$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f01c0b5f-74b1-303c-82b6-ec987ef60964.roa File: f01c0b5f-74b1-303c-82b6-ec987ef60964.roa (raw, json) Hash identifier: QqyupN9oDhjwIbKKWtAsryh78BkpgqmRzWGc3vNeZ0Y= Subject key identifier: 54:A0:EB:BE:81:F4:F8:A6:75:73:D3:6E:B2:23:F0:1B:9E:58:0A:A9 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A8FD93627470AC9E96AE3EB80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f01c0b5f-74b1-303c-82b6-ec987ef60964.roa Signing time: Fri 18 Jul 2025 18:19:01 +0000 ROA not before: Fri 18 Jul 2025 18:19:01 +0000 ROA not after: Thu 16 Oct 2025 18:19:01 +0000 asID: 207184 IP address blocks: 172.94.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8f:d9:36:27:47:0a:c9:e9:6a:e3:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 18 18:19:01 2025 GMT Not After : Oct 16 18:19:01 2025 GMT Subject: CN=40cef5c3-dc08-4a2e-9133-7df00b970b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:69:9a:4e:d2:75:47:f7:ab:61:03:e4:b4:29: cd:25:55:34:53:c0:60:9c:59:9d:ac:40:71:aa:9a: ba:05:3f:67:93:69:95:b4:c3:22:38:90:07:33:29: 72:b0:39:c2:e2:35:69:d6:7c:44:0d:68:2f:8f:fa: 34:ec:c1:54:68:63:db:47:bf:cd:89:a6:22:56:25: b8:f4:0c:6d:c0:13:6f:34:27:27:b0:b1:e9:41:3a: 7a:c8:52:76:d3:0a:d3:46:8d:36:41:cf:62:dd:94: 60:02:df:30:f7:72:88:04:4f:5a:c4:cc:a7:19:3f: c3:64:af:f6:92:0f:02:97:13:d7:62:2a:3b:c0:54: 41:00:ed:fa:d9:e6:8c:8c:0e:31:be:d4:8b:51:7e: 59:38:a0:8c:57:08:5e:3e:83:da:6f:f5:e7:c2:e2: 24:ca:cd:7b:68:02:04:e8:75:19:6b:a8:33:7a:ea: 0a:6e:fe:70:9f:07:11:04:bd:a7:ae:4f:0b:bc:fb: 06:8c:f1:8e:ea:4b:53:27:a5:f3:94:bf:cc:84:34: 0f:31:e7:8a:b5:fb:9d:ed:fb:af:a8:7a:76:34:c4: 85:96:1b:f7:f7:c6:2e:4d:ba:3e:73:5a:6a:65:c9: 5b:49:b1:85:03:88:9c:13:bd:bf:73:fd:e9:31:de: e9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A0:EB:BE:81:F4:F8:A6:75:73:D3:6E:B2:23:F0:1B:9E:58:0A:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f01c0b5f-74b1-303c-82b6-ec987ef60964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:1b:60:e3:cc:05:13:64:d3:c3:e3:87:d5:26:44:87:38:d1: 2a:a2:8b:ab:ef:f5:bd:ea:92:0b:cf:16:20:02:8c:3a:0b:bd: 5a:58:d6:5a:51:29:9f:94:91:ed:6a:36:57:d5:3a:7b:a7:ca: 36:10:4d:cc:6f:87:cc:09:f9:dd:52:4c:38:0f:d6:6c:e1:3f: 34:01:67:54:3f:b7:17:f3:a2:76:39:ae:9d:d9:83:a1:60:fe: a6:de:02:2c:05:8b:97:dc:8a:b9:4e:90:4a:f0:a9:72:e1:58: e1:1a:2d:25:bb:30:98:b6:32:f9:c1:e6:73:c6:2d:6f:db:54: ec:93:9d:ce:f6:45:9c:52:20:17:db:a5:28:cc:34:62:48:7c: 6e:4a:28:f3:0e:c3:e0:1c:69:11:a5:c5:e9:76:3a:06:5e:9b: ed:c0:59:0b:b9:79:90:24:43:12:f9:ee:49:fe:28:d2:5c:4b: 86:0f:b8:d3:a3:7b:79:16:50:98:5e:10:63:72:27:94:d4:60: 2f:ed:65:ad:e8:4b:da:5d:82:19:65:0f:43:29:ee:f0:cf:04: 14:07:d2:1a:0b:32:da:89:d3:a4:35:3f:ec:58:2b:57:0c:de: de:3b:5c:c2:ce:44:cc:76:a2:64:8e:60:6c:39:0c:42:01:1b: 60:78:3a:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqP2TYnRwrJ6Wrj64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxODE4MTkwMVoXDTI1MTAxNjE4MTkwMVowLzEtMCsGA1UEAxMk NDBjZWY1YzMtZGMwOC00YTJlLTkxMzMtN2RmMDBiOTcwYjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWmaTtJ1R/erYQPktCnNJVU0U8BgnFmdrEBx qpq6BT9nk2mVtMMiOJAHMylysDnC4jVp1nxEDWgvj/o07MFUaGPbR7/NiaYiViW4 9AxtwBNvNCcnsLHpQTp6yFJ20wrTRo02Qc9i3ZRgAt8w93KIBE9axMynGT/DZK/2 kg8ClxPXYio7wFRBAO362eaMjA4xvtSLUX5ZOKCMVwhePoPab/XnwuIkys17aAIE 6HUZa6gzeuoKbv5wnwcRBL2nrk8LvPsGjPGO6ktTJ6XzlL/MhDQPMeeKtfud7fuv qHp2NMSFlhv398YuTbo+c1pqZclbSbGFA4icE72/c/3pMd7pyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSg676B9PimdXPTbrIj8BueWAqpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjAxYzBiNWYtNzRiMS0z MDNjLTgyYjYtZWM5ODdlZjYwOTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcbYOPMBRNk08Pjh9UmRIc40Sqii6vv9b3qkgvPFiACjDoLvVpY1lpR KZ+Uke1qNlfVOnunyjYQTcxvh8wJ+d1STDgP1mzhPzQBZ1Q/txfzonY5rp3Zg6Fg /qbeAiwFi5fcirlOkErwqXLhWOEaLSW7MJi2MvnB5nPGLW/bVOyTnc72RZxSIBfb pSjMNGJIfG5KKPMOw+AcaRGlxel2OgZem+3AWQu5eZAkQxL57kn+KNJcS4YPuNOj e3kWUJheEGNyJ5TUYC/tZa3oS9pdghllD0Mp7vDPBBQH0hoLMtqJ06Q1P+xYK1cM 3t47XMLORMx2omSOYGw5DEIBG2B4OiA= -----END CERTIFICATE-----Generated at Tue Jul 22 11:50:37 2025 by rpki-client