$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/204247f2-e16f-35bb-a0f2-673b83ad1a92.roa File: 204247f2-e16f-35bb-a0f2-673b83ad1a92.roa (raw, json) Hash identifier: QZgNx06LI9977OmnfBq4ABdwBq3gYvuH+UbkIe2xSgw= Subject key identifier: 77:15:9F:06:AA:C3:6A:94:C5:55:35:86:DF:D9:7D:46:40:62:0E:81 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A96FD91597ED196FB82EC8C00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/204247f2-e16f-35bb-a0f2-673b83ad1a92.roa Signing time: Mon 21 Jul 2025 07:42:55 +0000 ROA not before: Mon 21 Jul 2025 07:42:55 +0000 ROA not after: Sun 19 Oct 2025 07:42:55 +0000 asID: 12687 IP address blocks: 172.94.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:fd:91:59:7e:d1:96:fb:82:ec:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 21 07:42:55 2025 GMT Not After : Oct 19 07:42:55 2025 GMT Subject: CN=f6a77b5d-688e-4b40-be9e-1e6d18b7e1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:91:37:58:a4:01:8e:70:93:45:c3:65:e3:99: 7f:53:54:c2:dc:da:fa:c7:af:d7:ec:f4:65:07:60: 66:f1:df:69:9a:40:0d:6e:a0:7f:85:6b:9d:e3:3a: bb:8a:e9:9e:58:89:07:f5:61:63:4a:eb:70:3a:34: 84:b2:ba:28:3d:4e:3f:fd:b0:d1:74:73:f6:d6:c2: d2:6b:72:2f:f8:2a:5e:3e:d1:dd:fd:b8:83:08:6b: fb:8c:d7:a7:07:7d:91:1c:43:d3:18:07:7d:48:66: bc:67:c2:17:38:f8:9b:a2:5e:fb:cd:13:67:9e:8f: 85:53:e7:c4:1c:9e:b6:96:fc:6b:2f:de:67:4d:96: b6:5e:f9:fa:b1:c0:7b:73:e7:b1:8f:e3:d8:ba:da: 64:39:2d:ab:6d:1b:2d:32:9f:26:f1:ee:a6:e5:34: 2f:6a:e8:33:52:a4:86:a9:05:ee:47:7b:2c:b6:94: 6f:d4:da:41:57:31:18:4c:d9:af:98:a2:e6:62:6b: 0d:6b:fb:c6:eb:fd:41:b2:1a:e0:22:20:2d:88:f1: 1d:94:8a:99:98:62:f2:6d:3c:16:ad:5b:2f:1e:df: fd:b0:0d:97:cd:c0:e4:97:2d:ec:3b:ae:30:46:2c: 7f:0f:01:d7:6c:0d:25:54:40:f1:0a:b8:29:5c:61: 18:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:15:9F:06:AA:C3:6A:94:C5:55:35:86:DF:D9:7D:46:40:62:0E:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/204247f2-e16f-35bb-a0f2-673b83ad1a92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c4:89:f1:39:16:83:bc:6a:cc:dc:ae:26:8c:f3:9a:12:a5: 59:99:cf:c3:64:c5:51:ea:4a:9f:c7:0a:27:60:eb:5b:29:7d: bc:5f:a7:14:cc:e4:2c:9a:ad:8e:5e:d1:44:87:46:45:67:a1: e0:b2:b5:bc:52:1c:18:34:09:9a:c3:d3:d2:31:5c:6d:28:ff: 73:ac:bb:40:3e:b7:48:2a:39:a6:16:3e:fb:b5:00:20:5f:ae: ed:cf:66:f8:e1:0a:4f:64:af:42:5a:01:be:a4:11:21:bd:e7: f7:74:a4:83:7c:9f:4b:b0:c0:c7:4a:e0:1e:45:2b:dc:43:9b: 8e:7b:24:e5:a2:8d:c9:e1:8c:41:54:30:59:32:de:db:4e:cb: ca:e3:bd:7e:f1:15:0a:91:b0:b0:65:17:68:bf:8a:87:b5:4b: 4e:62:ed:f3:d8:16:87:16:31:a3:c6:56:3c:f8:18:90:83:51: a9:9c:30:f8:8d:a0:e2:48:16:3d:f0:42:38:91:78:90:2e:b5: 66:f9:01:98:18:c9:fb:83:bb:cb:53:de:27:0e:cb:f7:66:98: 78:2e:a4:b6:54:f2:56:b0:cb:31:31:62:13:db:b3:4c:44:2d: 07:39:c1:fb:a5:de:5e:20:f4:9d:c1:60:9a:04:98:0d:2e:ca: 6c:78:22:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqW/ZFZftGW+4LsjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcyMTA3NDI1NVoXDTI1MTAxOTA3NDI1NVowLzEtMCsGA1UEAxMk ZjZhNzdiNWQtNjg4ZS00YjQwLWJlOWUtMWU2ZDE4YjdlMWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJE3WKQBjnCTRcNl45l/U1TC3Nr6x6/X7PRl B2Bm8d9pmkANbqB/hWud4zq7iumeWIkH9WFjSutwOjSEsrooPU4//bDRdHP21sLS a3Iv+CpePtHd/biDCGv7jNenB32RHEPTGAd9SGa8Z8IXOPibol77zRNnno+FU+fE HJ62lvxrL95nTZa2Xvn6scB7c+exj+PYutpkOS2rbRstMp8m8e6m5TQvaugzUqSG qQXuR3sstpRv1NpBVzEYTNmvmKLmYmsNa/vG6/1BshrgIiAtiPEdlIqZmGLybTwW rVsvHt/9sA2XzcDkly3sO64wRix/DwHXbA0lVEDxCrgpXGEYKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcVnwaqw2qUxVU1ht/ZfUZAYg6BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjA0MjQ3ZjItZTE2Zi0z NWJiLWEwZjItNjczYjgzYWQxYTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjEifE5FoO8aszcriaM85oSpVmZz8NkxVHqSp/HCidg61spfbxfpxTM 5CyarY5e0USHRkVnoeCytbxSHBg0CZrD09IxXG0o/3Osu0A+t0gqOaYWPvu1ACBf ru3PZvjhCk9kr0JaAb6kESG95/d0pIN8n0uwwMdK4B5FK9xDm457JOWijcnhjEFU MFky3ttOy8rjvX7xFQqRsLBlF2i/ioe1S05i7fPYFocWMaPGVjz4GJCDUamcMPiN oOJIFj3wQjiReJAutWb5AZgYyfuDu8tT3icOy/dmmHgupLZU8lawyzExYhPbs0xE LQc5wful3l4g9J3BYJoEmA0uymx4Iqw= -----END CERTIFICATE-----Generated at Tue Jul 22 11:53:00 2025 by rpki-client