$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa File: d3472d91-6027-3989-8e71-4dc7c885f1fa.roa (raw, json) Hash identifier: eS5k13OweuIZWwgboQNjpWjYlSSdpiqW+8/0fTR/ovA= Subject key identifier: A5:BF:FD:46:E2:25:36:33:09:62:76:C1:DD:24:EC:0D:76:EB:BA:A5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AA85BBCE1C7734CC162515640 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 9009 IP address blocks: 172.94.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:bc:e1:c7:73:4c:c1:62:51:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=c16f2b0f-d9c2-40ed-961b-5879c9ab03f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ee:28:b6:05:43:48:c7:79:00:ee:2d:b1:e5: bf:3f:1c:49:0c:51:2e:08:35:fc:82:7e:5e:8d:3b: ac:09:75:1b:ba:3a:66:ca:74:32:1c:cc:99:21:22: 6a:4c:a3:85:04:a5:17:8d:15:35:c9:bd:37:07:f4: 57:8a:8c:f7:cd:99:55:80:9a:34:f1:e4:6a:75:33: 68:42:df:b4:6e:03:7c:43:66:21:47:04:d5:6f:d3: 6c:43:05:c9:ed:ac:a8:f9:b9:28:57:71:a7:60:bf: 21:71:da:71:94:88:05:26:0c:94:7e:72:53:96:1c: 31:27:b8:b6:33:01:ae:25:c5:ea:3b:68:3c:d1:46: e9:07:e3:0f:be:35:c7:6e:7a:f1:a1:bf:4d:09:b8: 4d:46:89:d7:7f:0e:0c:00:4b:bb:7b:ba:b2:b6:5e: 85:52:61:b4:3a:31:2c:30:cd:5d:00:9d:c4:af:9c: a6:0b:66:91:0a:a9:8b:e2:25:c6:ed:84:c7:41:08: 46:3e:4d:75:d0:74:08:59:ac:fd:97:18:89:f0:cc: 6e:1f:71:87:4b:24:85:8f:4c:75:60:8c:80:53:01: aa:4f:50:ef:22:36:76:a0:00:b0:0f:58:aa:4e:5d: 1d:a3:76:89:e9:8f:df:c6:8e:de:d9:e3:d7:d4:6c: 7e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BF:FD:46:E2:25:36:33:09:62:76:C1:DD:24:EC:0D:76:EB:BA:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:06:f5:0a:62:2d:39:9c:db:9b:64:8b:9a:5c:88:59:47:c4: 4d:9b:92:45:7f:ba:23:f2:16:b5:57:3c:61:ce:e9:de:ee:8c: 0b:08:28:11:2d:1b:81:21:83:65:54:06:ed:34:b0:bd:c2:0f: 49:7d:70:35:07:aa:c3:80:a8:5b:28:21:11:6c:74:08:b5:f0: a5:2b:3f:af:6f:f2:5b:8e:8e:f3:f3:02:32:a1:4e:33:e7:ad: 2c:a4:60:96:c4:55:8d:f1:a8:d3:55:98:8b:b7:b0:bb:f0:ca: 0f:60:b0:3a:81:89:c1:23:ec:7c:44:13:25:40:2e:9a:f1:80: e9:31:1c:2a:34:fd:91:c0:5b:72:39:85:27:22:32:ff:13:10: 87:59:4a:66:76:06:dd:e5:ae:cc:26:93:ef:cf:bf:1a:25:f0: d4:0b:e5:79:5b:f8:cb:8b:50:6d:48:d5:76:fb:6e:54:ec:ec: 39:83:4c:0b:00:80:a3:54:21:d1:e7:a1:2e:43:ea:ca:a4:91: cd:ce:9d:3c:ee:91:ac:e5:76:e3:3a:5e:e0:cb:6e:81:bf:3d: d9:52:58:ab:19:99:19:f5:02:39:27:df:87:48:4a:cc:c7:d4: 43:73:16:21:1e:ed:1a:60:26:c3:df:b4:05:f4:39:91:e5:d1: 08:87:ff:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7zhx3NMwWJRVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk YzE2ZjJiMGYtZDljMi00MGVkLTk2MWItNTg3OWM5YWIwM2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse4otgVDSMd5AO4tseW/PxxJDFEuCDX8gn5e jTusCXUbujpmynQyHMyZISJqTKOFBKUXjRU1yb03B/RXioz3zZlVgJo08eRqdTNo Qt+0bgN8Q2YhRwTVb9NsQwXJ7ayo+bkoV3GnYL8hcdpxlIgFJgyUfnJTlhwxJ7i2 MwGuJcXqO2g80UbpB+MPvjXHbnrxob9NCbhNRonXfw4MAEu7e7qytl6FUmG0OjEs MM1dAJ3Er5ymC2aRCqmL4iXG7YTHQQhGPk110HQIWaz9lxiJ8MxuH3GHSySFj0x1 YIyAUwGqT1DvIjZ2oACwD1iqTl0do3aJ6Y/fxo7e2ePX1Gx+ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKW//UbiJTYzCWJ2wd0k7A1267qlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDM0NzJkOTEtNjAyNy0z OTg5LThlNzEtNGRjN2M4ODVmMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgG9QpiLTmc25tki5pciFlHxE2bkkV/uiPyFrVXPGHO6d7ujAsIKBEt G4Ehg2VUBu00sL3CD0l9cDUHqsOAqFsoIRFsdAi18KUrP69v8luOjvPzAjKhTjPn rSykYJbEVY3xqNNVmIu3sLvwyg9gsDqBicEj7HxEEyVALprxgOkxHCo0/ZHAW3I5 hSciMv8TEIdZSmZ2Bt3lrswmk+/Pvxol8NQL5Xlb+MuLUG1I1Xb7blTs7DmDTAsA gKNUIdHnoS5D6sqkkc3OnTzukazlduM6XuDLboG/PdlSWKsZmRn1Ajkn34dISszH 1ENzFiEe7RpgJsPftAX0OZHl0QiH/xU= -----END CERTIFICATE-----Generated at Sat Aug 9 10:54:13 2025 by rpki-client