$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/acf3baa7-dbc1-3afc-af90-183681c6f600.roa File: acf3baa7-dbc1-3afc-af90-183681c6f600.roa (raw, json) Hash identifier: 6ZHKMi4DEsV2HawkPm+0uhJyxT9Ky9b57qoP27Letj8= Subject key identifier: 94:85:CC:FF:1B:B1:55:9F:DA:A7:48:A3:AA:F5:E9:E0:FF:50:C7:8A Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AA85BB670B28DFC153C9A4CC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/acf3baa7-dbc1-3afc-af90-183681c6f600.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 9009 IP address blocks: 172.94.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b6:70:b2:8d:fc:15:3c:9a:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=8e253f19-533d-4976-b439-baed7d4987e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1e:0e:50:55:aa:28:b6:6e:e7:b8:75:04:7e: cb:73:03:fe:99:21:e1:87:52:ee:ae:71:50:29:c6: 07:52:d2:32:10:84:14:5e:88:d0:32:85:cb:94:41: e1:89:74:81:b7:76:0c:98:af:bd:8e:3c:d3:09:98: 06:18:99:f6:8c:46:bc:b1:4e:6b:76:86:d6:d1:72: 77:0b:f1:65:7c:3e:b6:2c:d6:e3:5e:8b:2d:50:e2: da:70:bb:8a:2f:86:9a:c0:99:be:ab:c3:b5:59:9b: 2b:d6:2c:d2:a4:d7:3d:24:ed:6f:be:25:65:4f:a4: f9:1a:1b:f5:aa:6d:aa:81:69:e5:7d:24:8d:f7:44: 59:6a:07:3d:2e:b7:a7:b9:d2:53:e5:b4:bf:ef:8a: a0:41:b1:df:9f:aa:4d:bf:53:45:93:08:73:e5:c5: 69:80:84:e8:d9:5d:87:94:e7:31:eb:df:51:ac:62: 67:f8:27:25:d7:d4:d9:d1:94:6c:b5:81:22:e3:9b: 0d:e4:09:bd:d9:b5:08:6b:09:cd:44:88:17:7d:c7: e2:73:67:6e:14:7f:12:39:16:58:cc:69:ff:11:14: 93:8e:f5:8a:03:59:bc:b1:60:ef:94:a1:ad:6c:3b: 6b:26:01:32:ec:42:22:33:e9:60:50:66:6a:c4:6c: 4f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:85:CC:FF:1B:B1:55:9F:DA:A7:48:A3:AA:F5:E9:E0:FF:50:C7:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/acf3baa7-dbc1-3afc-af90-183681c6f600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:6e:ed:09:62:63:d2:6f:e6:3c:fa:3c:74:f2:d5:8c:e4:ee: ea:7a:64:13:89:f1:bc:b1:87:09:92:a7:d5:b2:e1:30:37:19: ba:9a:fd:76:13:8a:15:21:11:5e:5a:0d:78:af:00:9c:be:2e: 69:8c:3b:fa:cb:5f:60:d8:b0:75:ad:05:9c:ad:db:ce:84:0f: 0f:da:38:92:98:e5:00:ad:03:6a:28:e0:cc:e9:1a:0b:5e:f4: 5e:52:87:3d:64:70:86:60:e1:b8:f6:f5:19:37:af:78:47:e8: 9d:31:6e:7e:5e:fc:00:e9:77:6f:90:cb:77:40:25:53:4c:7c: f0:53:cc:7f:9e:71:97:f8:74:47:44:b1:af:4a:e9:6b:c2:ae: 0d:63:eb:93:2c:6c:ce:68:70:b9:69:9f:e4:38:27:e5:b2:5d: c4:e6:88:23:75:81:e6:bd:4e:cc:da:7f:04:2e:20:89:9b:7d: 3d:5d:ae:a5:5c:2e:4a:d9:a1:f2:d4:f7:a3:88:14:3c:37:1a: ae:68:99:55:f5:e1:e9:6c:c0:e3:d7:c3:bf:2b:39:50:88:b6: db:5a:92:43:ac:f0:d0:47:a9:bb:d4:f5:d0:48:72:2e:d1:49: a1:41:11:e8:dc:2a:f9:eb:ca:de:3a:26:a1:7c:a3:5f:bb:b4: 54:95:c6:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7Zwso38FTyaTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk OGUyNTNmMTktNTMzZC00OTc2LWI0MzktYmFlZDdkNDk4N2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB4OUFWqKLZu57h1BH7LcwP+mSHhh1LurnFQ KcYHUtIyEIQUXojQMoXLlEHhiXSBt3YMmK+9jjzTCZgGGJn2jEa8sU5rdobW0XJ3 C/FlfD62LNbjXostUOLacLuKL4aawJm+q8O1WZsr1izSpNc9JO1vviVlT6T5Ghv1 qm2qgWnlfSSN90RZagc9LrenudJT5bS/74qgQbHfn6pNv1NFkwhz5cVpgITo2V2H lOcx699RrGJn+Ccl19TZ0ZRstYEi45sN5Am92bUIawnNRIgXfcfic2duFH8SORZY zGn/ERSTjvWKA1m8sWDvlKGtbDtrJgEy7EIiM+lgUGZqxGxPcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSFzP8bsVWf2qdIo6r16eD/UMeKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWNmM2JhYTctZGJjMS0z YWZjLWFmOTAtMTgzNjgxYzZmNjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9u7QliY9Jv5jz6PHTy1Yzk7up6ZBOJ8byxhwmSp9Wy4TA3Gbqa/XYT ihUhEV5aDXivAJy+LmmMO/rLX2DYsHWtBZyt286EDw/aOJKY5QCtA2oo4MzpGgte 9F5Shz1kcIZg4bj29Rk3r3hH6J0xbn5e/ADpd2+Qy3dAJVNMfPBTzH+ecZf4dEdE sa9K6WvCrg1j65MsbM5ocLlpn+Q4J+WyXcTmiCN1gea9TszafwQuIImbfT1drqVc LkrZofLU96OIFDw3Gq5omVX14elswOPXw78rOVCItttakkOs8NBHqbvU9dBIci7R SaFBEejcKvnryt46JqF8o1+7tFSVxrg= -----END CERTIFICATE-----Generated at Mon Aug 4 14:52:42 2025 by rpki-client