$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d2a2d24-fc0d-3342-91ac-27058bcbcae5.roa File: 9d2a2d24-fc0d-3342-91ac-27058bcbcae5.roa (raw, json) Hash identifier: /i90YNWWHw2a+4hzNAT+QW9PK/pJ8ihe5xvxBz5UuKQ= Subject key identifier: EA:6B:31:3C:B2:E7:E8:B1:6D:C0:1E:85:80:E8:33:05:B9:C6:D9:23 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A96FDE73615E518E69EEED380 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d2a2d24-fc0d-3342-91ac-27058bcbcae5.roa Signing time: Mon 21 Jul 2025 07:43:36 +0000 ROA not before: Mon 21 Jul 2025 07:43:36 +0000 ROA not after: Sun 19 Oct 2025 07:43:36 +0000 asID: 12687 IP address blocks: 172.94.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:fd:e7:36:15:e5:18:e6:9e:ee:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 21 07:43:36 2025 GMT Not After : Oct 19 07:43:36 2025 GMT Subject: CN=250be090-5a22-4b70-9be4-3a0c0072f441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:95:3e:92:9b:a7:85:66:0f:0f:84:49:f1:c1: 9e:bc:5a:0a:10:78:30:91:85:c1:57:7f:fb:42:56: e6:f3:59:31:0f:54:1a:e5:2e:6a:27:24:6a:23:1e: 85:04:b8:4b:e7:75:03:41:a3:56:84:c7:c7:fb:93: 86:dc:46:97:2b:2d:27:98:1b:ea:00:f4:b0:5d:99: 23:b7:99:5f:9d:be:22:99:1b:d5:c7:3e:43:3f:05: c2:e3:c6:8c:38:63:f8:9b:2a:74:8d:ad:bd:f4:9a: fd:c8:57:c7:0c:14:be:18:48:68:88:a3:e5:3a:d5: 44:13:ea:d2:9d:28:a4:24:4c:37:35:d2:e3:5f:f5: 44:63:41:3d:29:c3:48:5a:a7:dd:0d:6e:44:64:b8: 81:a1:b2:ab:e5:fc:60:fb:03:65:d3:0b:9e:ca:7a: 04:1d:d9:e1:59:01:6a:bc:81:1b:05:75:bd:7f:56: 69:8b:fa:be:01:a2:ea:73:10:9b:b7:cd:e3:80:25: 31:80:47:b2:d9:8c:e2:4f:e7:d7:38:44:81:db:37: 6b:ec:13:48:ed:86:be:ea:f9:ac:10:09:3a:fc:88: 63:a2:9b:48:c8:a7:fa:9a:84:93:8f:73:76:17:6c: e1:0b:6d:eb:c7:db:96:e9:35:c1:e0:a8:ef:0f:e8: 1f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6B:31:3C:B2:E7:E8:B1:6D:C0:1E:85:80:E8:33:05:B9:C6:D9:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d2a2d24-fc0d-3342-91ac-27058bcbcae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f9:6e:77:3b:62:1b:39:82:bf:86:c3:c4:ff:0a:c1:0d:76: 76:8c:c9:d2:f0:3f:f4:10:05:78:22:44:bf:54:a9:28:55:c7: e2:0d:6c:f6:e4:77:f8:36:25:a5:e3:a1:9a:05:6b:71:04:ed: b4:07:28:4b:be:f7:a2:fc:e2:88:08:40:ba:e8:ae:93:1d:c4: 9f:b3:bb:c9:17:e9:53:f5:85:d6:96:83:b2:46:ca:58:2f:6a: 6c:9f:57:66:7a:60:72:57:eb:73:ea:f3:cb:b7:93:a8:1a:2a: c0:4d:eb:31:5d:f0:24:3f:b6:7e:39:d2:9c:07:88:cd:e1:72: a9:7d:c7:98:c7:bd:c8:4b:3e:3a:4a:87:d5:60:c0:44:a6:5a: 43:3e:61:0d:65:78:50:6f:f4:f7:28:7b:de:0b:83:b5:77:cd: 4e:56:50:04:eb:69:c1:af:d0:ed:98:37:57:29:cd:0f:5a:bb: a4:57:31:ef:32:5f:b6:de:4e:e9:a9:eb:d2:31:ee:d9:ff:5f: 10:9f:05:3e:16:24:7c:ff:d4:e2:78:5e:5a:a9:82:54:61:81: 0f:ac:47:ae:2a:57:e7:3f:90:1a:95:0c:66:99:38:91:64:83: 79:69:f0:e9:0b:fa:88:ee:0f:6a:e9:79:4b:5d:b9:cf:f6:38: 93:d1:78:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqW/ec2FeUY5p7u04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcyMTA3NDMzNloXDTI1MTAxOTA3NDMzNlowLzEtMCsGA1UEAxMk MjUwYmUwOTAtNWEyMi00YjcwLTliZTQtM2EwYzAwNzJmNDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJU+kpunhWYPD4RJ8cGevFoKEHgwkYXBV3/7 Qlbm81kxD1Qa5S5qJyRqIx6FBLhL53UDQaNWhMfH+5OG3EaXKy0nmBvqAPSwXZkj t5lfnb4imRvVxz5DPwXC48aMOGP4myp0ja299Jr9yFfHDBS+GEhoiKPlOtVEE+rS nSikJEw3NdLjX/VEY0E9KcNIWqfdDW5EZLiBobKr5fxg+wNl0wueynoEHdnhWQFq vIEbBXW9f1Zpi/q+AaLqcxCbt83jgCUxgEey2YziT+fXOESB2zdr7BNI7Ya+6vms EAk6/IhjoptIyKf6moSTj3N2F2zhC23rx9uW6TXB4KjvD+gfZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOprMTyy5+ixbcAehYDoMwW5xtkjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWQyYTJkMjQtZmMwZC0z MzQyLTkxYWMtMjcwNThiY2JjYWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHb5bnc7Yhs5gr+Gw8T/CsENdnaMydLwP/QQBXgiRL9UqShVx+INbPbk d/g2JaXjoZoFa3EE7bQHKEu+96L84ogIQLrorpMdxJ+zu8kX6VP1hdaWg7JGylgv amyfV2Z6YHJX63Pq88u3k6gaKsBN6zFd8CQ/tn450pwHiM3hcql9x5jHvchLPjpK h9VgwESmWkM+YQ1leFBv9Pcoe94Lg7V3zU5WUATracGv0O2YN1cpzQ9au6RXMe8y X7beTump69Ix7tn/XxCfBT4WJHz/1OJ4XlqpglRhgQ+sR64qV+c/kBqVDGaZOJFk g3lp8OkL+ojuD2rpeUtduc/2OJPReKs= -----END CERTIFICATE-----Generated at Wed Jul 23 02:22:03 2025 by rpki-client