$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ad58e6d6-0359-3a1e-9a26-dec1e027ed51.roa File: ad58e6d6-0359-3a1e-9a26-dec1e027ed51.roa (raw, json) Hash identifier: fbDcU2gfgb6ULsRjPgtcn71J716jNHA6vEErOUocKbg= Subject key identifier: 9F:4D:F3:E8:3A:E0:18:28:D2:CE:15:87:83:3B:BB:41:46:AA:B9:8C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AA85BB158F8393C1A4C3D6880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ad58e6d6-0359-3a1e-9a26-dec1e027ed51.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 9009 IP address blocks: 172.94.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b1:58:f8:39:3c:1a:4c:3d:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=95a98db4-9466-46aa-ad7f-1ed9d778e6fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0f:4f:03:53:3c:d7:0a:93:56:ac:1b:fc:f8: a7:3e:c0:ae:26:89:a8:09:ec:f7:2a:3e:e9:6a:9e: b9:ba:16:d9:d4:94:49:4e:ea:66:11:02:05:4a:90: cf:6f:ed:9b:a9:e7:1d:a0:85:f3:fb:bd:85:be:69: fe:07:5d:2b:ab:07:9f:ba:18:cb:02:ac:6c:8e:74: fc:8d:13:05:a7:54:9f:fb:c0:db:32:6c:04:c9:79: 37:e0:bd:4b:ab:f1:14:2f:54:45:5a:ff:e8:5f:a0: ca:6f:dd:0f:b5:ac:2e:d6:08:d9:00:cf:00:b3:24: 65:ed:02:2b:50:57:65:34:c2:4b:03:54:fc:5c:a3: 4b:65:6e:67:b4:76:8a:52:5c:c1:84:0c:cf:df:b3: ec:d4:12:a9:fd:df:8f:4c:50:e6:b1:05:b3:75:8b: d3:cf:1a:fd:d7:f0:64:48:47:70:fc:10:a3:ea:7d: 22:9c:1e:c4:5d:3f:85:2e:dc:43:16:d7:3e:6b:0a: ee:78:ce:7b:19:88:4e:ac:6c:1d:7e:a7:89:db:55: 06:5e:de:12:0c:e9:8d:fc:a6:6e:31:cb:76:e8:6a: b3:c8:0d:a4:c6:cf:68:c0:56:19:47:ba:b8:e9:ac: 37:ea:3e:40:0e:e2:39:ff:7f:a2:bf:eb:21:25:a5: 37:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4D:F3:E8:3A:E0:18:28:D2:CE:15:87:83:3B:BB:41:46:AA:B9:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ad58e6d6-0359-3a1e-9a26-dec1e027ed51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:3a:21:0b:f9:de:15:a8:81:2e:bf:23:d9:1e:44:1b:c3:c5: 2c:f1:f7:b9:f1:33:94:c7:60:75:c6:8e:c1:72:69:c8:ab:f6: ab:a2:15:3c:cf:a9:16:47:77:6a:46:f1:85:89:8a:77:6d:6e: a0:a2:ce:d6:64:de:fc:52:ec:f1:86:34:77:70:a9:20:83:77: 84:ef:70:47:11:38:2e:fb:4e:ac:9b:b8:35:c5:65:05:26:74: 7f:3e:b2:71:46:80:9c:b7:1b:d6:a6:d3:55:99:1c:da:b1:6c: 1e:2f:8f:7a:3a:3c:71:e3:bc:59:b3:93:9b:57:ca:15:71:ab: 0c:c0:10:e5:c4:91:eb:b9:15:02:78:58:e1:a4:23:a7:52:b3: 43:56:38:ec:80:35:70:a0:ea:83:00:f6:e5:1a:a1:f2:3e:d5: 79:6c:f8:4e:2e:d8:7f:dc:8d:e9:bc:04:fb:7f:da:fb:d2:c6: 73:25:60:c2:42:90:da:4e:ec:91:f1:68:76:f6:35:82:29:48: 10:18:ee:69:72:63:b6:67:b1:72:fd:95:2a:fb:ee:62:f9:31: a8:b2:9e:af:c3:0e:71:bf:77:71:38:12:40:ac:06:f7:28:bd: c7:1e:81:b7:dc:fa:3b:5c:f3:37:b5:54:a0:90:b1:91:be:56: d3:9e:72:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7FY+Dk8Gkw9aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk OTVhOThkYjQtOTQ2Ni00NmFhLWFkN2YtMWVkOWQ3NzhlNmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw9PA1M81wqTVqwb/PinPsCuJomoCez3Kj7p ap65uhbZ1JRJTupmEQIFSpDPb+2bqecdoIXz+72Fvmn+B10rqwefuhjLAqxsjnT8 jRMFp1Sf+8DbMmwEyXk34L1Lq/EUL1RFWv/oX6DKb90Ptawu1gjZAM8AsyRl7QIr UFdlNMJLA1T8XKNLZW5ntHaKUlzBhAzP37Ps1BKp/d+PTFDmsQWzdYvTzxr91/Bk SEdw/BCj6n0inB7EXT+FLtxDFtc+awrueM57GYhOrGwdfqeJ21UGXt4SDOmN/KZu Mct26GqzyA2kxs9owFYZR7q46aw36j5ADuI5/3+iv+shJaU3TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9N8+g64Bgo0s4Vh4M7u0FGqrmMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWQ1OGU2ZDYtMDM1OS0z YTFlLTlhMjYtZGVjMWUwMjdlZDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ6IQv53hWogS6/I9keRBvDxSzx97nxM5THYHXGjsFyacir9quiFTzP qRZHd2pG8YWJindtbqCiztZk3vxS7PGGNHdwqSCDd4TvcEcROC77TqybuDXFZQUm dH8+snFGgJy3G9am01WZHNqxbB4vj3o6PHHjvFmzk5tXyhVxqwzAEOXEkeu5FQJ4 WOGkI6dSs0NWOOyANXCg6oMA9uUaofI+1Xls+E4u2H/cjem8BPt/2vvSxnMlYMJC kNpO7JHxaHb2NYIpSBAY7mlyY7ZnsXL9lSr77mL5Maiynq/DDnG/d3E4EkCsBvco vccegbfc+jtc8ze1VKCQsZG+VtOect8= -----END CERTIFICATE-----Generated at Wed Aug 6 04:03:04 2025 by rpki-client