$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d1dd2eb0-6539-321f-b6b0-18da1cfb2215.roa File: d1dd2eb0-6539-321f-b6b0-18da1cfb2215.roa (raw, json) Hash identifier: 9PYZlvpJGXUz1IryngeH4QMyo90Py/VbtJKwW/DHxi4= Subject key identifier: 9E:97:A4:DA:8C:BE:14:11:95:AA:AE:D3:CB:44:D9:FD:9E:E5:D7:AC Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B89ADAB26EC941CDB6255C300 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d1dd2eb0-6539-321f-b6b0-18da1cfb2215.roa Signing time: Thu 16 Oct 2025 06:03:22 +0000 ROA not before: Thu 16 Oct 2025 06:03:22 +0000 ROA not after: Wed 14 Jan 2026 07:03:22 +0000 asID: 9009 IP address blocks: 172.94.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:ad:ab:26:ec:94:1c:db:62:55:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 16 06:03:22 2025 GMT Not After : Jan 14 07:03:22 2026 GMT Subject: CN=72d8fb7e-9ea7-4fe9-8e59-1eec85804890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:63:83:0e:cb:ef:f7:c4:a0:83:9f:69:c7:c4: 82:49:82:62:6d:fa:51:21:ba:05:f5:fe:66:a2:2f: db:53:14:90:f6:bb:bf:aa:92:05:90:be:c2:94:e8: 6c:a1:67:f4:00:f8:f6:6f:53:c2:cb:f8:8e:6a:10: 8e:9f:7e:e7:08:d8:50:63:dd:d7:ac:b6:af:05:99: 35:86:a7:0e:72:c3:e0:7c:0a:5f:c2:3e:fe:81:a9: 94:f2:ea:55:38:fd:00:9e:b6:70:24:67:a8:62:b1: be:46:17:b7:bd:8a:a2:7d:61:b4:4f:4d:66:8c:34: e3:48:99:e9:da:0f:d1:78:fd:40:c3:53:da:25:48: 5d:2c:e0:49:31:84:35:ed:31:8d:18:d4:5a:4e:40: 0a:84:cc:85:77:73:52:05:72:f9:71:c3:03:bb:a9: 69:8a:d5:59:5d:7c:6c:0b:db:13:c0:ba:64:e5:76: 21:96:27:02:56:6c:00:3b:4b:3e:41:94:71:d8:c9: e5:49:89:37:57:c8:9e:f6:8e:fa:74:5b:42:22:27: 57:d5:4d:81:03:01:21:3e:b0:33:d4:3a:69:4d:28: 92:89:73:5f:75:5f:3b:d5:8a:bc:79:89:28:c6:bb: 8e:bf:e9:aa:1f:13:3c:6f:98:d4:9a:ae:b9:cc:c0: fd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:97:A4:DA:8C:BE:14:11:95:AA:AE:D3:CB:44:D9:FD:9E:E5:D7:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d1dd2eb0-6539-321f-b6b0-18da1cfb2215.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:6b:b9:5d:5d:d4:a1:16:79:5e:28:71:2e:ea:91:1b:f4:fa: ec:a2:5b:4a:84:b4:f0:ae:c6:69:e0:5f:67:3c:9d:c6:b7:14: 53:dc:59:df:4a:77:4a:54:05:9c:3e:54:18:ed:30:cc:d9:7c: 05:18:c2:71:91:5c:08:55:c6:12:ee:a0:a5:85:d7:35:2e:59: a3:c6:77:43:75:60:cb:83:a4:0a:4e:ac:ce:d2:95:e2:05:cd: e7:0b:c6:33:fb:47:b9:00:5f:1a:f8:74:1c:c7:ec:c5:77:7b: 6e:6b:37:78:09:ed:e8:7b:ed:94:6a:81:01:eb:47:08:b3:ef: 7d:d0:97:fa:6b:8c:47:c9:a6:48:4e:e5:c8:d7:44:b0:4a:97: ed:a3:ba:79:8a:b7:87:5e:56:94:70:a7:bf:87:40:e3:60:57: 4a:52:ae:84:08:43:2f:e5:d2:9e:42:50:63:25:66:6f:53:79: ef:45:7f:b4:41:d6:6e:8f:c5:8d:ed:ff:88:c9:d1:85:0d:64: 0f:db:dc:13:f8:64:aa:a4:fd:53:b3:3e:3a:3d:9e:c4:84:ff: cc:1c:d7:a6:53:23:1d:ac:b1:4a:a7:bd:c2:b7:2d:5e:09:46: 19:f0:3c:92:98:0f:29:19:44:6a:78:3f:47:4c:87:17:ed:93: 2d:b2:b7:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJrasm7JQc22JVwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxNjA2MDMyMloXDTI2MDExNDA3MDMyMlowLzEtMCsGA1UEAxMk NzJkOGZiN2UtOWVhNy00ZmU5LThlNTktMWVlYzg1ODA0ODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomODDsvv98Sgg59px8SCSYJibfpRIboF9f5m oi/bUxSQ9ru/qpIFkL7ClOhsoWf0APj2b1PCy/iOahCOn37nCNhQY93XrLavBZk1 hqcOcsPgfApfwj7+gamU8upVOP0AnrZwJGeoYrG+Rhe3vYqifWG0T01mjDTjSJnp 2g/ReP1Aw1PaJUhdLOBJMYQ17TGNGNRaTkAKhMyFd3NSBXL5ccMDu6lpitVZXXxs C9sTwLpk5XYhlicCVmwAO0s+QZRx2MnlSYk3V8ie9o76dFtCIidX1U2BAwEhPrAz 1DppTSiSiXNfdV871Yq8eYkoxruOv+mqHxM8b5jUmq65zMD91QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6XpNqMvhQRlaqu08tE2f2e5desMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDFkZDJlYjAtNjUzOS0z MjFmLWI2YjAtMThkYTFjZmIyMjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJruV1d1KEWeV4ocS7qkRv0+uyiW0qEtPCuxmngX2c8nca3FFPcWd9K d0pUBZw+VBjtMMzZfAUYwnGRXAhVxhLuoKWF1zUuWaPGd0N1YMuDpApOrM7SleIF zecLxjP7R7kAXxr4dBzH7MV3e25rN3gJ7eh77ZRqgQHrRwiz733Ql/prjEfJpkhO 5cjXRLBKl+2junmKt4deVpRwp7+HQONgV0pSroQIQy/l0p5CUGMlZm9Tee9Ff7RB 1m6PxY3t/4jJ0YUNZA/b3BP4ZKqk/VOzPjo9nsSE/8wc16ZTIx2ssUqnvcK3LV4J RhnwPJKYDykZRGp4P0dMhxftky2yt+c= -----END CERTIFICATE-----Generated at Sun Oct 19 07:05:59 2025 by rpki-client