$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4b85273e-b126-38a1-978e-a5343488d598.roa File: 4b85273e-b126-38a1-978e-a5343488d598.roa (raw, json) Hash identifier: OMyce2qljJsyHUlq+EaHsg9RP73fyc/qfe1KMPW+zXA= Subject key identifier: 52:1E:81:57:4C:E9:4E:93:2B:09:11:C6:D9:34:08:67:FB:AF:3E:19 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B741F20B85059B25953BCC980 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4b85273e-b126-38a1-978e-a5343488d598.roa Signing time: Wed 08 Oct 2025 12:44:11 +0000 ROA not before: Wed 08 Oct 2025 12:44:11 +0000 ROA not after: Tue 06 Jan 2026 13:44:11 +0000 asID: 55154 IP address blocks: 172.94.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:1f:20:b8:50:59:b2:59:53:bc:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 8 12:44:11 2025 GMT Not After : Jan 6 13:44:11 2026 GMT Subject: CN=7bb3f902-02ec-46fa-8ff1-e61e1e976683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e9:3f:e0:f2:6a:f4:3c:68:d3:50:0f:8f:25: e6:02:5e:be:b7:b5:be:b4:f0:18:79:d4:92:23:46: 86:7c:71:06:36:28:75:db:d1:98:1b:e2:6c:f2:7f: db:ae:88:20:11:4f:d9:a5:2c:6a:8c:45:9f:86:64: 5e:cd:aa:3b:15:25:f1:9b:54:01:8f:eb:ca:22:f7: a3:80:bc:d6:f8:41:9a:3e:01:ed:b6:54:1b:1c:03: 82:fe:ed:b1:6b:e8:db:f0:0d:17:6b:55:b3:e1:c0: e4:6c:87:e2:53:70:68:2a:49:de:d5:98:ab:93:0e: c8:3e:b7:4b:0b:c1:f0:1a:0b:72:d6:ca:07:41:92: 6a:d1:30:11:cd:3c:ed:4a:df:51:74:98:4c:42:cb: ce:88:e7:54:de:94:58:4c:b9:55:61:cd:88:c3:e7: 2d:f0:3f:be:d2:95:c4:f3:1e:ac:89:32:61:38:42: 7f:08:59:62:b9:19:82:29:5a:18:c8:3a:71:56:61: d5:aa:bf:a0:8e:1e:e4:4e:9f:2d:67:a8:46:8c:9f: 6e:b2:18:37:ae:7e:4e:36:ba:5e:b7:63:04:d1:af: e4:c9:c3:51:2c:12:36:aa:a8:73:7c:85:a7:00:20: 41:4b:20:41:16:a0:03:0a:16:dd:f0:03:38:4b:f7: f7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1E:81:57:4C:E9:4E:93:2B:09:11:C6:D9:34:08:67:FB:AF:3E:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4b85273e-b126-38a1-978e-a5343488d598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f8:89:95:7e:4a:2f:98:0b:c4:ee:7c:20:7c:ed:0f:30:6b: cc:46:11:40:89:5c:6f:12:95:bf:d3:42:d5:6a:c6:af:c8:16: 57:b4:93:04:cf:16:ed:a9:99:85:7a:4f:8a:07:71:69:f5:22: 4f:16:cc:6d:bb:29:15:a9:05:a7:c9:ae:e0:9d:08:67:68:7f: 73:e2:7c:3c:5d:81:51:6e:0a:30:41:e9:96:c7:43:77:09:8a: 0c:8a:31:6c:1d:b3:a0:8e:10:bf:04:04:1b:6d:47:e1:f4:7a: 99:9d:65:56:e4:16:9d:ab:2d:aa:f0:75:9e:b6:4a:29:ad:f9: 1c:de:14:73:34:54:c5:b8:9f:de:92:39:5f:d2:57:4b:87:41: 28:fa:a7:3b:80:56:4f:7c:6c:fa:c1:06:79:b8:c9:be:4b:6a: 47:5c:4f:3f:70:01:49:92:5e:48:a0:3b:00:a6:ee:a1:f0:2c: 68:ff:2f:62:96:81:95:3b:c5:8c:d5:e1:ad:f1:92:29:6c:0a: e7:0b:43:b1:fd:f8:8c:73:bc:98:89:1d:12:6c:15:71:63:f0: 02:12:c9:48:f4:10:0a:29:9f:6e:76:2a:c0:66:c0:6a:33:52: d2:96:7b:de:e3:b7:27:f2:45:c0:59:04:4c:11:b0:1e:b0:54: 4a:10:4e:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0HyC4UFmyWVO8yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAwODEyNDQxMVoXDTI2MDEwNjEzNDQxMVowLzEtMCsGA1UEAxMk N2JiM2Y5MDItMDJlYy00NmZhLThmZjEtZTYxZTFlOTc2NjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOk/4PJq9Dxo01APjyXmAl6+t7W+tPAYedSS I0aGfHEGNih129GYG+Js8n/broggEU/ZpSxqjEWfhmRezao7FSXxm1QBj+vKIvej gLzW+EGaPgHttlQbHAOC/u2xa+jb8A0Xa1Wz4cDkbIfiU3BoKkne1Zirkw7IPrdL C8HwGgty1soHQZJq0TARzTztSt9RdJhMQsvOiOdU3pRYTLlVYc2Iw+ct8D++0pXE 8x6siTJhOEJ/CFliuRmCKVoYyDpxVmHVqr+gjh7kTp8tZ6hGjJ9ushg3rn5ONrpe t2ME0a/kycNRLBI2qqhzfIWnACBBSyBBFqADChbd8AM4S/f3nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIegVdM6U6TKwkRxtk0CGf7rz4ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGI4NTI3M2UtYjEyNi0z OGExLTk3OGUtYTUzNDM0ODhkNTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHD4iZV+Si+YC8TufCB87Q8wa8xGEUCJXG8Slb/TQtVqxq/IFle0kwTP Fu2pmYV6T4oHcWn1Ik8WzG27KRWpBafJruCdCGdof3PifDxdgVFuCjBB6ZbHQ3cJ igyKMWwds6COEL8EBBttR+H0epmdZVbkFp2rLarwdZ62Simt+RzeFHM0VMW4n96S OV/SV0uHQSj6pzuAVk98bPrBBnm4yb5LakdcTz9wAUmSXkigOwCm7qHwLGj/L2KW gZU7xYzV4a3xkilsCucLQ7H9+IxzvJiJHRJsFXFj8AISyUj0EAopn252KsBmwGoz UtKWe97jtyfyRcBZBEwRsB6wVEoQTkQ= -----END CERTIFICATE-----Generated at Mon Oct 20 05:10:49 2025 by rpki-client