$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5d1c7551-9fd6-3193-8478-64188ef9577d.roa File: 5d1c7551-9fd6-3193-8478-64188ef9577d.roa (raw, json) Hash identifier: 9BwFr/Tgct6yaiT7KDuzU6IySpYyXPbyO7Y3gvDqk78= Subject key identifier: AC:AA:7B:26:1C:C9:E0:95:55:14:B3:71:8F:A1:EB:42:39:81:FC:C6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B797EA8F07EE14FC3D7EB2200 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5d1c7551-9fd6-3193-8478-64188ef9577d.roa Signing time: Fri 10 Oct 2025 10:55:43 +0000 ROA not before: Fri 10 Oct 2025 10:55:43 +0000 ROA not after: Thu 08 Jan 2026 11:55:43 +0000 asID: 11972 IP address blocks: 172.94.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:7e:a8:f0:7e:e1:4f:c3:d7:eb:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 10:55:43 2025 GMT Not After : Jan 8 11:55:43 2026 GMT Subject: CN=d5f13dee-6b28-483a-8f05-7ef4f35ad09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:43:ae:58:cd:d7:b9:90:a7:bb:4f:19:9c:16: 59:32:86:9b:49:35:ae:21:ba:11:3a:1f:4f:3e:ed: 8d:1a:da:2d:4e:fb:b4:fd:00:e4:e6:0e:5e:de:d9: 79:a4:fd:eb:de:f3:d7:0d:e4:34:25:75:28:7a:18: bc:64:70:a5:87:cf:5e:ab:1a:3f:08:f5:26:3c:fd: 75:b7:db:45:b6:0c:6b:c4:e4:14:32:35:0d:c1:a8: ff:ef:d5:1a:1c:39:24:a3:e8:f7:10:7e:53:2e:44: bc:3e:9c:24:d6:0b:ea:96:93:b1:74:89:78:6b:97: 02:ba:72:f2:fe:e9:28:75:a2:b4:54:f2:ce:a7:fb: 52:2c:71:f2:d1:0f:47:96:1b:5b:53:d4:76:df:88: c0:3f:16:b4:35:86:98:9a:fe:aa:25:48:46:59:21: 8f:32:e5:b7:b2:4f:69:0c:f7:ba:7a:01:7b:9b:c0: 1b:00:79:ed:a4:37:ad:c3:52:30:f5:0b:00:7b:ca: 9b:d7:39:34:8f:92:00:ab:2f:c9:5a:17:7f:d6:45: 9f:38:7c:2a:80:b3:5c:9e:17:35:d0:fe:71:e4:13: 87:92:6a:08:2b:9f:ed:fa:e5:e0:aa:1c:18:1d:c5: 90:bd:fe:21:59:64:a4:bd:ed:14:bf:69:15:05:77: 5e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AA:7B:26:1C:C9:E0:95:55:14:B3:71:8F:A1:EB:42:39:81:FC:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5d1c7551-9fd6-3193-8478-64188ef9577d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:31:30:1c:17:44:35:72:cb:c1:0a:aa:a5:5a:39:73:16:3d: 03:4d:d9:cd:71:81:b4:15:d8:cd:d0:3c:e0:64:2e:70:a3:71: 83:eb:b7:cc:16:a2:5d:c1:91:50:7f:1c:24:bc:ab:60:20:3e: bb:86:db:16:78:fc:f8:3a:80:d9:b4:03:c4:11:1a:62:67:db: 60:89:e5:62:d2:d4:b3:67:04:86:52:6f:e3:a3:fd:90:ca:0e: a7:4e:84:6a:d7:88:43:09:6d:de:58:a4:82:b3:dd:84:35:0f: 9c:3c:b5:76:9f:1c:eb:a7:df:4d:0d:6c:d7:f2:6a:8d:be:86: fe:27:1c:6f:01:73:52:44:37:b2:91:af:51:75:c2:98:34:ee: 87:d2:2f:a2:f1:92:b2:99:42:b1:d0:b9:90:00:3d:e5:43:de: 03:d8:10:71:33:df:17:4d:8c:72:d1:76:c1:dd:70:67:02:7f: 3a:9d:9d:69:e3:a8:15:f6:2c:0f:3b:56:da:e4:7d:1e:e8:4f: c1:dc:04:2a:85:7d:2d:a9:9a:3d:f5:1d:58:b1:f1:40:78:91: 96:f7:f7:0a:85:d3:9a:d9:a5:17:fa:c1:9b:ff:b7:da:a5:1f: 0a:72:a9:d3:72:f7:3f:24:b6:69:fe:ce:73:c2:8b:7a:13:73: 95:cc:2f:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5fqjwfuFPw9frIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxMDEwNTU0M1oXDTI2MDEwODExNTU0M1owLzEtMCsGA1UEAxMk ZDVmMTNkZWUtNmIyOC00ODNhLThmMDUtN2VmNGYzNWFkMDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkOuWM3XuZCnu08ZnBZZMoabSTWuIboROh9P Pu2NGtotTvu0/QDk5g5e3tl5pP3r3vPXDeQ0JXUoehi8ZHClh89eqxo/CPUmPP11 t9tFtgxrxOQUMjUNwaj/79UaHDkko+j3EH5TLkS8Ppwk1gvqlpOxdIl4a5cCunLy /ukodaK0VPLOp/tSLHHy0Q9HlhtbU9R234jAPxa0NYaYmv6qJUhGWSGPMuW3sk9p DPe6egF7m8AbAHntpDetw1Iw9QsAe8qb1zk0j5IAqy/JWhd/1kWfOHwqgLNcnhc1 0P5x5BOHkmoIK5/t+uXgqhwYHcWQvf4hWWSkve0Uv2kVBXdeVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyqeyYcyeCVVRSzcY+h60I5gfzGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNWQxYzc1NTEtOWZkNi0z MTkzLTg0NzgtNjQxODhlZjk1NzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgxMBwXRDVyy8EKqqVaOXMWPQNN2c1xgbQV2M3QPOBkLnCjcYPrt8wW ol3BkVB/HCS8q2AgPruG2xZ4/Pg6gNm0A8QRGmJn22CJ5WLS1LNnBIZSb+Oj/ZDK DqdOhGrXiEMJbd5YpIKz3YQ1D5w8tXafHOun300NbNfyao2+hv4nHG8Bc1JEN7KR r1F1wpg07ofSL6LxkrKZQrHQuZAAPeVD3gPYEHEz3xdNjHLRdsHdcGcCfzqdnWnj qBX2LA87VtrkfR7oT8HcBCqFfS2pmj31HVix8UB4kZb39wqF05rZpRf6wZv/t9ql HwpyqdNy9z8ktmn+znPCi3oTc5XML5Q= -----END CERTIFICATE-----Generated at Mon Oct 20 07:48:00 2025 by rpki-client