$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/80ee8c9f-fcd1-3188-9d9e-ddcec9a52f69.roa File: 80ee8c9f-fcd1-3188-9d9e-ddcec9a52f69.roa (raw, json) Hash identifier: fHZH+tHU5SwLbEc9wHny1CH6v+dz4tF8YKSdliANJ7M= Subject key identifier: 0E:0E:47:36:11:0B:9E:5A:8A:7A:54:65:D2:20:6A:88:E8:9B:5E:4E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A96FF07FD7DDC5FD16EC43000 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/80ee8c9f-fcd1-3188-9d9e-ddcec9a52f69.roa Signing time: Mon 21 Jul 2025 07:45:52 +0000 ROA not before: Mon 21 Jul 2025 07:45:52 +0000 ROA not after: Sun 19 Oct 2025 07:45:52 +0000 asID: 12687 IP address blocks: 172.94.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:ff:07:fd:7d:dc:5f:d1:6e:c4:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 21 07:45:52 2025 GMT Not After : Oct 19 07:45:52 2025 GMT Subject: CN=fbda2063-6663-48d2-9ac5-b6fc8de90fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2c:b4:06:7d:b9:83:91:a5:46:59:81:7c:86: 57:60:f1:68:91:6f:15:56:87:55:96:77:47:b9:9e: a4:71:9f:b4:36:2b:c0:1c:35:d1:61:e9:53:10:f9: fb:4c:02:b5:36:56:94:16:10:0b:81:90:10:a0:35: 57:ff:f9:de:2f:11:14:5f:67:09:a1:e7:0f:97:33: 34:9e:31:63:7b:9d:45:5c:a6:80:0b:48:61:56:34: 27:b7:39:32:79:75:3b:6e:ca:83:b6:e5:6b:93:11: 98:e6:c1:12:05:63:e7:d2:26:db:ee:4c:d5:68:3c: 18:1d:22:dd:95:82:ab:3d:0b:4b:02:23:70:53:1c: f4:0c:a2:f4:f5:3e:00:f8:40:fb:f5:ba:6c:d9:50: dc:07:b8:1a:67:cb:48:03:2e:80:83:74:8e:d9:04: f2:c5:28:40:07:1b:d9:8e:9b:fd:cf:0d:84:5b:ce: 96:68:7f:04:61:bb:d2:ef:77:94:9e:3f:7b:07:90: 37:97:95:8f:bd:02:da:f8:92:36:52:32:23:7b:fb: 04:9b:1d:4f:2e:41:b4:59:6b:e2:cd:8a:a7:ef:08: dd:90:46:dd:a4:af:39:9b:97:55:b8:7f:c3:1d:50: 9b:ff:56:86:bd:f1:cc:10:0e:a4:e0:6b:3d:f3:52: ac:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0E:47:36:11:0B:9E:5A:8A:7A:54:65:D2:20:6A:88:E8:9B:5E:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/80ee8c9f-fcd1-3188-9d9e-ddcec9a52f69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:c2:34:9c:e6:44:a0:de:9c:4f:1d:7e:59:ed:80:e5:ac:55: 05:a8:99:95:23:50:6a:8f:b4:60:52:36:8f:63:fd:a1:c4:0c: f4:32:a4:c6:29:1e:f1:24:da:36:77:ef:3e:74:86:f7:ea:17: 55:d5:09:ca:97:a9:cd:70:52:62:07:81:76:30:51:b8:82:5a: cd:8e:6f:93:0d:47:cc:1b:e5:4a:4e:4d:66:e6:f1:b2:c4:f3: 76:3d:1d:88:e9:c5:a6:84:e5:ed:4e:5e:9b:a9:d1:7e:a4:13: 02:18:df:76:84:64:ee:f1:54:ae:90:ce:bc:85:c3:80:63:7a: 22:81:2e:91:88:2d:d1:fa:51:f8:2d:31:4b:ec:5c:8f:70:c5: b8:f0:fc:a3:65:c6:35:a2:0a:2d:b8:20:6d:34:25:8b:af:38: 5f:0c:48:58:da:21:1b:d6:17:c4:94:b4:99:0b:9d:f7:cd:ca: d1:ed:eb:ee:a5:fc:0e:90:43:21:de:47:52:8d:77:42:3b:f0: 55:6e:b3:f1:04:81:11:e5:71:f3:a1:68:c1:6f:5f:96:d6:a7: 8f:81:08:2c:e7:6b:2d:d8:54:57:69:54:26:12:bb:45:1e:5c: f4:0d:c7:a0:04:3c:e1:42:67:7b:44:d8:f8:7a:08:19:e6:e1: 29:ed:c4:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqW/wf9fdxf0W7EMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcyMTA3NDU1MloXDTI1MTAxOTA3NDU1MlowLzEtMCsGA1UEAxMk ZmJkYTIwNjMtNjY2My00OGQyLTlhYzUtYjZmYzhkZTkwZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCy0Bn25g5GlRlmBfIZXYPFokW8VVodVlndH uZ6kcZ+0NivAHDXRYelTEPn7TAK1NlaUFhALgZAQoDVX//neLxEUX2cJoecPlzM0 njFje51FXKaAC0hhVjQntzkyeXU7bsqDtuVrkxGY5sESBWPn0ibb7kzVaDwYHSLd lYKrPQtLAiNwUxz0DKL09T4A+ED79bps2VDcB7gaZ8tIAy6Ag3SO2QTyxShABxvZ jpv9zw2EW86WaH8EYbvS73eUnj97B5A3l5WPvQLa+JI2UjIje/sEmx1PLkG0WWvi zYqn7wjdkEbdpK85m5dVuH/DHVCb/1aGvfHMEA6k4Gs981KsDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4ORzYRC55ainpUZdIgaojom15OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODBlZThjOWYtZmNkMS0z MTg4LTlkOWUtZGRjZWM5YTUyZjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHCNJzmRKDenE8dflntgOWsVQWomZUjUGqPtGBSNo9j/aHEDPQypMYp HvEk2jZ37z50hvfqF1XVCcqXqc1wUmIHgXYwUbiCWs2Ob5MNR8wb5UpOTWbm8bLE 83Y9HYjpxaaE5e1OXpup0X6kEwIY33aEZO7xVK6QzryFw4BjeiKBLpGILdH6Ufgt MUvsXI9wxbjw/KNlxjWiCi24IG00JYuvOF8MSFjaIRvWF8SUtJkLnffNytHt6+6l /A6QQyHeR1KNd0I78FVus/EEgRHlcfOhaMFvX5bWp4+BCCznay3YVFdpVCYSu0Ue XPQNx6AEPOFCZ3tE2Ph6CBnm4SntxIk= -----END CERTIFICATE-----Generated at Tue Jul 22 11:54:06 2025 by rpki-client