:f5:33:dc:64: de:da:c1:ce:77:5e:dc:24:37:ed:fc:50:58:be:55: 3d:f2:a6:16:e0:91:bd:6e:b1:6a:3a:98:67:65:5d: cf:79:04:f8:bc:2f:63:55:ab:4a:e4:88:79:ed:1c: aa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:75:AB:1B:00:36:8C:65:30:0C:96:76:DD:03:69:C8:93:07:83:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c4bbda0-0e60-3313-ba85-f2fd1390a439.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:4f:92:8b:6f:3b:56:a0:ed:16:d5:91:ec:d9:42:ba:d2:c7: 0b:43:52:d6:53:d4:00:42:06:fd:40:e9:c0:44:9d:b4:e6:65: 1b:ff:fe:a9:38:93:65:ba:ba:e2:90:03:c6:9a:26:93:bd:18: 12:51:81:f1:c3:27:b7:7a:c3:53:8f:5a:b0:1e:89:90:a3:75: f9:a9:9c:b1:97:76:15:1f:c2:47:7a:04:f3:69:07:c4:02:dd: 51:2c:ed:56:fe:92:91:b2:a3:24:d7:17:8b:c5:8e:82:bd:e7: b9:f8:79:5a:79:00:08:03:be:c0:a6:c8:00:76:d8:62:37:b7: 89:8c:61:f4:05:7c:55:2e:ff:96:cc:06:69:b1:42:ba:45:e7: 0c:1e:7c:50:4b:d5:55:19:49:20:54:b8:56:de:39:33:39:04: 20:c4:51:86:17:b9:f5:07:8b:5a:b7:fd:59:6d:df:b4:4c:51: 57:8f:ef:1b:c9:15:48:8d:61:5b:85:4d:78:00:41:cb:1a:1b: a2:23:a5:56:95:be:84:9c:10:b2:b6:e8:8b:49:00:f4:3b:ab: 77:57:d3:d8:ed:2c:03:85:43:2d:37:de:5a:d6:44:50:58:3e: 03:6f:fb:86:b5:91:0e:15:f5:28:97:0e:3d:f8:3f:34:82:20: 3d:ab:86:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0HjhM5zOpR5j+WeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAwODEyNDIyMVoXDTI2MDEwNjEzNDIyMVowLzEtMCsGA1UEAxMk N2E3ZTA0ZmQtMmVjNi00YzdlLWE0N2QtMzJkNWNkMmFhZjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMN5pGOdPTsWcspjYgELHSRE91/V6ln/8Ago zy4JLxS78IfuteEcXGR7Nvq/yAgip8k9+PwY5mqDkS7N+p/FkDCxgEUS/S9tP+eQ UPjqKUOihjJnvR0kwAKZwDnttFfuG7VRDYR1GSyJ+NhNbTs3mlAglJOg+WK5TDb2 Egz4p1rjG+Yzmm4orOXPmk363eOAkpW1SWigyxmnZ2mqEyPOPa0xItEwn5CADqkQ corE0dRd3FK+7tvjVyvx1X10yGHNYoeN+qQmimrbYeXiAPUz3GTe2sHOd17cJDft /FBYvlU98qYW4JG9brFqOphnZV3PeQT4vC9jVatK5Ih57Ryq6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEt1qxsANoxlMAyWdt0DaciTB4MsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2M0YmJkYTAtMGU2MC0z MzEzLWJhODUtZjJmZDEzOTBhNDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlPkotvO1ag7RbVkezZQrrSxwtDUtZT1ABCBv1A6cBEnbTmZRv//qk4 k2W6uuKQA8aaJpO9GBJRgfHDJ7d6w1OPWrAeiZCjdfmpnLGXdhUfwkd6BPNpB8QC 3VEs7Vb+kpGyoyTXF4vFjoK957n4eVp5AAgDvsCmyAB22GI3t4mMYfQFfFUu/5bM BmmxQrpF5wwefFBL1VUZSSBUuFbeOTM5BCDEUYYXufUHi1q3/Vlt37RMUVeP7xvJ FUiNYVuFTXgAQcsaG6IjpVaVvoScELK26ItJAPQ7q3dX09jtLAOFQy033lrWRFBY PgNv+4a1kQ4V9SiXDj34PzSCID2rhh0= -----END CERTIFICATE-----Generated at Mon Oct 20 05:10:28 2025 by rpki-client