$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e6ff693-73d2-3f96-8db3-7727cb7e12d8.roa File: 1e6ff693-73d2-3f96-8db3-7727cb7e12d8.roa (raw, json) Hash identifier: QKpUlJ8Y5gdRlnSQm4a2XVUri0tSMpVCi/Q7AvR9Gtc= Subject key identifier: C1:F8:C1:F4:59:9B:AB:B1:D9:B2:97:C9:5D:AA:3C:D4:11:C6:44:21 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B047C13163594ECAF5252FD00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e6ff693-73d2-3f96-8db3-7727cb7e12d8.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 9009 IP address blocks: 172.94.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:13:16:35:94:ec:af:52:52:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=030a5bd4-3e1b-40cd-beda-c58f8a8c5668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:c1:3f:e7:60:2a:21:cc:45:e4:a9:1a:6a:04: 76:8d:7c:79:6b:f0:e9:12:c5:6f:af:fc:3b:29:ef: 0f:a2:81:c6:23:70:1d:f4:e4:d9:22:a6:70:9e:53: 7a:4a:b7:8d:7d:ee:b4:39:a9:95:4a:5d:cf:2b:a8: 1f:56:f2:29:d1:b1:35:42:90:c7:7b:27:29:3a:57: 40:f1:82:ad:f8:d5:7a:59:a7:84:7c:e9:a0:af:c1: bc:1a:36:34:a9:bd:43:b8:fa:e6:24:9d:b4:18:16: de:58:91:de:60:5d:de:85:cf:b0:93:e2:aa:fa:9d: 8e:4a:a3:9b:b5:d8:a5:4b:14:98:e7:cf:3c:f1:fd: 6a:e5:c0:9a:02:09:6e:4c:2f:75:a6:9f:7b:2e:94: 9f:68:db:3b:89:c9:c3:ec:f1:4c:25:90:2d:1a:be: 2d:f5:d8:74:e0:2e:06:ed:73:63:19:f3:bc:5c:29: 36:c5:ed:10:37:cb:d1:33:5f:f8:f1:79:6c:dc:6d: d6:ee:56:f4:b7:1d:da:8d:86:b2:56:43:bf:90:9f: 30:f5:78:46:2d:0b:47:8e:2d:ee:74:73:5d:5a:dc: 68:16:7e:b9:7b:22:d6:b8:44:ec:98:d0:7e:8d:b6: 46:7c:79:43:3f:dd:a3:71:d8:5d:6b:d1:7e:31:60: 55:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F8:C1:F4:59:9B:AB:B1:D9:B2:97:C9:5D:AA:3C:D4:11:C6:44:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e6ff693-73d2-3f96-8db3-7727cb7e12d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:08:a5:d2:e3:f5:f2:18:fe:8f:6b:84:f8:76:01:53:e7:e5: 57:30:05:9b:06:df:0d:99:d7:bb:09:df:35:9d:75:45:20:7f: ab:e7:09:fd:9f:fb:bf:8d:83:d3:dc:24:f5:54:02:84:c7:2e: 85:9e:4f:31:64:a2:bf:1a:3d:06:4b:c5:7e:26:25:7d:12:bf: 3a:2a:77:f8:bd:09:e9:b3:d4:52:13:b2:16:f7:78:ba:a3:65: aa:9d:98:e9:99:29:b1:29:5e:d2:09:e3:6c:2f:4e:08:e4:dc: 57:ca:cc:57:9d:e3:3a:ba:16:7d:ea:eb:7a:82:84:a0:4c:96: d1:14:02:66:47:79:f7:54:1a:18:d8:54:46:c8:fa:36:3d:fa: 70:31:a0:92:60:58:54:79:4a:2d:0a:84:b8:be:3a:f5:38:d6: 90:c3:aa:8d:1e:27:a1:d1:99:ae:e3:42:61:35:d8:da:e6:84: ff:1b:02:80:81:42:be:4e:67:d6:aa:e4:4c:76:84:da:14:8e: 00:72:13:67:f3:55:6c:3d:52:56:07:87:5e:10:41:c8:98:a1: f1:47:b3:3c:f3:2e:ab:af:11:01:d4:e1:69:4c:0c:52:9c:7e: 59:08:30:71:72:1f:8a:f8:0e:05:f7:e4:d3:51:46:5e:ff:f8: 9a:9d:b9:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBMWNZTsr1JS/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk MDMwYTViZDQtM2UxYi00MGNkLWJlZGEtYzU4ZjhhOGM1NjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+8E/52AqIcxF5KkaagR2jXx5a/DpEsVvr/w7 Ke8PooHGI3Ad9OTZIqZwnlN6SreNfe60OamVSl3PK6gfVvIp0bE1QpDHeycpOldA 8YKt+NV6WaeEfOmgr8G8GjY0qb1DuPrmJJ20GBbeWJHeYF3ehc+wk+Kq+p2OSqOb tdilSxSY58888f1q5cCaAgluTC91pp97LpSfaNs7icnD7PFMJZAtGr4t9dh04C4G 7XNjGfO8XCk2xe0QN8vRM1/48Xls3G3W7lb0tx3ajYayVkO/kJ8w9XhGLQtHji3u dHNdWtxoFn65eyLWuETsmNB+jbZGfHlDP92jcdhda9F+MWBVVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMH4wfRZm6ux2bKXyV2qPNQRxkQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWU2ZmY2OTMtNzNkMi0z Zjk2LThkYjMtNzcyN2NiN2UxMmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8IpdLj9fIY/o9rhPh2AVPn5VcwBZsG3w2Z17sJ3zWddUUgf6vnCf2f +7+Ng9PcJPVUAoTHLoWeTzFkor8aPQZLxX4mJX0Svzoqd/i9Cemz1FITshb3eLqj ZaqdmOmZKbEpXtIJ42wvTgjk3FfKzFed4zq6Fn3q63qChKBMltEUAmZHefdUGhjY VEbI+jY9+nAxoJJgWFR5Si0KhLi+OvU41pDDqo0eJ6HRma7jQmE12NrmhP8bAoCB Qr5OZ9aq5Ex2hNoUjgByE2fzVWw9UlYHh14QQciYofFHszzzLquvEQHU4WlMDFKc flkIMHFyH4r4DgX35NNRRl7/+JqduZA= -----END CERTIFICATE-----Generated at Fri Sep 5 05:57:55 2025 by rpki-client