$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8cc09166-b1e4-3efb-bf15-6c7858eacd2a.roa File: 8cc09166-b1e4-3efb-bf15-6c7858eacd2a.roa (raw, json) Hash identifier: bEe5Cv6wTTtiFrBqg1Bx7BTUxW7WNF4RcjupnetTsa0= Subject key identifier: 32:5B:EB:23:F8:C8:B1:00:1D:C7:FF:0F:F7:C1:B3:52:6E:A5:16:E9 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A96FE4ADAA741DDB9A424E780 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8cc09166-b1e4-3efb-bf15-6c7858eacd2a.roa Signing time: Mon 21 Jul 2025 07:44:23 +0000 ROA not before: Mon 21 Jul 2025 07:44:23 +0000 ROA not after: Sun 19 Oct 2025 07:44:23 +0000 asID: 12687 IP address blocks: 172.94.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:fe:4a:da:a7:41:dd:b9:a4:24:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 21 07:44:23 2025 GMT Not After : Oct 19 07:44:23 2025 GMT Subject: CN=42a9f1d9-8518-4690-a0f2-4616708d93fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:95:2b:9d:03:41:0b:8c:82:95:46:c5:31:22: 89:f5:b9:46:7e:06:f1:98:06:8a:c4:13:a1:e6:e6: 59:a1:d0:2c:3a:4b:75:d9:ef:45:59:2d:6e:93:39: a9:7b:07:85:47:89:c6:27:84:fe:0c:0a:56:12:75: 9b:f1:16:c4:58:26:f4:f9:04:60:c4:f1:f5:8d:80: 7c:e5:8a:05:09:d2:f2:86:59:c0:87:82:83:f5:fa: 3a:19:f3:14:0b:88:d7:91:ea:2f:2c:03:a7:9e:bc: 4c:b4:84:d6:87:c9:f4:45:59:a2:b2:29:b9:eb:21: d1:05:61:4c:7f:94:f3:83:63:58:b0:5e:41:7f:7a: 2e:2a:2b:90:75:79:6f:3a:ac:bc:e1:07:90:ad:6c: f7:87:e4:2f:68:47:a2:93:7c:59:75:89:8c:a7:29: e1:9c:9e:23:12:19:d5:15:53:c8:82:cb:3a:c4:a3: 7a:f1:0b:59:4a:5a:09:b6:d7:13:f5:f7:e1:d9:5a: 4a:7a:df:dd:72:0a:3a:75:2e:74:92:01:8a:20:d7: 78:96:e7:45:5e:64:9e:c2:4e:0a:25:d8:27:c6:f9: ff:44:99:ad:9a:ec:89:77:00:5a:f1:de:52:5f:62: b6:63:2b:ed:e4:dd:a1:f4:31:28:15:10:0a:53:e9: bd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5B:EB:23:F8:C8:B1:00:1D:C7:FF:0F:F7:C1:B3:52:6E:A5:16:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8cc09166-b1e4-3efb-bf15-6c7858eacd2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:14:0f:d7:ab:ab:a2:0d:2d:e0:4f:d9:77:a0:be:95:fb:e1: ee:43:87:8e:c3:61:f1:13:23:21:00:b4:f9:4a:a2:ad:bf:48: b0:c9:51:f5:04:97:c5:15:52:f3:26:55:40:66:24:a6:54:78: 43:df:27:d3:42:35:92:5c:76:d7:44:2c:4f:b9:09:24:74:f5: 69:68:9c:68:ec:75:b7:41:54:67:ef:fb:71:90:e4:38:b2:f9: 57:3d:9a:58:3d:43:7a:ad:f3:09:4c:72:1f:a3:e3:58:50:a0: 44:f4:04:ca:81:54:69:37:51:d6:e2:d1:61:2c:53:ff:98:f0: 79:42:24:b1:69:d3:df:0f:97:04:03:22:51:e5:2c:8e:2e:5a: 20:b7:60:e4:fa:af:5c:d9:d7:7d:67:e6:35:b3:c7:72:eb:19: 7a:4e:31:c1:b9:3c:85:ae:4a:0f:9b:6b:81:dd:94:53:5c:43: f1:35:92:13:a1:21:ed:9d:d7:99:d6:0e:30:59:3b:a8:50:a7: 69:69:bd:1f:b8:11:31:ad:f4:6f:d6:f2:9f:a6:53:46:c8:1c: fe:9d:c9:fa:25:38:a8:dc:84:9a:f7:e9:80:c6:36:1b:55:06: 03:cf:76:97:fa:e7:c8:1c:b2:11:e2:3c:d5:57:0c:ae:38:ab: 3e:c8:cb:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqW/krap0HduaQk54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcyMTA3NDQyM1oXDTI1MTAxOTA3NDQyM1owLzEtMCsGA1UEAxMk NDJhOWYxZDktODUxOC00NjkwLWEwZjItNDYxNjcwOGQ5M2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJUrnQNBC4yClUbFMSKJ9blGfgbxmAaKxBOh 5uZZodAsOkt12e9FWS1ukzmpeweFR4nGJ4T+DApWEnWb8RbEWCb0+QRgxPH1jYB8 5YoFCdLyhlnAh4KD9fo6GfMUC4jXkeovLAOnnrxMtITWh8n0RVmisim56yHRBWFM f5Tzg2NYsF5Bf3ouKiuQdXlvOqy84QeQrWz3h+QvaEeik3xZdYmMpynhnJ4jEhnV FVPIgss6xKN68QtZSloJttcT9ffh2VpKet/dcgo6dS50kgGKINd4ludFXmSewk4K Jdgnxvn/RJmtmuyJdwBa8d5SX2K2Yyvt5N2h9DEoFRAKU+m9JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJb6yP4yLEAHcf/D/fBs1JupRbpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOGNjMDkxNjYtYjFlNC0z ZWZiLWJmMTUtNmM3ODU4ZWFjZDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkUD9erq6INLeBP2XegvpX74e5Dh47DYfETIyEAtPlKoq2/SLDJUfUE l8UVUvMmVUBmJKZUeEPfJ9NCNZJcdtdELE+5CSR09WlonGjsdbdBVGfv+3GQ5Diy +Vc9mlg9Q3qt8wlMch+j41hQoET0BMqBVGk3Udbi0WEsU/+Y8HlCJLFp098PlwQD IlHlLI4uWiC3YOT6r1zZ131n5jWzx3LrGXpOMcG5PIWuSg+ba4HdlFNcQ/E1khOh Ie2d15nWDjBZO6hQp2lpvR+4ETGt9G/W8p+mU0bIHP6dyfolOKjchJr36YDGNhtV BgPPdpf658gcshHiPNVXDK44qz7Iy9k= -----END CERTIFICATE-----Generated at Tue Jul 22 11:51:13 2025 by rpki-client