$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/863b12af-7090-3684-a9cc-c3fc69318767.roa File: 863b12af-7090-3684-a9cc-c3fc69318767.roa (raw, json) Hash identifier: 9oFvFoMHSrYdjsuD/ml66nE9a4DETMcsnJ33UhS8G5E= Subject key identifier: 43:DB:7B:2A:DD:68:AB:E6:72:29:01:52:3D:7B:6B:EB:89:FA:BE:D6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B9543912E94E10311DEE1D200 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/863b12af-7090-3684-a9cc-c3fc69318767.roa Signing time: Mon 20 Oct 2025 09:39:17 +0000 ROA not before: Mon 20 Oct 2025 09:39:17 +0000 ROA not after: Sun 18 Jan 2026 10:39:17 +0000 asID: 397373 IP address blocks: 172.94.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:43:91:2e:94:e1:03:11:de:e1:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 20 09:39:17 2025 GMT Not After : Jan 18 10:39:17 2026 GMT Subject: CN=91bd0b4e-e3fc-4cfa-b002-99d8033201f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ea:15:55:08:4d:fa:84:b9:7a:55:e2:25:15: e6:86:3c:9e:66:a6:04:1b:b8:f7:5e:09:0e:9f:dc: d6:32:bd:65:10:78:88:4b:7e:64:53:8b:24:96:96: 87:c1:8c:af:a1:9b:80:8a:95:bc:64:b1:42:7d:cc: 62:5f:a0:59:ad:16:b4:d5:e1:a3:26:03:20:c8:0a: a8:76:81:c1:e0:5c:d8:dc:f0:50:64:54:f9:a1:08: 08:aa:f3:13:dd:7c:15:21:d9:34:32:c2:1b:5f:82: 24:fd:61:3d:4a:73:ba:47:52:6a:fc:6a:73:58:ec: 57:99:62:8b:5b:cd:06:22:22:82:9f:18:85:44:db: d7:c1:c5:f6:ac:ad:f1:7e:12:03:4f:68:b7:77:c8: 40:94:38:8d:7b:23:ee:e8:2a:5f:61:73:a7:4f:57: 56:30:89:03:e0:4f:df:64:e1:e7:9d:0d:06:cc:9b: b5:e8:c1:c1:c8:fa:e7:2a:b6:69:c6:68:44:88:8b: 2f:7b:0b:71:b1:b7:b0:bf:f1:d8:e8:b0:73:8e:40: fa:21:a6:a4:d9:72:52:24:78:e4:24:6e:a7:94:a5: 35:b6:6e:63:50:38:da:29:96:c2:6c:08:71:71:9e: d9:1b:42:d7:5b:61:40:94:cd:06:38:50:5b:a7:c6: b4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DB:7B:2A:DD:68:AB:E6:72:29:01:52:3D:7B:6B:EB:89:FA:BE:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/863b12af-7090-3684-a9cc-c3fc69318767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:7d:7b:03:e1:1a:71:53:e3:e0:0c:0f:cd:ab:13:03:e4:61: d5:1c:a1:16:27:71:04:5f:72:10:e8:0d:9b:bd:cb:4b:e1:01: 05:06:07:19:d6:f5:a0:c1:0e:6b:54:67:42:41:3d:a0:dc:8a: 4e:0b:30:eb:66:3c:07:e7:bc:d5:5e:c3:31:d5:c3:c6:fd:38: e9:66:16:32:4c:4e:84:dc:5a:17:55:ac:76:6e:a7:e3:01:40: be:e1:d2:de:56:a9:59:f8:02:12:18:bb:5f:f5:1d:27:0e:18: 4b:aa:54:af:a1:63:99:8b:79:da:f0:17:f4:67:f9:ad:f2:5b: 23:70:0b:5c:14:d0:ac:cc:5b:df:1f:24:42:67:fb:16:3d:35: f0:ad:51:25:4e:8c:30:02:f3:df:e8:cc:5b:1c:a9:da:7e:d7: 37:69:db:17:79:6a:bb:b0:1f:40:e2:93:26:f9:fb:4d:95:27: 3f:4a:ff:f0:6a:15:4b:b5:00:99:2d:06:53:8f:34:a1:d6:88: c2:10:09:51:16:75:51:b5:0c:66:e6:e8:4e:24:1c:0d:03:b1: 74:40:69:6a:8e:f0:bc:0d:2f:67:81:02:fc:3e:df:80:2d:e2: 19:0f:8a:3f:6c:d9:03:5e:da:a2:97:f4:ae:66:ce:0b:0a:52: c8:86:ad:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVQ5EulOEDEd7h0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyMDA5MzkxN1oXDTI2MDExODEwMzkxN1owLzEtMCsGA1UEAxMk OTFiZDBiNGUtZTNmYy00Y2ZhLWIwMDItOTlkODAzMzIwMWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuoVVQhN+oS5elXiJRXmhjyeZqYEG7j3XgkO n9zWMr1lEHiIS35kU4sklpaHwYyvoZuAipW8ZLFCfcxiX6BZrRa01eGjJgMgyAqo doHB4FzY3PBQZFT5oQgIqvMT3XwVIdk0MsIbX4Ik/WE9SnO6R1Jq/GpzWOxXmWKL W80GIiKCnxiFRNvXwcX2rK3xfhIDT2i3d8hAlDiNeyPu6CpfYXOnT1dWMIkD4E/f ZOHnnQ0GzJu16MHByPrnKrZpxmhEiIsvewtxsbewv/HY6LBzjkD6Iaak2XJSJHjk JG6nlKU1tm5jUDjaKZbCbAhxcZ7ZG0LXW2FAlM0GOFBbp8a0VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPbeyrdaKvmcikBUj17a+uJ+r7WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODYzYjEyYWYtNzA5MC0z Njg0LWE5Y2MtYzNmYzY5MzE4NzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADx9ewPhGnFT4+AMD82rEwPkYdUcoRYncQRfchDoDZu9y0vhAQUGBxnW 9aDBDmtUZ0JBPaDcik4LMOtmPAfnvNVewzHVw8b9OOlmFjJMToTcWhdVrHZup+MB QL7h0t5WqVn4AhIYu1/1HScOGEuqVK+hY5mLedrwF/Rn+a3yWyNwC1wU0KzMW98f JEJn+xY9NfCtUSVOjDAC89/ozFscqdp+1zdp2xd5aruwH0Dikyb5+02VJz9K//Bq FUu1AJktBlOPNKHWiMIQCVEWdVG1DGbm6E4kHA0DsXRAaWqO8LwNL2eBAvw+34At 4hkPij9s2QNe2qKX9K5mzgsKUsiGrVE= -----END CERTIFICATE-----Generated at Tue Oct 21 13:58:24 2025 by rpki-client