$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/66b57e5f-d312-37d2-8916-eab10fd17416.roa File: 66b57e5f-d312-37d2-8916-eab10fd17416.roa (raw, json) Hash identifier: CosGEj21h/0bG/V9r/rbT5y8LY+v1/2764HNTBUfDq0= Subject key identifier: FC:C9:A4:DD:88:44:7A:77:7A:14:D8:64:D3:89:0F:5B:C5:82:C0:6E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B797D05DD90F0EFEF7CBF6190 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/66b57e5f-d312-37d2-8916-eab10fd17416.roa Signing time: Fri 10 Oct 2025 10:52:25 +0000 ROA not before: Fri 10 Oct 2025 10:52:25 +0000 ROA not after: Thu 08 Jan 2026 11:52:25 +0000 asID: 11972 IP address blocks: 172.94.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:7d:05:dd:90:f0:ef:ef:7c:bf:61:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 10:52:25 2025 GMT Not After : Jan 8 11:52:25 2026 GMT Subject: CN=1febf4e0-5521-4247-aff8-216187edb0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2e:e5:68:fb:09:48:46:9f:75:1a:67:18:7a: 05:cb:bd:f9:87:71:d8:d6:ae:a9:f2:cd:c1:a7:9b: 08:a0:a2:a9:96:e8:5d:c5:96:24:62:85:4b:06:27: 45:65:dc:77:0b:9c:2b:c3:8c:11:f8:56:8f:4d:39: 01:63:49:c4:d5:92:2e:4b:6b:cb:59:1d:b6:7d:47: a8:8c:6d:f1:b5:63:b8:e7:cf:8c:6a:3b:2b:29:26: 62:80:28:89:9b:00:7e:5e:e7:45:b5:65:9e:7c:ba: 60:b3:96:cb:5e:6e:2b:c8:f6:bf:25:00:6c:05:6d: 1c:d9:8b:28:09:6b:bd:1e:fd:12:ab:71:70:a5:9f: 83:7f:52:45:41:21:6f:c6:3d:4e:67:97:80:d0:a1: 88:68:8e:61:2a:f6:3e:ae:e0:c6:0f:78:51:77:7a: 06:8b:04:46:8f:a3:fd:b4:cf:50:8b:77:0b:09:49: be:b1:fc:d5:a2:fc:8a:b9:d9:c9:45:37:9b:af:0a: f0:46:9d:fc:a7:67:c9:71:ff:7a:60:c8:9d:f9:dd: ef:d6:9e:9f:54:84:72:a7:36:98:16:26:5f:58:d5: 23:83:79:49:5d:a2:3f:be:cf:27:82:61:0e:f1:fd: b1:7d:2c:ec:0c:5f:f3:ad:8e:9f:5f:7b:a3:d3:f5: 29:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C9:A4:DD:88:44:7A:77:7A:14:D8:64:D3:89:0F:5B:C5:82:C0:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/66b57e5f-d312-37d2-8916-eab10fd17416.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:5b:dc:ee:e6:8c:42:8d:d7:e6:28:59:a9:15:06:01:54:75: 0b:d9:ae:63:27:04:cb:3c:e5:6d:93:a4:46:75:9f:5b:e7:83: 49:db:9e:b6:b8:90:5b:9d:d2:4e:93:88:8d:dd:b6:12:26:73: 6b:23:43:29:2e:66:b9:44:7b:26:5d:a8:d4:8a:da:d2:4f:bd: c1:35:ba:83:f4:11:4b:14:e1:f5:a9:84:d3:b3:c4:e7:b4:b4: 05:16:15:d7:84:3d:1b:06:e3:3d:4d:9d:82:d9:de:b2:b2:be: ca:39:98:a3:91:98:fb:38:c7:63:83:53:b0:7e:02:cc:21:61: ad:7c:d1:29:6d:02:2c:27:84:64:bd:ad:71:ee:43:50:56:fb: 3e:08:47:2e:e9:9a:0e:92:bc:7a:10:ac:a8:7b:29:78:bd:28: b2:cb:d9:cf:b4:e9:f2:ec:59:19:ac:87:31:4e:18:98:1f:65: 17:cd:cd:69:a8:65:ce:0c:3b:86:02:fc:6a:03:e1:20:61:e7: 47:82:75:41:68:51:61:bd:3f:9e:63:18:44:d7:f2:87:45:2e: c0:2e:cd:f0:46:37:f8:60:b7:ed:97:48:4e:16:06:15:6b:50: aa:73:fc:a1:8a:ea:22:a4:74:04:41:b0:cb:6e:3c:5e:0c:ad: fe:a5:06:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5fQXdkPDv73y/YZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxMDEwNTIyNVoXDTI2MDEwODExNTIyNVowLzEtMCsGA1UEAxMk MWZlYmY0ZTAtNTUyMS00MjQ3LWFmZjgtMjE2MTg3ZWRiMGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y7laPsJSEafdRpnGHoFy735h3HY1q6p8s3B p5sIoKKpluhdxZYkYoVLBidFZdx3C5wrw4wR+FaPTTkBY0nE1ZIuS2vLWR22fUeo jG3xtWO458+MajsrKSZigCiJmwB+XudFtWWefLpgs5bLXm4ryPa/JQBsBW0c2Yso CWu9Hv0Sq3FwpZ+Df1JFQSFvxj1OZ5eA0KGIaI5hKvY+ruDGD3hRd3oGiwRGj6P9 tM9Qi3cLCUm+sfzVovyKudnJRTebrwrwRp38p2fJcf96YMid+d3v1p6fVIRypzaY FiZfWNUjg3lJXaI/vs8ngmEO8f2xfSzsDF/zrY6fX3uj0/Up+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzJpN2IRHp3ehTYZNOJD1vFgsBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjZiNTdlNWYtZDMxMi0z N2QyLTg5MTYtZWFiMTBmZDE3NDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpb3O7mjEKN1+YoWakVBgFUdQvZrmMnBMs85W2TpEZ1n1vng0nbnra4 kFud0k6TiI3dthImc2sjQykuZrlEeyZdqNSK2tJPvcE1uoP0EUsU4fWphNOzxOe0 tAUWFdeEPRsG4z1NnYLZ3rKyvso5mKORmPs4x2ODU7B+AswhYa180SltAiwnhGS9 rXHuQ1BW+z4IRy7pmg6SvHoQrKh7KXi9KLLL2c+06fLsWRmshzFOGJgfZRfNzWmo Zc4MO4YC/GoD4SBh50eCdUFoUWG9P55jGETX8odFLsAuzfBGN/hgt+2XSE4WBhVr UKpz/KGK6iKkdARBsMtuPF4Mrf6lBqQ= -----END CERTIFICATE-----Generated at Mon Oct 20 15:18:19 2025 by rpki-client