$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d79528c9-7b1c-37d6-adf1-aabf6ef8d7cb.roa File: d79528c9-7b1c-37d6-adf1-aabf6ef8d7cb.roa (raw, json) Hash identifier: kMzFjw7LMhGJexMFYmjnoVpN5XaWLzfmD8FXyRby4mA= Subject key identifier: 11:AC:5E:E2:1B:6F:B0:FC:77:29:9C:36:FD:30:3D:D2:50:8E:56:A3 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B797DF14A3CE3FB38F57A5B80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d79528c9-7b1c-37d6-adf1-aabf6ef8d7cb.roa Signing time: Fri 10 Oct 2025 10:54:16 +0000 ROA not before: Fri 10 Oct 2025 10:54:16 +0000 ROA not after: Thu 08 Jan 2026 11:54:16 +0000 asID: 11972 IP address blocks: 172.94.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:7d:f1:4a:3c:e3:fb:38:f5:7a:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 10:54:16 2025 GMT Not After : Jan 8 11:54:16 2026 GMT Subject: CN=6cf15218-d74d-402c-8c15-6b530b2c89fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:02:dc:01:00:6f:56:83:e6:95:6e:cc:df:b8: 51:d1:eb:a2:94:2f:c0:f8:20:89:c9:8a:d3:32:34: fa:f0:ca:bb:59:31:72:35:22:53:09:86:d4:2e:d7: c4:c0:80:97:d2:b6:de:a4:9a:cc:c1:b1:19:f2:2b: 11:00:3d:cd:4e:6e:70:3d:88:3d:5d:7b:e0:0e:e7: e4:3b:e5:57:49:8a:9f:1e:5d:f6:cb:3b:6b:a7:9e: 60:cf:cd:d9:b4:b5:fe:cf:0b:43:15:3c:2c:d4:fb: dd:d2:f7:90:6b:65:59:fd:41:1f:b1:36:dd:45:4e: 3d:72:83:85:46:6b:5d:92:5f:52:68:a7:e0:f1:fe: 95:bf:fe:d7:21:2d:26:b5:5c:f5:f1:72:db:6f:33: 1d:28:18:53:4d:20:65:d8:a6:c2:a1:96:df:50:98: ae:f7:e3:10:ec:be:1d:b7:54:56:f6:c5:5f:94:14: 40:62:62:d6:fd:66:94:4c:76:ef:6c:15:01:d9:db: c4:59:af:f8:10:4c:a3:81:e1:b9:45:d6:a5:1b:e2: ab:f0:ca:06:04:a4:e4:e3:30:bb:ce:f5:e2:24:81: fd:60:ad:96:9b:79:e8:2a:d9:d1:75:65:84:6e:db: 7e:c6:92:68:1c:20:8c:d0:92:67:1f:39:27:1b:73: 50:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AC:5E:E2:1B:6F:B0:FC:77:29:9C:36:FD:30:3D:D2:50:8E:56:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d79528c9-7b1c-37d6-adf1-aabf6ef8d7cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:09:0f:d9:aa:1d:7f:ad:75:69:74:53:57:06:63:3f:9a:70: 7a:ee:1f:8c:0a:d0:ed:2a:ad:75:0b:5b:4d:4e:ca:a4:00:c9: 54:75:89:ad:4d:8e:af:5f:fe:89:4e:42:17:d7:7b:53:6c:1a: 44:6a:b1:c3:8f:12:42:9b:b6:13:7d:87:b5:2e:c3:ca:64:62: bf:77:b2:de:5a:9a:4e:40:bb:3e:eb:57:44:66:ab:ab:4d:01: ab:58:38:47:19:9a:30:81:b2:43:d2:d3:dd:93:17:1d:77:43: 21:7a:08:e6:c1:50:1f:4a:1a:75:db:24:8b:9b:95:69:49:e2: 47:6b:e0:18:ee:62:3d:28:4c:33:b7:03:12:20:8c:71:ef:d8: dc:fc:ca:f5:21:bf:65:a6:ee:a5:65:46:d1:e4:db:a9:fb:3b: 6c:fb:db:0a:ae:7f:b5:c6:87:cd:a1:1b:af:71:fa:b3:8f:69: 5c:f1:e9:9f:d1:58:3c:32:ea:1a:79:86:b8:e2:5b:77:74:52: 2a:75:aa:04:05:97:31:f0:65:3e:f9:1e:8a:ec:b3:62:aa:86: 80:d0:8c:6a:75:40:c4:42:5d:b3:ee:57:1d:dc:2a:fe:5f:ad: 03:b6:f2:c5:c6:43:eb:23:c8:46:eb:8e:34:80:d6:ef:a6:1c: 2a:5c:8e:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5ffFKPOP7OPV6W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxMDEwNTQxNloXDTI2MDEwODExNTQxNlowLzEtMCsGA1UEAxMk NmNmMTUyMTgtZDc0ZC00MDJjLThjMTUtNmI1MzBiMmM4OWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkALcAQBvVoPmlW7M37hR0euilC/A+CCJyYrT MjT68Mq7WTFyNSJTCYbULtfEwICX0rbepJrMwbEZ8isRAD3NTm5wPYg9XXvgDufk O+VXSYqfHl32yztrp55gz83ZtLX+zwtDFTws1Pvd0veQa2VZ/UEfsTbdRU49coOF Rmtdkl9SaKfg8f6Vv/7XIS0mtVz18XLbbzMdKBhTTSBl2KbCoZbfUJiu9+MQ7L4d t1RW9sVflBRAYmLW/WaUTHbvbBUB2dvEWa/4EEyjgeG5RdalG+Kr8MoGBKTk4zC7 zvXiJIH9YK2Wm3noKtnRdWWEbtt+xpJoHCCM0JJnHzknG3NQqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGsXuIbb7D8dymcNv0wPdJQjlajMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDc5NTI4YzktN2IxYy0z N2Q2LWFkZjEtYWFiZjZlZjhkN2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsJD9mqHX+tdWl0U1cGYz+acHruH4wK0O0qrXULW01OyqQAyVR1ia1N jq9f/olOQhfXe1NsGkRqscOPEkKbthN9h7Uuw8pkYr93st5amk5Auz7rV0Rmq6tN AatYOEcZmjCBskPS092TFx13QyF6CObBUB9KGnXbJIublWlJ4kdr4BjuYj0oTDO3 AxIgjHHv2Nz8yvUhv2Wm7qVlRtHk26n7O2z72wquf7XGh82hG69x+rOPaVzx6Z/R WDwy6hp5hrjiW3d0Uip1qgQFlzHwZT75Horss2KqhoDQjGp1QMRCXbPuVx3cKv5f rQO28sXGQ+sjyEbrjjSA1u+mHCpcjms= -----END CERTIFICATE-----Generated at Mon Oct 20 12:49:02 2025 by rpki-client