$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a57efc66-4865-36ec-92ad-ccf756369447.roa File: a57efc66-4865-36ec-92ad-ccf756369447.roa (raw, json) Hash identifier: agcV/FGg47qd33/yfHnOtCauj1FTw/GUMuIPc/gnkto= Subject key identifier: 8D:05:BB:D0:9A:D5:93:72:E7:DE:52:9F:D5:13:FB:59:12:88:57:D1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B954364C625CB98A0AEC5C5C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a57efc66-4865-36ec-92ad-ccf756369447.roa Signing time: Mon 20 Oct 2025 09:38:56 +0000 ROA not before: Mon 20 Oct 2025 09:38:56 +0000 ROA not after: Sun 18 Jan 2026 10:38:56 +0000 asID: 397373 IP address blocks: 172.94.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:43:64:c6:25:cb:98:a0:ae:c5:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 20 09:38:56 2025 GMT Not After : Jan 18 10:38:56 2026 GMT Subject: CN=deff096b-da0f-487c-8ffd-28321d16d24d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:46:5c:1e:b4:e5:17:92:d0:61:94:88:e4:25: ba:8b:79:b9:b9:1f:d2:d5:10:34:d6:39:9a:86:1e: f2:6f:ae:07:54:d5:67:b9:b3:68:f3:1a:87:50:71: bf:28:05:65:02:0b:7d:66:98:6c:f3:b7:4e:87:ef: 18:4b:18:55:c0:77:01:00:d7:f3:7e:5a:f2:dc:1b: ed:c1:a3:6f:2a:4b:d7:1d:f0:d9:f7:f7:38:b3:a2: 5e:05:00:b1:98:09:89:0c:31:12:6b:94:cf:13:9f: 07:8d:e9:41:09:f7:d6:ed:fd:b6:99:39:9b:ea:d1: 02:9d:ed:ca:a5:83:13:99:4f:84:c9:26:87:5c:9c: ae:46:4b:9e:6f:6f:61:83:15:bb:58:43:1a:0d:a5: 8e:92:6a:2b:93:98:08:17:db:ed:3e:74:5f:c5:64: f6:0d:9c:1d:39:67:4c:ef:08:b7:fd:66:a0:24:6f: 54:8f:09:6c:8a:78:1e:ad:e6:d5:2a:11:19:a1:47: 90:42:43:d0:50:a9:bd:e7:90:e2:38:b9:64:0f:9f: a4:fd:62:5a:42:e1:00:fb:fb:99:73:2d:cb:6c:a8: 49:2b:8a:10:82:e2:24:b3:9f:ae:90:dc:0d:a4:c7: 41:83:e0:20:2c:13:79:02:cf:21:25:71:fa:4e:ea: 74:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:05:BB:D0:9A:D5:93:72:E7:DE:52:9F:D5:13:FB:59:12:88:57:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a57efc66-4865-36ec-92ad-ccf756369447.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:40:58:e6:a8:93:a2:2c:d0:b6:3e:e8:f1:e6:bc:04:f0:24: 3e:e0:09:aa:bb:6a:a1:2d:78:c5:bb:15:09:b1:cb:41:f8:50: 66:18:f6:8a:f7:1b:da:51:a4:10:bf:28:f8:8d:9d:79:db:26: a1:65:d8:62:88:88:ed:34:a8:85:6e:fb:47:d3:41:d0:51:16: bc:31:33:f1:87:b3:d8:cf:ed:85:01:52:d9:0c:e7:01:e5:1a: f6:76:ac:a9:4a:1d:d9:31:52:07:2c:b0:98:4e:e1:99:e2:5d: 0e:1b:de:6a:8d:a4:94:95:51:5a:1a:c0:e5:05:69:d7:d3:56: 07:53:90:c1:8b:0e:36:1c:c1:09:9e:e1:8c:da:c0:b5:77:15: 21:59:74:66:e9:3a:1b:d9:d9:2b:21:39:f5:fc:d1:bb:e0:bb: d4:e0:cb:69:3c:72:6b:fa:2e:de:bf:00:c5:17:0c:94:73:24: 6d:2f:d1:2c:55:16:ba:3b:0d:6d:2d:4f:36:f5:a8:bd:d2:d6: aa:d0:e0:ac:5e:d8:d8:ab:43:ee:74:67:e6:25:87:75:8f:6e: 2f:6a:95:ae:c7:99:c7:5c:3c:20:5a:4a:9a:34:50:20:7d:22: 5a:6a:d9:26:09:92:69:71:a2:ab:7f:88:76:38:30:bf:38:85: d7:e8:2d:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVQ2TGJcuYoK7FxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyMDA5Mzg1NloXDTI2MDExODEwMzg1NlowLzEtMCsGA1UEAxMk ZGVmZjA5NmItZGEwZi00ODdjLThmZmQtMjgzMjFkMTZkMjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0ZcHrTlF5LQYZSI5CW6i3m5uR/S1RA01jma hh7yb64HVNVnubNo8xqHUHG/KAVlAgt9Zphs87dOh+8YSxhVwHcBANfzflry3Bvt waNvKkvXHfDZ9/c4s6JeBQCxmAmJDDESa5TPE58HjelBCffW7f22mTmb6tECne3K pYMTmU+EySaHXJyuRkueb29hgxW7WEMaDaWOkmork5gIF9vtPnRfxWT2DZwdOWdM 7wi3/WagJG9UjwlsingerebVKhEZoUeQQkPQUKm955DiOLlkD5+k/WJaQuEA+/uZ cy3LbKhJK4oQguIks5+ukNwNpMdBg+AgLBN5As8hJXH6Tup0LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0Fu9Ca1ZNy595Sn9UT+1kSiFfRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTU3ZWZjNjYtNDg2NS0z NmVjLTkyYWQtY2NmNzU2MzY5NDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRAWOaok6Is0LY+6PHmvATwJD7gCaq7aqEteMW7FQmxy0H4UGYY9or3 G9pRpBC/KPiNnXnbJqFl2GKIiO00qIVu+0fTQdBRFrwxM/GHs9jP7YUBUtkM5wHl GvZ2rKlKHdkxUgcssJhO4ZniXQ4b3mqNpJSVUVoawOUFadfTVgdTkMGLDjYcwQme 4YzawLV3FSFZdGbpOhvZ2SshOfX80bvgu9Tgy2k8cmv6Lt6/AMUXDJRzJG0v0SxV Fro7DW0tTzb1qL3S1qrQ4Kxe2NirQ+50Z+Ylh3WPbi9qla7HmcdcPCBaSpo0UCB9 Ilpq2SYJkmlxoqt/iHY4ML84hdfoLeQ= -----END CERTIFICATE-----Generated at Tue Oct 21 13:58:25 2025 by rpki-client