$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e67216c6-fb7f-3d32-ace4-8f1870a41110.roa File: e67216c6-fb7f-3d32-ace4-8f1870a41110.roa (raw, json) Hash identifier: s7uDSvYdXm7SskDH+SZg3abcbohYtprFMHiziqTCOKE= Subject key identifier: B6:B7:B0:A8:62:7A:8C:21:56:B3:32:C9:A3:18:2F:2E:1D:2E:22:1B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B87B21F2ACEABD8318015C670 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e67216c6-fb7f-3d32-ace4-8f1870a41110.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 45671 IP address blocks: 172.94.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:1f:2a:ce:ab:d8:31:80:15:c6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=8e548eac-8494-4806-81f4-4eb4cfb08c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ed:a6:ec:03:2e:59:46:da:09:79:d9:26:00: f8:0b:a9:57:a1:89:35:71:54:69:f8:92:73:33:99: 67:1d:37:b3:68:a9:37:01:cc:67:d3:b6:d7:04:8f: 81:b0:16:e0:1c:14:21:c9:e4:74:8d:fc:22:aa:95: ed:90:41:85:fa:fc:78:0e:39:7a:8e:8f:72:e7:53: ac:a9:f9:6c:25:29:bf:9c:53:ab:72:bd:1b:31:38: b3:e1:d5:7c:fa:7f:8f:36:1a:16:f5:75:74:60:18: 19:82:b9:4c:81:91:2d:28:38:9f:bd:54:3e:1b:df: 3e:c5:d3:ac:2b:d2:b6:45:08:a4:9f:99:e9:a0:e1: a4:c2:9f:39:d0:5d:6e:20:f8:91:63:ee:39:12:15: fc:b2:17:7f:5b:3b:ef:de:9c:29:80:ab:3f:e3:41: fb:9e:8d:47:1c:f7:92:10:3c:57:94:17:62:b0:21: 7e:33:17:f3:df:aa:5f:2d:a1:57:a7:b7:f3:c2:96: 73:f2:dd:19:4d:43:8c:50:8b:cf:3b:7c:2a:de:d9: 9a:88:a3:ae:6e:5b:61:65:8d:0a:d7:1f:7d:50:1e: 30:55:22:e6:4a:eb:ec:e4:ab:79:6c:0b:33:dd:ec: 40:cd:ad:93:c2:cf:84:38:1e:8a:b7:f0:51:d1:53: 3e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B7:B0:A8:62:7A:8C:21:56:B3:32:C9:A3:18:2F:2E:1D:2E:22:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e67216c6-fb7f-3d32-ace4-8f1870a41110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:9e:d4:b6:47:31:0d:03:bd:ca:36:4c:c4:a2:c9:c1:f4:c1: 5e:5b:0f:b2:c3:68:fd:e8:6e:46:c4:fc:ff:6f:71:18:ba:28: 69:df:73:9e:4f:b5:7a:44:7c:db:21:8c:1e:db:5f:61:b2:e6: ea:5e:31:ba:07:fd:d1:3b:93:28:b8:a8:9f:38:8e:d1:a0:98: 9b:1a:d0:09:c4:1b:34:90:3d:43:91:88:29:c6:2b:8d:4f:91: 1c:39:ec:4d:7f:bd:6d:d3:23:96:ab:70:0e:22:d5:fb:f7:08: a7:82:36:b0:6e:73:e1:70:ba:51:5c:ec:95:01:b6:83:8d:57: 49:f3:22:89:ce:22:10:46:33:69:20:17:73:79:8e:c0:d9:e6: ed:fd:b0:34:84:5a:07:70:64:7b:76:a9:49:93:04:e2:1b:29: 2c:89:b0:65:1a:14:f9:45:29:52:0f:44:8d:81:44:b0:65:17: 8d:7d:ca:fb:46:c9:23:07:c5:cd:e9:39:a9:8e:f2:23:9f:e8: 97:24:89:67:1d:31:af:ca:e9:fa:72:cb:3d:6a:76:7a:c2:29: 66:b1:2d:f3:22:88:27:d3:bd:3e:2a:0c:16:ca:3b:7c:05:bd: 7b:75:84:8f:6a:84:4a:cc:9a:47:24:0b:c3:62:5f:2f:b7:63: 83:4a:c4:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsh8qzqvYMYAVxnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk OGU1NDhlYWMtODQ5NC00ODA2LTgxZjQtNGViNGNmYjA4YzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu2m7AMuWUbaCXnZJgD4C6lXoYk1cVRp+JJz M5lnHTezaKk3Acxn07bXBI+BsBbgHBQhyeR0jfwiqpXtkEGF+vx4Djl6jo9y51Os qflsJSm/nFOrcr0bMTiz4dV8+n+PNhoW9XV0YBgZgrlMgZEtKDifvVQ+G98+xdOs K9K2RQikn5npoOGkwp850F1uIPiRY+45EhX8shd/Wzvv3pwpgKs/40H7no1HHPeS EDxXlBdisCF+Mxfz36pfLaFXp7fzwpZz8t0ZTUOMUIvPO3wq3tmaiKOublthZY0K 1x99UB4wVSLmSuvs5Kt5bAsz3exAza2Tws+EOB6Kt/BR0VM+RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLa3sKhieowhVrMyyaMYLy4dLiIbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTY3MjE2YzYtZmI3Zi0z ZDMyLWFjZTQtOGYxODcwYTQxMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2e1LZHMQ0Dvco2TMSiycH0wV5bD7LDaP3obkbE/P9vcRi6KGnfc55P tXpEfNshjB7bX2Gy5upeMboH/dE7kyi4qJ84jtGgmJsa0AnEGzSQPUORiCnGK41P kRw57E1/vW3TI5arcA4i1fv3CKeCNrBuc+FwulFc7JUBtoONV0nzIonOIhBGM2kg F3N5jsDZ5u39sDSEWgdwZHt2qUmTBOIbKSyJsGUaFPlFKVIPRI2BRLBlF419yvtG ySMHxc3pOamO8iOf6JckiWcdMa/K6fpyyz1qdnrCKWaxLfMiiCfTvT4qDBbKO3wF vXt1hI9qhErMmkckC8NiXy+3Y4NKxEM= -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:10 2025 by rpki-client