$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c3c5d841-287e-353f-be0b-c897a1424264.roa File: c3c5d841-287e-353f-be0b-c897a1424264.roa (raw, json) Hash identifier: twwscTHbPVZpNVDVU4dm4giEv0Oh32oeHxrCOYsipug= Subject key identifier: D1:2E:CA:37:AD:8C:2C:A4:D7:A3:68:92:13:48:CC:3B:77:11:C9:5D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B8AA33CC8025E184293399B00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c3c5d841-287e-353f-be0b-c897a1424264.roa Signing time: Thu 16 Oct 2025 14:18:09 +0000 ROA not before: Thu 16 Oct 2025 14:18:09 +0000 ROA not after: Wed 14 Jan 2026 15:18:09 +0000 asID: 55154 IP address blocks: 172.94.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:a3:3c:c8:02:5e:18:42:93:39:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 16 14:18:09 2025 GMT Not After : Jan 14 15:18:09 2026 GMT Subject: CN=d00dd169-166b-4676-9a9c-376227d40e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:15:d0:c4:5e:c4:db:78:01:32:47:9b:5b:de: 5e:a1:04:64:dd:2f:fb:78:e2:ad:13:3f:42:5a:8b: 76:8d:f7:03:4c:53:b8:c7:d7:6c:d5:e1:42:76:a0: 92:08:2a:51:1b:28:7d:5d:2c:0a:fb:1e:95:8a:44: b2:5e:f3:bb:d3:dd:d4:62:ff:18:71:97:78:a5:7b: 8f:03:e6:bc:3b:ba:26:42:b4:bb:14:d9:20:c1:36: b5:b8:b7:74:7c:82:b0:6d:a2:43:a9:ba:53:e7:97: 16:58:9b:fd:9b:3e:47:fd:16:51:74:88:8d:3d:5f: 73:b9:84:83:d6:90:bd:72:ea:cb:f7:b5:fc:91:15: d7:a0:27:4b:d4:38:41:75:f1:b2:93:a2:2e:c5:56: 7a:d0:9c:b4:7e:46:b0:ac:f1:64:90:ca:0a:45:85: 79:e1:2b:9b:9a:10:b0:97:9f:5f:1f:84:f7:b5:bc: 2e:16:31:e5:5d:7d:c7:69:f8:56:ab:c5:eb:4e:07: ee:79:6c:17:d5:a8:b6:bb:37:16:72:00:81:72:eb: 29:2f:ba:da:4c:4a:d6:22:c7:07:66:22:cd:ae:4e: 9c:d5:97:62:d3:8f:b3:4a:2b:4c:83:f0:46:f9:3b: 6e:4f:0d:d6:a8:d8:79:b4:cc:8a:b3:14:2c:7a:18: 94:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2E:CA:37:AD:8C:2C:A4:D7:A3:68:92:13:48:CC:3B:77:11:C9:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c3c5d841-287e-353f-be0b-c897a1424264.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b2:50:15:69:57:08:a7:a6:cc:af:ff:2a:22:dd:b0:a9:cb: 6e:e1:56:30:2a:69:0b:5a:8f:5a:9b:d3:4e:f6:74:0e:37:15: 4b:06:6d:66:cd:6c:75:ad:c4:65:f7:2d:3c:24:ba:05:9c:de: 43:f9:37:5e:7a:3d:a3:44:6d:bb:9c:b4:cc:5a:6e:b8:f1:76: b5:16:bf:2b:be:50:1d:e2:d4:7a:41:53:6e:2a:f4:88:3b:2b: 99:29:81:6c:c3:14:6c:7d:50:09:01:44:b8:99:95:c5:b8:72: 7b:f3:2b:f5:02:08:b1:2c:cc:c9:89:27:8e:73:4c:bc:41:fa: b4:45:d2:0f:e2:71:47:f5:77:c8:8a:e8:8a:37:9c:a2:66:0f: 5f:3d:7c:8d:da:ba:94:c9:61:ea:0a:55:cb:29:dc:f5:ef:ee: 76:a3:08:d0:ae:cd:c6:ed:0a:58:c8:46:6f:73:a4:67:d6:0f: fb:42:80:54:ce:53:30:09:18:90:56:9f:e7:4c:ec:7f:a6:b2: 6b:ab:ac:66:ab:76:e7:c8:24:d5:02:2f:be:c3:4a:af:14:77: 7b:b4:80:99:c6:37:a0:e5:e9:7e:88:fe:48:53:3d:71:de:6b: 74:ee:19:e2:9c:06:2d:90:66:0b:ea:80:4b:22:71:65:61:9b: 59:ec:20:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKozzIAl4YQpM5mwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxNjE0MTgwOVoXDTI2MDExNDE1MTgwOVowLzEtMCsGA1UEAxMk ZDAwZGQxNjktMTY2Yi00Njc2LTlhOWMtMzc2MjI3ZDQwZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhXQxF7E23gBMkebW95eoQRk3S/7eOKtEz9C Wot2jfcDTFO4x9ds1eFCdqCSCCpRGyh9XSwK+x6VikSyXvO7093UYv8YcZd4pXuP A+a8O7omQrS7FNkgwTa1uLd0fIKwbaJDqbpT55cWWJv9mz5H/RZRdIiNPV9zuYSD 1pC9curL97X8kRXXoCdL1DhBdfGyk6IuxVZ60Jy0fkawrPFkkMoKRYV54SubmhCw l59fH4T3tbwuFjHlXX3HafhWq8XrTgfueWwX1ai2uzcWcgCBcuspL7raTErWIscH ZiLNrk6c1Zdi04+zSitMg/BG+TtuTw3WqNh5tMyKsxQsehiUCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEuyjetjCyk16NokhNIzDt3EcldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzNjNWQ4NDEtMjg3ZS0z NTNmLWJlMGItYzg5N2ExNDI0MjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGyUBVpVwinpsyv/yoi3bCpy27hVjAqaQtaj1qb0072dA43FUsGbWbN bHWtxGX3LTwkugWc3kP5N156PaNEbbuctMxabrjxdrUWvyu+UB3i1HpBU24q9Ig7 K5kpgWzDFGx9UAkBRLiZlcW4cnvzK/UCCLEszMmJJ45zTLxB+rRF0g/icUf1d8iK 6Io3nKJmD189fI3aupTJYeoKVcsp3PXv7najCNCuzcbtCljIRm9zpGfWD/tCgFTO UzAJGJBWn+dM7H+msmurrGardufIJNUCL77DSq8Ud3u0gJnGN6Dl6X6I/khTPXHe a3TuGeKcBi2QZgvqgEsicWVhm1nsIFg= -----END CERTIFICATE-----Generated at Mon Oct 20 05:10:40 2025 by rpki-client