$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa File: d2eba7e0-6a87-3e70-9830-21cdb930b252.roa (raw, json) Hash identifier: VXyBcVKDgoietDYwGYflbgcJVuOM4UaAe0I7y24TYF8= Subject key identifier: 1F:22:C1:95:B3:44:19:C0:D5:84:DF:28:8F:01:A6:23:BE:26:F5:90 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B87B21F68A8EF179975405800 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 9009 IP address blocks: 172.94.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:1f:68:a8:ef:17:99:75:40:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=6d5eda5d-839b-421f-90a0-e139ebf2f635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:35:bf:55:9f:fa:ef:cf:5e:85:1a:de:e8:81: 20:6f:d1:85:fa:50:7d:fd:37:89:04:21:a3:1a:bd: 77:c1:aa:1d:c2:4b:bf:e8:57:21:ee:98:f4:65:55: 17:7b:5a:10:f4:c9:bf:d0:83:fd:35:ac:6d:d6:18: 2e:11:7d:ec:78:b3:2f:8b:08:4b:dc:3d:b7:c8:7d: 6d:3e:73:79:e4:48:9a:ab:83:f3:66:31:12:c3:f0: 87:39:66:dc:69:ab:72:03:ad:7c:f1:88:7e:ce:4b: 02:7f:fa:d3:e3:83:a6:55:3e:b2:d9:e6:74:b6:77: e2:0a:53:87:da:b4:27:c7:79:a3:59:64:d2:e7:a7: 0e:1c:e6:c9:9b:a1:01:6e:8c:ee:02:42:e4:18:27: 72:74:ed:37:6b:7c:dc:64:5e:c4:1f:cb:4e:a3:92: 4d:05:04:c9:45:8e:87:27:0f:3c:2b:fe:17:0f:63: 2b:12:53:d1:31:f3:46:37:e5:0e:9a:93:62:77:c3: c2:ce:42:43:f7:e6:11:6c:9d:24:90:91:03:e0:42: 43:ec:c6:f8:a3:70:40:ec:23:0f:8f:14:84:a5:17: ed:4e:7d:46:47:3d:98:8c:3c:d9:14:46:30:61:5b: 13:88:49:ad:98:ef:7f:70:a4:25:1f:ab:12:2f:9d: 3d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:22:C1:95:B3:44:19:C0:D5:84:DF:28:8F:01:A6:23:BE:26:F5:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:58:1d:cc:18:1a:ad:59:af:37:f7:8c:e4:11:c2:1b:a3:07: 32:8c:24:83:64:fe:43:29:8c:12:7c:5f:ab:cd:bb:17:6c:de: 62:98:d7:bd:0a:54:dc:eb:b8:de:fb:30:6c:d1:60:1c:29:e3: a1:7d:6f:29:18:cb:75:5e:09:4a:a3:26:46:4f:fe:34:fd:fb: 5b:23:22:7a:74:bf:ec:a6:ba:46:37:ea:31:45:9b:b6:05:61: cc:29:b4:03:92:53:81:57:0b:8b:7b:a8:c0:95:1a:5e:7b:2b: 34:2d:27:df:ed:91:c7:a5:5a:73:ba:a1:6f:3b:a0:8e:7f:b5: 08:fa:7a:01:7a:34:2e:e7:a1:b1:06:f9:30:20:fc:99:95:f8: 15:63:08:d2:96:46:99:7e:e0:f1:54:e9:bb:6b:91:36:45:46: 3d:10:4f:51:b5:5b:e9:07:4d:d2:65:47:56:6d:f9:ad:9a:af: 09:e6:9c:ef:df:26:76:a5:69:bf:c1:43:98:4f:d2:ff:81:e2: 9f:3d:07:1b:a3:39:16:08:b0:d9:73:71:e6:47:04:0a:d1:ba: 6a:fd:27:30:ff:40:f9:3a:cb:83:bc:9e:64:64:9f:1e:cb:75: d3:b4:b4:2c:8c:fc:26:d6:d1:9a:b7:e6:cf:e2:a4:c6:e0:24: 00:7f:f4:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsh9oqO8XmXVAWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk NmQ1ZWRhNWQtODM5Yi00MjFmLTkwYTAtZTEzOWViZjJmNjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTW/VZ/6789ehRre6IEgb9GF+lB9/TeJBCGj Gr13waodwku/6Fch7pj0ZVUXe1oQ9Mm/0IP9Naxt1hguEX3seLMviwhL3D23yH1t PnN55Eiaq4PzZjESw/CHOWbcaatyA6188Yh+zksCf/rT44OmVT6y2eZ0tnfiClOH 2rQnx3mjWWTS56cOHObJm6EBbozuAkLkGCdydO03a3zcZF7EH8tOo5JNBQTJRY6H Jw88K/4XD2MrElPRMfNGN+UOmpNid8PCzkJD9+YRbJ0kkJED4EJD7Mb4o3BA7CMP jxSEpRftTn1GRz2YjDzZFEYwYVsTiEmtmO9/cKQlH6sSL509twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8iwZWzRBnA1YTfKI8BpiO+JvWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDJlYmE3ZTAtNmE4Ny0z ZTcwLTk4MzAtMjFjZGI5MzBiMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtYHcwYGq1Zrzf3jOQRwhujBzKMJINk/kMpjBJ8X6vNuxds3mKY170K VNzruN77MGzRYBwp46F9bykYy3VeCUqjJkZP/jT9+1sjInp0v+ymukY36jFFm7YF YcwptAOSU4FXC4t7qMCVGl57KzQtJ9/tkcelWnO6oW87oI5/tQj6egF6NC7nobEG +TAg/JmV+BVjCNKWRpl+4PFU6btrkTZFRj0QT1G1W+kHTdJlR1Zt+a2arwnmnO/f Jnalab/BQ5hP0v+B4p89BxujORYIsNlzceZHBArRumr9JzD/QPk6y4O8nmRknx7L ddO0tCyM/CbW0Zq35s/ipMbgJAB/9EE= -----END CERTIFICATE-----Generated at Mon Oct 20 19:01:28 2025 by rpki-client