$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa File: 728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa (raw, json) Hash identifier: QJeMv1Asyfzq1aCzqlGdfdd6GGlop4Vgc8GKVnOcNvI= Subject key identifier: F7:C2:EA:25:2C:84:8B:2E:72:B2:A6:9A:4E:B6:13:59:6D:A7:7B:9D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AB4EB8030559581CABDB9C900 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 9009 IP address blocks: 172.94.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:80:30:55:95:81:ca:bd:b9:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=c91e93b0-0013-489b-b950-286303331cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0f:05:68:7e:8c:2a:15:86:c7:96:9f:fd:65: e3:61:00:13:1e:25:e0:cc:5a:a9:91:ab:db:6f:71: 94:6b:c7:bf:9d:81:35:32:84:df:42:e8:e6:ee:67: fe:53:68:d3:4a:69:67:b3:d5:02:ba:19:d1:85:25: 47:e1:c6:05:5d:c3:38:8a:c4:27:bf:e8:bf:00:e4: 83:af:6c:0b:e9:d0:82:26:ab:ad:ec:8e:5a:d2:73: 94:87:c2:73:63:e4:58:8f:a5:2e:78:ec:b0:5a:77: 99:00:ac:75:d3:09:80:9b:eb:52:e5:ad:30:c5:55: 39:ec:a5:06:05:14:aa:c7:7a:4a:46:4e:05:03:c1: f0:16:65:24:11:bc:a8:1f:10:c7:9b:02:eb:0c:b2: 1c:37:19:81:6b:cd:33:67:41:95:92:1b:a1:a3:96: 61:ed:27:bf:29:c4:be:51:b3:8a:a9:09:83:b9:8f: 0a:83:37:8f:d4:70:19:0a:f2:7c:0a:91:b3:f7:e9: 96:20:ec:f1:3c:4e:92:ee:2d:0e:36:05:3e:10:b6: f0:91:d7:5f:aa:d0:bc:92:af:2f:8d:8e:80:37:72: d6:d4:e9:e6:f3:25:b1:84:67:59:37:b7:83:fe:06: 28:ef:e4:33:0c:52:cc:26:09:57:d2:70:7d:47:13: 2e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C2:EA:25:2C:84:8B:2E:72:B2:A6:9A:4E:B6:13:59:6D:A7:7B:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:2b:30:b5:7d:99:d1:48:b2:14:ec:d8:14:65:6b:fc:52:f7: d2:5a:6f:f6:32:ba:68:37:e4:f8:c9:83:f4:50:ed:ed:f2:d1: 11:6f:ab:9e:3d:ec:4f:96:28:23:4a:53:05:11:ba:e5:9e:e0: 5a:98:4f:5b:cf:dc:94:ad:c5:3e:c3:47:cf:18:28:64:53:13: 28:c8:3f:97:c9:6c:3a:3a:50:5c:a9:c6:86:ea:f7:98:ae:4c: fc:97:8a:37:e3:f3:ca:ed:2a:13:cd:0f:ac:e7:14:55:79:dd: 59:d0:98:34:08:47:fd:35:8d:50:95:7c:28:d6:50:7c:cc:90: 30:0e:d7:03:bf:1a:6a:67:62:36:aa:4d:f8:9e:f8:01:ec:11: 26:c1:cb:5c:2b:f4:0d:5a:33:d1:0d:24:d2:0f:b3:b0:60:90: 28:f8:b5:8e:c1:43:a8:73:58:52:d0:79:36:1b:13:9f:46:21: 05:ac:69:f1:c0:c4:3b:65:09:26:c7:d0:a3:4a:c8:2e:be:30: f0:4c:6f:4c:d8:64:76:5c:bd:51:76:71:8b:a0:8d:81:d4:ee: b0:03:bf:03:87:0a:75:5d:28:93:54:bd:68:c7:d5:ff:af:04: b3:84:50:ff:ee:2a:fd:5d:e3:b6:34:4c:6e:52:69:3a:24:4b: ea:6d:40:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq064AwVZWByr25yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YzkxZTkzYjAtMDAxMy00ODliLWI5NTAtMjg2MzAzMzMxY2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg8FaH6MKhWGx5af/WXjYQATHiXgzFqpkavb b3GUa8e/nYE1MoTfQujm7mf+U2jTSmlns9UCuhnRhSVH4cYFXcM4isQnv+i/AOSD r2wL6dCCJqut7I5a0nOUh8JzY+RYj6UueOywWneZAKx10wmAm+tS5a0wxVU57KUG BRSqx3pKRk4FA8HwFmUkEbyoHxDHmwLrDLIcNxmBa80zZ0GVkhuho5Zh7Se/KcS+ UbOKqQmDuY8KgzeP1HAZCvJ8CpGz9+mWIOzxPE6S7i0ONgU+ELbwkddfqtC8kq8v jY6AN3LW1Onm8yWxhGdZN7eD/gYo7+QzDFLMJglX0nB9RxMuIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfC6iUshIsucrKmmk62E1ltp3udMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzI4YTZkZGMtNmRmMy0z MWJiLWI5YWEtNTNkYzkzYTU3NjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIArMLV9mdFIshTs2BRla/xS99Jab/Yyumg35PjJg/RQ7e3y0RFvq549 7E+WKCNKUwURuuWe4FqYT1vP3JStxT7DR88YKGRTEyjIP5fJbDo6UFypxobq95iu TPyXijfj88rtKhPND6znFFV53VnQmDQIR/01jVCVfCjWUHzMkDAO1wO/GmpnYjaq Tfie+AHsESbBy1wr9A1aM9ENJNIPs7BgkCj4tY7BQ6hzWFLQeTYbE59GIQWsafHA xDtlCSbH0KNKyC6+MPBMb0zYZHZcvVF2cYugjYHU7rADvwOHCnVdKJNUvWjH1f+v BLOEUP/uKv1d47Y0TG5SaTokS+ptQMM= -----END CERTIFICATE-----Generated at Wed Aug 6 09:34:05 2025 by rpki-client