$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0299041d-6eb6-3d41-a336-fcaaf84ae1e6.roa File: 0299041d-6eb6-3d41-a336-fcaaf84ae1e6.roa (raw, json) Hash identifier: Yu7NqQxnivBnttEhOqUUg0BvYrhNvK0izISjcc1Q7SY= Subject key identifier: 2B:FA:68:3B:87:AD:53:DE:E2:A6:00:97:99:E1:0D:71:91:EC:FE:E7 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A96FD3560F646EFC65FE6BE00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0299041d-6eb6-3d41-a336-fcaaf84ae1e6.roa Signing time: Mon 21 Jul 2025 07:42:12 +0000 ROA not before: Mon 21 Jul 2025 07:42:12 +0000 ROA not after: Sun 19 Oct 2025 07:42:12 +0000 asID: 12687 IP address blocks: 172.94.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:fd:35:60:f6:46:ef:c6:5f:e6:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 21 07:42:12 2025 GMT Not After : Oct 19 07:42:12 2025 GMT Subject: CN=2bafd245-980c-4b13-908e-182051016276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:48:48:51:fb:4f:0c:f1:3f:6d:63:e5:58:11: b0:59:d7:89:1f:c0:12:7d:e8:bd:d4:67:58:5a:b8: 07:26:94:ba:78:79:af:8e:c6:a0:67:f2:27:9a:35: 84:dd:7f:23:3f:7c:c3:a4:3e:c3:8d:ba:e0:58:f0: 85:bd:d7:b9:f3:99:32:d3:e9:9b:53:ed:6d:20:da: c2:3f:24:8b:3e:98:e3:b1:9c:e5:27:9d:a5:ac:3d: 05:c9:6f:2d:81:9f:4c:ba:45:38:52:31:6e:ab:41: f3:0d:81:bd:73:cd:1d:01:45:2f:a4:28:fc:2d:be: 95:8b:bf:50:86:21:37:68:60:31:5e:c2:bc:9f:de: 8d:bc:f0:ae:6a:9f:e4:50:f8:b1:1f:79:6a:29:8a: bd:cd:4e:c1:64:0f:e1:52:fc:34:32:81:f4:cd:2a: a0:dd:e8:09:2d:0c:e7:6b:c8:da:b8:c2:ec:f9:e5: 9f:34:00:70:d3:de:f5:34:97:61:b7:17:e7:64:d2: c3:84:50:f6:aa:0c:4c:92:9d:cc:c6:59:82:de:32: d7:95:a2:97:af:46:b7:71:47:24:d5:87:3e:d2:10: a8:ab:73:cb:28:d3:a9:fa:f5:e8:21:2a:6c:2a:db: 4e:74:3d:76:b9:4d:85:07:81:fc:2f:09:d0:d8:fa: bf:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FA:68:3B:87:AD:53:DE:E2:A6:00:97:99:E1:0D:71:91:EC:FE:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0299041d-6eb6-3d41-a336-fcaaf84ae1e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:7e:a7:d6:b6:93:a6:57:d1:67:65:9c:13:05:f9:16:ba:37: 32:e1:1c:49:61:5f:f7:55:fe:ac:6a:52:7c:ea:81:35:02:83: 72:d5:0e:27:e7:6e:45:1b:2b:76:fa:5d:2a:ac:69:ad:61:a6: 51:bd:e0:b3:21:a1:a4:00:82:14:35:18:a8:07:74:57:25:10: fe:40:8b:ff:41:20:b2:6d:42:b3:7a:a3:d4:2e:c4:79:0a:aa: 70:c1:d1:77:71:d7:ba:34:47:5e:53:b9:31:6c:12:5b:d6:03: 77:81:15:82:e0:55:17:98:26:00:69:c8:84:ac:7e:69:6c:4b: 86:80:19:cd:ec:d1:e2:21:1f:d2:44:2f:dd:f5:b2:ec:8b:07: c9:1a:2d:bb:73:33:15:da:9f:05:b3:0e:41:01:ae:b8:c7:2e: 34:6f:da:4a:20:07:2a:eb:00:7a:13:c8:d4:11:d2:e4:83:2b: fc:03:1a:8b:dd:b0:7b:e5:b1:4c:20:89:28:c7:47:18:fc:bd: 54:26:33:82:29:20:5a:d8:4c:f2:0b:e3:70:fc:c2:c9:99:ae: 13:b1:05:57:60:59:02:60:f4:15:63:ee:92:ab:10:8e:55:88: 20:60:be:e8:d1:7f:a8:29:73:45:58:96:03:3b:5e:cc:2c:f1: 3a:a7:e5:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqW/TVg9kbvxl/mvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcyMTA3NDIxMloXDTI1MTAxOTA3NDIxMlowLzEtMCsGA1UEAxMk MmJhZmQyNDUtOTgwYy00YjEzLTkwOGUtMTgyMDUxMDE2Mjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUhIUftPDPE/bWPlWBGwWdeJH8ASfei91GdY WrgHJpS6eHmvjsagZ/InmjWE3X8jP3zDpD7DjbrgWPCFvde585ky0+mbU+1tINrC PySLPpjjsZzlJ52lrD0FyW8tgZ9MukU4UjFuq0HzDYG9c80dAUUvpCj8Lb6Vi79Q hiE3aGAxXsK8n96NvPCuap/kUPixH3lqKYq9zU7BZA/hUvw0MoH0zSqg3egJLQzn a8jauMLs+eWfNABw0971NJdhtxfnZNLDhFD2qgxMkp3MxlmC3jLXlaKXr0a3cUck 1Yc+0hCoq3PLKNOp+vXoISpsKttOdD12uU2FB4H8LwnQ2Pq/cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCv6aDuHrVPe4qYAl5nhDXGR7P7nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDI5OTA0MWQtNmViNi0z ZDQxLWEzMzYtZmNhYWY4NGFlMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV+p9a2k6ZX0WdlnBMF+Ra6NzLhHElhX/dV/qxqUnzqgTUCg3LVDifn bkUbK3b6XSqsaa1hplG94LMhoaQAghQ1GKgHdFclEP5Ai/9BILJtQrN6o9QuxHkK qnDB0Xdx17o0R15TuTFsElvWA3eBFYLgVReYJgBpyISsfmlsS4aAGc3s0eIhH9JE L931suyLB8kaLbtzMxXanwWzDkEBrrjHLjRv2kogByrrAHoTyNQR0uSDK/wDGovd sHvlsUwgiSjHRxj8vVQmM4IpIFrYTPIL43D8wsmZrhOxBVdgWQJg9BVj7pKrEI5V iCBgvujRf6gpc0VYlgM7Xsws8Tqn5cY= -----END CERTIFICATE-----Generated at Wed Jul 23 02:03:09 2025 by rpki-client