$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2b8928e2-03f9-3a87-8259-e4457d161b54.roa File: 2b8928e2-03f9-3a87-8259-e4457d161b54.roa (raw, json) Hash identifier: dIr88vZUea0Mz687bofT1/nFbHAYpYkjejH38MZ02Ao= Subject key identifier: 87:17:4A:0B:32:D5:77:A1:88:D0:E8:15:16:15:6C:1F:7F:0A:C5:D8 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B797E82027D5507579D370C80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2b8928e2-03f9-3a87-8259-e4457d161b54.roa Signing time: Fri 10 Oct 2025 10:55:24 +0000 ROA not before: Fri 10 Oct 2025 10:55:24 +0000 ROA not after: Thu 08 Jan 2026 11:55:24 +0000 asID: 11972 IP address blocks: 172.94.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:7e:82:02:7d:55:07:57:9d:37:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 10:55:24 2025 GMT Not After : Jan 8 11:55:24 2026 GMT Subject: CN=b8149e32-ccc7-4782-a123-bd219918f216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ac:3b:4d:65:31:83:85:a1:8d:fd:8d:24:32: fc:7b:89:28:66:5d:04:50:ef:e8:db:69:37:ed:bd: 5a:dd:92:26:24:29:97:6d:e6:f8:1d:d3:09:69:4f: 6f:5f:2b:6d:cb:ad:05:a8:81:70:22:5b:a9:f4:91: be:57:33:7b:62:4f:2f:85:95:0d:13:ab:78:8c:88: 00:d8:57:09:14:42:dc:c6:68:65:1f:da:b0:b8:c9: 1d:d7:45:5a:c1:e8:c5:84:7f:0e:a9:83:32:30:7e: 20:2f:97:8b:91:cf:6f:a4:12:af:2e:0f:c4:e4:01: 68:e8:a4:53:09:3f:5c:52:4e:c3:3d:39:8b:2c:3e: 0e:07:9c:b3:77:7c:2f:08:8e:ff:5e:ad:02:91:0a: e5:86:4d:97:66:90:f5:96:5e:40:4b:8a:65:51:c0: 2a:fb:67:4b:43:72:7b:6b:64:3c:02:05:c1:64:c9: ff:5d:8e:30:60:df:cc:0c:e5:de:ca:27:53:34:73: a5:c8:e3:71:ba:64:b8:fe:df:1e:f8:16:af:de:83: 75:08:e9:27:7b:99:00:60:e2:8d:65:30:79:c3:b7: e4:3d:10:11:84:0b:ed:60:08:7f:da:3d:57:f2:42: ae:16:94:e8:e4:56:b0:24:10:c0:ce:e7:83:e6:92: 01:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:17:4A:0B:32:D5:77:A1:88:D0:E8:15:16:15:6C:1F:7F:0A:C5:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2b8928e2-03f9-3a87-8259-e4457d161b54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d1:90:70:ae:9e:a8:27:ea:ef:6a:c2:8c:e8:91:51:ba:d0: 3c:c0:46:c7:09:2f:c9:a5:5a:77:21:42:da:73:32:77:30:3b: c1:ab:3b:66:11:f0:1d:3e:20:a6:27:1c:86:6d:50:cf:1e:e9: ba:1d:44:a7:fd:e1:79:56:2f:57:69:76:ed:a1:e5:f8:91:31: 6f:0b:91:46:78:7c:bc:52:d5:2f:eb:58:57:e5:3d:88:6a:af: e7:0d:96:84:99:b8:c5:6a:df:e2:35:ae:16:c9:ee:1b:14:be: 08:f2:7c:3d:c5:79:ed:21:ef:7c:68:d6:7b:a7:d3:6a:02:c7: a0:7e:bd:db:76:54:f1:29:dd:02:f1:e7:ff:33:1f:e7:a9:58: 23:31:76:d8:fd:9a:08:62:d4:b9:80:2d:b5:0b:17:a3:41:84: 2f:b6:b5:fa:b0:10:6a:2e:11:35:3a:40:fc:19:47:cb:cf:c9: 38:8c:7a:00:a2:a6:bf:ed:2a:39:81:da:d1:58:ae:b9:c3:c4: c4:35:cd:e8:2d:18:2c:1c:aa:fe:c9:a6:b1:20:d0:03:2c:3e: d4:e6:b3:61:69:6e:43:86:80:61:e7:6e:ce:82:4e:97:fc:83: 66:b6:41:60:db:f1:e5:0c:9a:91:09:75:6b:ce:91:a6:63:af: 91:44:4a:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5foICfVUHV503DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxMDEwNTUyNFoXDTI2MDEwODExNTUyNFowLzEtMCsGA1UEAxMk YjgxNDllMzItY2NjNy00NzgyLWExMjMtYmQyMTk5MThmMjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKw7TWUxg4Whjf2NJDL8e4koZl0EUO/o22k3 7b1a3ZImJCmXbeb4HdMJaU9vXytty60FqIFwIlup9JG+VzN7Yk8vhZUNE6t4jIgA 2FcJFELcxmhlH9qwuMkd10VawejFhH8OqYMyMH4gL5eLkc9vpBKvLg/E5AFo6KRT CT9cUk7DPTmLLD4OB5yzd3wvCI7/Xq0CkQrlhk2XZpD1ll5AS4plUcAq+2dLQ3J7 a2Q8AgXBZMn/XY4wYN/MDOXeyidTNHOlyONxumS4/t8e+Bav3oN1COkne5kAYOKN ZTB5w7fkPRARhAvtYAh/2j1X8kKuFpTo5FawJBDAzueD5pIBbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcXSgsy1XehiNDoFRYVbB9/CsXYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmI4OTI4ZTItMDNmOS0z YTg3LTgyNTktZTQ0NTdkMTYxYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3RkHCunqgn6u9qwozokVG60DzARscJL8mlWnchQtpzMncwO8GrO2YR 8B0+IKYnHIZtUM8e6bodRKf94XlWL1dpdu2h5fiRMW8LkUZ4fLxS1S/rWFflPYhq r+cNloSZuMVq3+I1rhbJ7hsUvgjyfD3Fee0h73xo1nun02oCx6B+vdt2VPEp3QLx 5/8zH+epWCMxdtj9mghi1LmALbULF6NBhC+2tfqwEGouETU6QPwZR8vPyTiMegCi pr/tKjmB2tFYrrnDxMQ1zegtGCwcqv7JprEg0AMsPtTms2FpbkOGgGHnbs6CTpf8 g2a2QWDb8eUMmpEJdWvOkaZjr5FESgU= -----END CERTIFICATE-----Generated at Tue Oct 21 14:52:57 2025 by rpki-client