$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bb0680f-47ee-3b8e-9421-ad131c71b57b.roa File: 8bb0680f-47ee-3b8e-9421-ad131c71b57b.roa (raw, json) Hash identifier: EVKzKygpbham394Jf/nif1QAJ+94gGUigKvpi7rFNgU= Subject key identifier: BE:8C:08:2B:83:DA:2D:6E:2B:19:41:11:A7:C7:80:B2:11:D1:AF:37 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B86F94F34C48ECFA0D07EDC80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bb0680f-47ee-3b8e-9421-ad131c71b57b.roa Signing time: Wed 15 Oct 2025 06:48:21 +0000 ROA not before: Wed 15 Oct 2025 06:48:21 +0000 ROA not after: Tue 13 Jan 2026 07:48:21 +0000 asID: 213990 IP address blocks: 172.94.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:f9:4f:34:c4:8e:cf:a0:d0:7e:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 15 06:48:21 2025 GMT Not After : Jan 13 07:48:21 2026 GMT Subject: CN=aa71a6cb-9d06-48e1-baff-3df259618837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4e:f0:b3:7a:cd:6c:f3:be:06:af:d0:2c:da: ab:14:10:c3:ca:90:cb:5d:db:b3:31:a9:80:d0:08: 89:aa:5a:cc:6e:38:64:30:99:30:5b:05:af:82:3c: 3c:c8:4a:a6:56:40:e1:34:71:8d:0c:4e:a6:1d:87: 5d:62:cd:61:5c:52:20:f8:2b:83:fa:df:52:bc:a0: 78:3a:5b:f3:b9:bb:a3:5f:5f:6f:a8:06:ab:f6:54: 03:0e:9a:c7:0a:83:9e:03:4e:b0:cd:d0:5f:35:8e: 5e:6e:4c:56:40:15:05:28:78:45:1e:bd:a2:ac:31: 1e:d7:96:d0:1d:8f:d6:bc:7c:93:71:83:0b:7b:97: 3b:61:f4:8f:e7:1e:cd:c3:75:f8:b8:00:2d:88:70: 26:b3:c8:f7:43:63:af:3a:1e:b2:2e:33:b8:8e:11: 17:6d:5a:56:e6:23:bd:83:ee:8b:5a:56:33:00:c7: a5:7f:3e:6e:f0:cb:43:ea:3b:19:5a:da:d8:08:a1: 6e:0b:92:85:b4:fc:88:e4:c7:7a:94:78:42:03:33: 20:96:76:b8:81:23:c0:da:d7:50:93:9d:71:af:91: a1:ce:e7:af:47:99:5a:a1:b4:6b:34:56:06:15:5d: d1:2f:19:c4:0c:70:bd:63:b6:43:0e:12:0d:19:45: b8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8C:08:2B:83:DA:2D:6E:2B:19:41:11:A7:C7:80:B2:11:D1:AF:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bb0680f-47ee-3b8e-9421-ad131c71b57b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:a7:d2:f8:dc:f2:8a:fc:6c:d1:d0:2b:12:0b:44:d3:77:b2: 87:9d:38:c4:23:3f:17:51:11:0b:86:30:4a:98:4a:0a:50:32: 45:64:f0:78:b3:11:5b:42:7a:2a:2d:31:13:d8:0a:ca:79:e8: d5:35:30:1f:58:ea:dd:de:48:5d:20:5e:96:43:1d:ec:6f:2e: d2:7e:b4:d7:e9:b8:0d:5a:ab:34:8e:5c:d5:50:ce:44:62:e0: 55:e6:13:73:8e:e0:89:f1:50:ff:27:ea:7d:c9:58:e6:8d:36: 85:2a:2a:fc:1d:3d:7a:b0:b6:9f:eb:ad:c3:43:bb:24:54:3d: 5f:7e:4f:ac:4e:4b:b6:da:0f:0d:32:3a:ac:62:8b:8f:00:76: 10:04:95:d4:04:ab:47:74:6e:6a:2c:8b:c4:43:ac:3e:70:60: e5:cd:bd:7b:65:f4:2c:0d:c5:de:55:92:8a:43:1a:c0:86:9c: d3:0e:ca:b9:37:61:99:2d:ae:b0:09:aa:8e:ea:68:b7:89:ab: f0:2b:12:93:70:e5:cb:20:f3:b4:eb:51:ec:6e:6c:7c:35:60: 0c:ac:36:d5:9e:63:f2:e9:c0:85:b5:3e:df:ff:d3:9b:87:d8: b4:4f:42:a9:f0:f3:fe:69:59:90:82:fb:3e:4a:b5:b1:4d:85: 6a:fa:87:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuG+U80xI7PoNB+3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxNTA2NDgyMVoXDTI2MDExMzA3NDgyMVowLzEtMCsGA1UEAxMk YWE3MWE2Y2ItOWQwNi00OGUxLWJhZmYtM2RmMjU5NjE4ODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E7ws3rNbPO+Bq/QLNqrFBDDypDLXduzMamA 0AiJqlrMbjhkMJkwWwWvgjw8yEqmVkDhNHGNDE6mHYddYs1hXFIg+CuD+t9SvKB4 OlvzubujX19vqAar9lQDDprHCoOeA06wzdBfNY5ebkxWQBUFKHhFHr2irDEe15bQ HY/WvHyTcYMLe5c7YfSP5x7Nw3X4uAAtiHAms8j3Q2OvOh6yLjO4jhEXbVpW5iO9 g+6LWlYzAMelfz5u8MtD6jsZWtrYCKFuC5KFtPyI5Md6lHhCAzMglna4gSPA2tdQ k51xr5GhzuevR5laobRrNFYGFV3RLxnEDHC9Y7ZDDhINGUW4hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6MCCuD2i1uKxlBEafHgLIR0a83MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOGJiMDY4MGYtNDdlZS0z YjhlLTk0MjEtYWQxMzFjNzFiNTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyn0vjc8or8bNHQKxILRNN3soedOMQjPxdREQuGMEqYSgpQMkVk8Hiz EVtCeiotMRPYCsp56NU1MB9Y6t3eSF0gXpZDHexvLtJ+tNfpuA1aqzSOXNVQzkRi 4FXmE3OO4InxUP8n6n3JWOaNNoUqKvwdPXqwtp/rrcNDuyRUPV9+T6xOS7baDw0y Oqxii48AdhAEldQEq0d0bmosi8RDrD5wYOXNvXtl9CwNxd5VkopDGsCGnNMOyrk3 YZktrrAJqo7qaLeJq/ArEpNw5csg87TrUexubHw1YAysNtWeY/LpwIW1Pt//05uH 2LRPQqnw8/5pWZCC+z5KtbFNhWr6h8w= -----END CERTIFICATE-----Generated at Sun Oct 19 22:55:21 2025 by rpki-client