$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/58fc2a23-389b-3136-82c2-ebbbf4fb0581.roa File: 58fc2a23-389b-3136-82c2-ebbbf4fb0581.roa (raw, json) Hash identifier: +rbsIGh/AR1IkOBNk5/E4xQdyUIAMEN6KhKnw6Ca80g= Subject key identifier: 33:B3:DA:06:58:D8:75:B2:49:39:82:EC:08:12:B5:AD:FA:63:0D:A9 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B89AEAEFE00A016783EC3B300 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/58fc2a23-389b-3136-82c2-ebbbf4fb0581.roa Signing time: Thu 16 Oct 2025 06:05:25 +0000 ROA not before: Thu 16 Oct 2025 06:05:25 +0000 ROA not after: Wed 14 Jan 2026 07:05:25 +0000 asID: 9009 IP address blocks: 172.94.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:ae:ae:fe:00:a0:16:78:3e:c3:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 16 06:05:25 2025 GMT Not After : Jan 14 07:05:25 2026 GMT Subject: CN=7e8a74c6-fe1a-4d9c-ba66-fb71c07273b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ce:55:17:e5:d9:78:28:ca:3a:bd:73:00:a5: 28:e4:a0:33:82:0d:77:e4:a8:a6:3f:99:e8:b9:96: b1:f3:ce:1b:a5:c2:0b:15:75:6c:9c:92:25:8e:1f: 52:16:be:79:b0:c5:6a:7d:25:33:bb:eb:47:fa:79: 6d:02:dc:8a:54:6e:a7:1a:f6:de:13:aa:ec:86:d1: 16:0f:24:a8:92:78:90:86:b7:b2:1a:b7:17:b4:f8: 47:c0:98:0a:e6:f5:c3:b7:34:70:64:71:24:2e:b0: df:33:85:20:91:bd:b6:e3:0b:9a:02:7a:0a:f3:f2: cf:b2:fd:b6:74:42:49:c7:4c:2a:31:91:fc:3f:71: 9e:90:20:d3:4e:05:2e:7b:0d:93:84:91:1e:09:50: 21:4d:e4:b9:3e:e3:20:9e:3f:ba:89:f5:cf:f5:c6: a8:d0:e0:6c:68:74:a6:e0:f9:14:89:da:bd:c9:11: 54:a8:8b:8e:3d:ff:c2:97:92:1d:22:9c:8b:d0:3a: 2d:56:23:e0:70:80:cc:d7:bc:4d:34:d4:8e:a4:27: 8d:d4:b3:b6:71:aa:33:96:eb:5b:bb:b1:a4:f9:a0: fd:fc:30:55:da:4f:e3:2e:54:bf:f8:ae:27:96:36: e9:2a:ef:36:b2:8b:a6:fb:56:b1:61:72:36:27:a3: 77:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B3:DA:06:58:D8:75:B2:49:39:82:EC:08:12:B5:AD:FA:63:0D:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/58fc2a23-389b-3136-82c2-ebbbf4fb0581.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a8:ac:43:c1:b5:93:25:8b:7a:54:46:5e:87:65:85:61:1f: 8f:3b:a3:1a:1f:2e:13:f5:2d:5d:a8:bc:bb:57:e5:95:77:95: f8:46:b8:16:9b:75:ca:75:a6:54:35:ad:b4:34:f3:3c:fd:2d: db:df:42:33:c7:27:a9:f8:99:65:d4:02:25:f0:17:dd:9a:aa: ad:be:e2:26:bb:0e:bf:c5:71:4a:f6:29:8a:05:6c:28:a4:ba: 36:bd:a6:69:e7:9d:ac:54:e4:a2:f5:22:ea:f3:e8:96:ee:e2: 6a:3a:e0:0a:9c:7b:04:53:64:98:b1:63:e3:b7:47:34:b1:b2: 3f:9a:78:ab:40:04:d9:ae:c6:f0:47:65:b9:60:39:35:e9:0b: 69:f3:ba:b3:1c:e7:e2:95:5d:6e:15:d6:90:9b:75:19:98:86: de:71:ac:22:a4:12:f3:d9:0f:ff:15:25:63:da:29:9e:a7:8a: 5d:0c:65:e6:4b:94:1f:87:41:69:7c:f3:80:b8:5d:a2:3c:d0: 89:04:34:6e:c9:14:07:27:e3:99:78:eb:07:59:41:3f:20:6b: cd:03:40:87:bf:10:2a:29:47:82:70:42:22:89:99:5a:63:b5: 49:cc:66:ed:3a:df:75:0c:77:e2:59:0b:ef:99:a1:a9:cd:6d: 53:bf:c5:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJrq7+AKAWeD7DswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxNjA2MDUyNVoXDTI2MDExNDA3MDUyNVowLzEtMCsGA1UEAxMk N2U4YTc0YzYtZmUxYS00ZDljLWJhNjYtZmI3MWMwNzI3M2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM5VF+XZeCjKOr1zAKUo5KAzgg135KimP5no uZax884bpcILFXVsnJIljh9SFr55sMVqfSUzu+tH+nltAtyKVG6nGvbeE6rshtEW DySokniQhreyGrcXtPhHwJgK5vXDtzRwZHEkLrDfM4Ugkb224wuaAnoK8/LPsv22 dEJJx0wqMZH8P3GekCDTTgUuew2ThJEeCVAhTeS5PuMgnj+6ifXP9cao0OBsaHSm 4PkUidq9yRFUqIuOPf/Cl5IdIpyL0DotViPgcIDM17xNNNSOpCeN1LO2caozlutb u7Gk+aD9/DBV2k/jLlS/+K4nljbpKu82soum+1axYXI2J6N3IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOz2gZY2HWySTmC7AgSta36Yw2pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNThmYzJhMjMtMzg5Yi0z MTM2LTgyYzItZWJiYmY0ZmIwNTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiorEPBtZMli3pURl6HZYVhH487oxofLhP1LV2ovLtX5ZV3lfhGuBab dcp1plQ1rbQ08zz9LdvfQjPHJ6n4mWXUAiXwF92aqq2+4ia7Dr/FcUr2KYoFbCik uja9pmnnnaxU5KL1Iurz6Jbu4mo64AqcewRTZJixY+O3RzSxsj+aeKtABNmuxvBH ZblgOTXpC2nzurMc5+KVXW4V1pCbdRmYht5xrCKkEvPZD/8VJWPaKZ6nil0MZeZL lB+HQWl884C4XaI80IkENG7JFAcn45l46wdZQT8ga80DQIe/ECopR4JwQiKJmVpj tUnMZu0633UMd+JZC++ZoanNbVO/xSA= -----END CERTIFICATE-----Generated at Sun Oct 19 07:05:55 2025 by rpki-client