$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa File: 127335ac-7835-339e-98cf-19520d8ce2e9.roa (raw, json) Hash identifier: MXIMnHgLcLqgigPHb31UTZBBiC6NY2RIfsUhsJYXghg= Subject key identifier: 6F:8C:F4:86:BF:E4:16:50:4B:E9:1E:04:D3:16:65:5B:5D:21:60:13 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AC2E0FE30C12D2B37B8345640 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 3223 IP address blocks: 172.94.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:fe:30:c1:2d:2b:37:b8:34:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=96375e85-b667-4708-b009-3336734bc1ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a5:05:2b:69:31:dc:c5:05:fa:e5:c5:31:6f: 8d:a3:2e:ae:f2:6a:3c:06:d9:c4:15:5f:ef:01:1a: 91:f0:eb:d7:75:bc:c4:f4:3b:b7:b7:bf:5c:d7:4c: 24:15:f2:f1:02:c3:9c:7b:73:07:0d:f5:75:d5:13: c9:f0:40:59:be:27:18:b5:7d:0c:8d:19:98:53:30: 4d:1c:eb:37:50:84:3e:7c:c0:ff:4b:91:35:52:29: 4a:43:08:87:e3:96:2d:c6:a7:39:96:e8:09:f5:b2: eb:e4:22:2b:9b:22:c8:a4:7f:44:2c:07:93:77:50: 6c:52:35:7a:4e:ea:3d:11:ed:fd:e4:36:7a:b2:5c: 58:50:d9:58:50:ae:02:4a:5a:66:30:41:44:f7:11: ae:92:79:6b:66:c5:a2:1a:88:bc:84:14:88:9e:6f: 23:98:d3:61:1e:76:2c:e0:cd:27:cb:c1:fe:b0:bf: 01:77:57:aa:34:0a:56:a8:34:79:6a:e0:ac:3e:96: ba:f0:86:04:a5:d7:ab:b4:5e:b7:dc:15:2e:7c:23: 92:69:52:0d:44:b3:54:07:b1:55:70:16:e4:e2:9d: 48:04:c6:17:8a:30:af:cb:c9:4d:e2:28:83:15:c3: f8:09:0e:9d:02:e5:71:bc:2d:3a:55:25:37:ac:f4: 20:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8C:F4:86:BF:E4:16:50:4B:E9:1E:04:D3:16:65:5B:5D:21:60:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:22:da:02:43:41:24:b4:89:9a:cd:16:92:bf:46:ce:9e:b5: b6:d7:73:40:99:3e:39:c8:b1:f2:fa:08:dc:a1:37:88:af:9e: 54:0c:2e:c9:74:de:92:27:68:67:2d:04:b5:bd:93:87:77:53: 0d:7f:02:12:5f:81:46:60:04:f4:d2:1e:13:ae:cc:29:6e:4d: a4:74:81:52:39:fc:d6:1d:0d:63:fa:17:58:57:02:8c:50:c5: 35:94:3b:41:13:b3:01:e6:0b:63:d4:10:ee:da:af:03:10:64: 9c:09:46:3c:e5:9f:77:cb:89:f1:1e:b3:a2:b5:db:64:4e:ee: 04:67:20:4e:7f:3b:70:ec:4a:75:88:53:26:19:55:93:09:28: 35:f7:41:06:84:32:d9:e0:ca:f5:dd:a2:8c:69:ec:a9:96:7f: 23:5c:bb:b1:59:3e:ff:08:97:3b:5a:d2:e5:38:ca:5e:cc:0c: e3:31:03:ef:ce:b9:86:f3:a7:c6:46:b4:ca:7e:52:4f:f4:fe: 9b:bd:ad:05:78:99:03:27:ef:02:ad:42:78:89:53:85:b3:a7: 2e:ce:21:45:13:76:10:8f:71:35:5f:2e:f2:7d:14:4c:22:79: ac:85:4e:87:1b:44:47:ec:6f:50:fc:c0:61:78:39:c5:79:35: 02:bc:47:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4P4wwS0rN7g0VkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OTYzNzVlODUtYjY2Ny00NzA4LWIwMDktMzMzNjczNGJjMWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaUFK2kx3MUF+uXFMW+Noy6u8mo8BtnEFV/v ARqR8OvXdbzE9Du3t79c10wkFfLxAsOce3MHDfV11RPJ8EBZvicYtX0MjRmYUzBN HOs3UIQ+fMD/S5E1UilKQwiH45Ytxqc5lugJ9bLr5CIrmyLIpH9ELAeTd1BsUjV6 Tuo9Ee395DZ6slxYUNlYUK4CSlpmMEFE9xGuknlrZsWiGoi8hBSInm8jmNNhHnYs 4M0ny8H+sL8Bd1eqNApWqDR5auCsPpa68IYEpdertF633BUufCOSaVINRLNUB7FV cBbk4p1IBMYXijCvy8lN4iiDFcP4CQ6dAuVxvC06VSU3rPQguQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+M9Ia/5BZQS+keBNMWZVtdIWATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTI3MzM1YWMtNzgzNS0z MzllLTk4Y2YtMTk1MjBkOGNlMmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYi2gJDQSS0iZrNFpK/Rs6etbbXc0CZPjnIsfL6CNyhN4ivnlQMLsl0 3pInaGctBLW9k4d3Uw1/AhJfgUZgBPTSHhOuzCluTaR0gVI5/NYdDWP6F1hXAoxQ xTWUO0ETswHmC2PUEO7arwMQZJwJRjzln3fLifEes6K122RO7gRnIE5/O3DsSnWI UyYZVZMJKDX3QQaEMtngyvXdooxp7KmWfyNcu7FZPv8Ilzta0uU4yl7MDOMxA+/O uYbzp8ZGtMp+Uk/0/pu9rQV4mQMn7wKtQniJU4Wzpy7OIUUTdhCPcTVfLvJ9FEwi eayFTocbREfsb1D8wGF4OcV5NQK8RxQ= -----END CERTIFICATE-----Generated at Sat Aug 9 22:43:41 2025 by rpki-client