$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0f9d5bbc-f235-308b-96ce-f24bef6ed8fe.roa File: 0f9d5bbc-f235-308b-96ce-f24bef6ed8fe.roa (raw, json) Hash identifier: KSrerLXWIjsvHqspPFJpHqBGjaFc29ihvisusG8wyr0= Subject key identifier: 82:D0:F5:7F:94:A0:01:E4:5F:6C:DA:D4:84:01:73:80:27:18:F6:03 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B89AD76A7B8A405A20C22EE00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0f9d5bbc-f235-308b-96ce-f24bef6ed8fe.roa Signing time: Thu 16 Oct 2025 06:02:57 +0000 ROA not before: Thu 16 Oct 2025 06:02:57 +0000 ROA not after: Wed 14 Jan 2026 07:02:57 +0000 asID: 9009 IP address blocks: 172.94.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:ad:76:a7:b8:a4:05:a2:0c:22:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 16 06:02:57 2025 GMT Not After : Jan 14 07:02:57 2026 GMT Subject: CN=21d5a98b-2e30-40e9-8fe0-ae979a174b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:99:ba:a6:74:4d:bd:19:4e:6d:15:70:81:03: 62:35:a2:69:11:92:72:8a:5b:66:29:7f:ae:3f:9e: 43:fa:87:d4:6b:83:98:37:7b:07:0a:ca:7d:d1:10: bf:c5:59:b4:94:53:b3:07:57:25:c6:c0:78:1e:16: aa:71:e1:89:e0:8b:33:02:6f:cd:f2:98:60:58:40: 9f:32:cd:06:39:76:7d:29:d6:ca:20:9d:55:bf:62: 98:d5:1f:27:a4:de:f4:d1:82:13:19:4e:27:f1:71: 98:df:ab:5c:6e:73:0a:a5:f1:0d:a9:58:fb:2e:5d: 5b:b0:50:69:46:29:ad:14:11:da:f7:bc:61:fd:4e: 8d:5f:cc:ba:fc:ef:3d:c2:36:c7:9f:71:fc:43:35: f3:d8:89:bf:87:82:af:c4:f9:7a:f5:5e:e5:e5:89: 2e:cd:c9:5d:2a:0f:ed:a7:14:fc:1b:8b:cc:78:18: de:a0:83:0c:86:a1:df:cb:77:20:58:ce:8d:44:d3: bc:00:d1:f8:d5:29:0b:de:37:b3:16:da:89:64:d3: cb:5a:ee:49:52:8e:62:30:87:6b:aa:68:d8:f9:86: 33:70:cc:00:a0:7a:b0:0e:18:7f:df:0f:6c:db:95: 1d:be:e3:39:67:d1:5c:0f:8d:38:e8:0e:5d:b0:af: 79:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D0:F5:7F:94:A0:01:E4:5F:6C:DA:D4:84:01:73:80:27:18:F6:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0f9d5bbc-f235-308b-96ce-f24bef6ed8fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:12:4c:e6:7d:4e:0b:4d:0f:33:cc:be:1d:32:7a:3d:9d:e6: 0f:4f:d7:a8:cd:c7:22:b7:bb:1c:18:cf:be:48:c5:4d:2a:77: 7c:bb:83:c7:4b:12:06:8e:b1:d3:a0:dd:b9:b9:e0:0b:6e:e3: 2b:10:94:6a:5d:31:a7:b4:4f:91:46:01:ba:64:c9:b1:97:32: 25:6e:27:82:38:aa:f8:3c:f3:a9:2c:f0:d7:10:96:d9:06:e4: 7d:86:74:75:2b:1a:c1:02:90:27:23:06:a4:2b:dc:8c:5e:86: e5:a5:2e:ca:b3:d1:39:08:b7:24:80:13:0f:29:1a:b9:9d:07: 73:5d:2a:5a:05:99:3d:48:b7:44:f7:b6:de:fb:94:47:8a:09: f5:41:bd:f4:65:a0:d5:5a:12:04:d6:78:6a:b3:33:31:94:47: 0e:47:db:a3:5c:2f:3c:4a:39:7c:f9:f4:84:77:97:10:0f:db: f4:43:15:cc:b0:90:59:1d:93:3f:d3:21:13:5b:26:2f:46:8d: 73:4d:49:26:e0:9a:79:be:37:a6:90:4d:30:30:f2:da:20:41: af:fd:b7:c1:d0:15:69:76:3c:85:47:1f:19:b4:c5:8a:06:d2: 11:15:61:b6:ad:19:26:76:aa:37:2f:b7:e1:05:31:09:77:6f: 69:44:27:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJrXanuKQFogwi7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxNjA2MDI1N1oXDTI2MDExNDA3MDI1N1owLzEtMCsGA1UEAxMk MjFkNWE5OGItMmUzMC00MGU5LThmZTAtYWU5NzlhMTc0YjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJm6pnRNvRlObRVwgQNiNaJpEZJyiltmKX+u P55D+ofUa4OYN3sHCsp90RC/xVm0lFOzB1clxsB4HhaqceGJ4IszAm/N8phgWECf Ms0GOXZ9KdbKIJ1Vv2KY1R8npN700YITGU4n8XGY36tcbnMKpfENqVj7Ll1bsFBp RimtFBHa97xh/U6NX8y6/O89wjbHn3H8QzXz2Im/h4KvxPl69V7l5YkuzcldKg/t pxT8G4vMeBjeoIMMhqHfy3cgWM6NRNO8ANH41SkL3jezFtqJZNPLWu5JUo5iMIdr qmjY+YYzcMwAoHqwDhh/3w9s25UdvuM5Z9FcD4046A5dsK95eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILQ9X+UoAHkX2za1IQBc4AnGPYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGY5ZDViYmMtZjIzNS0z MDhiLTk2Y2UtZjI0YmVmNmVkOGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgSTOZ9TgtNDzPMvh0yej2d5g9P16jNxyK3uxwYz75IxU0qd3y7g8dL EgaOsdOg3bm54Atu4ysQlGpdMae0T5FGAbpkybGXMiVuJ4I4qvg886ks8NcQltkG 5H2GdHUrGsECkCcjBqQr3IxehuWlLsqz0TkItySAEw8pGrmdB3NdKloFmT1It0T3 tt77lEeKCfVBvfRloNVaEgTWeGqzMzGURw5H26NcLzxKOXz59IR3lxAP2/RDFcyw kFkdkz/TIRNbJi9GjXNNSSbgmnm+N6aQTTAw8togQa/9t8HQFWl2PIVHHxm0xYoG 0hEVYbatGSZ2qjcvt+EFMQl3b2lEJzc= -----END CERTIFICATE-----Generated at Sun Oct 19 07:05:59 2025 by rpki-client