$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2b954cb2-3640-32fb-9b89-f61b5393a599.roa File: 2b954cb2-3640-32fb-9b89-f61b5393a599.roa (raw, json) Hash identifier: SROMk33WwYl+gQCXVciRJsEXJLRtsaOHNHxNgtpjl+w= Subject key identifier: 1D:29:08:75:CE:77:B0:80:67:29:90:02:A9:AF:30:BC:38:B7:4D:56 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B00E6E779701C6E2B941C8140 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2b954cb2-3640-32fb-9b89-f61b5393a599.roa Signing time: Thu 28 Aug 2025 06:12:57 +0000 ROA not before: Thu 28 Aug 2025 06:12:57 +0000 ROA not after: Wed 26 Nov 2025 07:12:57 +0000 asID: 9009 IP address blocks: 172.94.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:e6:e7:79:70:1c:6e:2b:94:1c:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 28 06:12:57 2025 GMT Not After : Nov 26 07:12:57 2025 GMT Subject: CN=0542027d-9d03-4a49-908d-89808fbc0c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a2:df:3b:57:e7:50:f1:53:16:b2:1e:b8:7c: b5:51:0a:9a:0d:5e:01:d7:14:31:a8:29:de:2e:97: 0c:fe:43:6a:9e:cc:10:17:43:00:47:08:4d:9f:d2: 5a:5b:bf:83:2f:f0:be:32:df:0a:60:df:1c:67:2f: 0d:e3:1d:6d:79:ff:64:15:9c:b1:1b:6c:91:dd:ce: c2:e9:0e:95:e0:32:0c:5e:55:b4:96:c7:94:a0:32: 0d:31:cd:39:72:39:8c:e7:08:80:92:ad:d4:a5:30: 05:07:c5:65:2e:9c:95:5a:75:1b:fc:f3:c2:f4:21: 50:57:e3:ca:f7:f7:f3:e3:fc:2c:67:6c:f5:72:19: c5:54:89:b3:a3:53:fe:80:fa:7b:fe:72:9f:24:a6: 27:a6:23:ba:71:6a:fe:bb:21:51:2c:99:c1:c7:02: 79:3e:7f:73:cb:a1:1c:85:5f:82:fc:3c:4c:5e:c3: b2:92:e4:61:4c:08:51:1f:b3:f6:36:01:8c:ad:19: 89:11:d1:36:df:f5:22:b8:7f:42:1d:80:bd:1a:64: 4d:51:ed:a7:76:21:c4:8e:94:55:85:69:9a:db:2b: 45:b7:03:fb:6e:1d:be:84:d4:a6:42:f8:92:15:e2: 29:1b:74:3d:fa:4b:7f:11:0a:86:e0:16:f6:cd:31: a1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:29:08:75:CE:77:B0:80:67:29:90:02:A9:AF:30:BC:38:B7:4D:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2b954cb2-3640-32fb-9b89-f61b5393a599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:fe:6a:1b:b3:93:78:3e:f8:26:ed:02:29:99:80:ef:0d:c1: d5:9a:1e:62:d6:8d:e2:94:c0:ed:9e:14:d1:f0:a4:64:32:af: 2f:7e:0b:22:7c:10:b0:08:26:f9:8a:93:8e:5c:3c:e1:21:c4: c8:41:94:33:4e:8d:d6:75:e6:19:89:6a:73:d8:4d:af:6b:4d: 6e:aa:fa:45:a1:4c:08:4f:05:15:10:b6:0c:cb:45:30:e7:a7: a4:a0:7a:01:90:56:b8:72:33:66:17:d6:a6:30:8a:48:a9:52: 63:03:75:b4:2e:15:8b:45:90:86:02:c3:34:9b:67:79:2a:a0: 53:72:f9:63:6b:84:df:39:11:2e:81:30:a9:fa:12:7d:9f:97: 2c:be:03:9e:e7:3f:7e:e8:69:63:fe:ef:dd:37:02:e9:85:13: a5:f1:bf:c0:e2:b1:1b:eb:46:b4:0f:72:20:17:00:74:cd:63: ac:18:97:e7:63:2c:a7:3c:68:19:ac:43:11:8f:c6:81:a9:26: 93:77:07:71:ab:7b:f8:89:e8:da:72:48:4e:26:b8:d0:09:26: d4:ff:ef:21:f0:25:37:d0:b2:a5:c4:fa:7f:8e:53:dd:58:7d: ef:44:c4:69:a7:ad:f7:99:af:25:a5:20:94:2a:3d:1b:f3:3a: 5d:34:c2:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsA5ud5cBxuK5QcgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyODA2MTI1N1oXDTI1MTEyNjA3MTI1N1owLzEtMCsGA1UEAxMk MDU0MjAyN2QtOWQwMy00YTQ5LTkwOGQtODk4MDhmYmMwYzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaLfO1fnUPFTFrIeuHy1UQqaDV4B1xQxqCne LpcM/kNqnswQF0MARwhNn9JaW7+DL/C+Mt8KYN8cZy8N4x1tef9kFZyxG2yR3c7C 6Q6V4DIMXlW0lseUoDINMc05cjmM5wiAkq3UpTAFB8VlLpyVWnUb/PPC9CFQV+PK 9/fz4/wsZ2z1chnFVImzo1P+gPp7/nKfJKYnpiO6cWr+uyFRLJnBxwJ5Pn9zy6Ec hV+C/DxMXsOykuRhTAhRH7P2NgGMrRmJEdE23/UiuH9CHYC9GmRNUe2ndiHEjpRV hWma2ytFtwP7bh2+hNSmQviSFeIpG3Q9+kt/EQqG4Bb2zTGhaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0pCHXOd7CAZymQAqmvMLw4t01WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmI5NTRjYjItMzY0MC0z MmZiLTliODktZjYxYjUzOTNhNTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADT+ahuzk3g++CbtAimZgO8NwdWaHmLWjeKUwO2eFNHwpGQyry9+CyJ8 ELAIJvmKk45cPOEhxMhBlDNOjdZ15hmJanPYTa9rTW6q+kWhTAhPBRUQtgzLRTDn p6SgegGQVrhyM2YX1qYwikipUmMDdbQuFYtFkIYCwzSbZ3kqoFNy+WNrhN85ES6B MKn6En2flyy+A57nP37oaWP+7903AumFE6Xxv8DisRvrRrQPciAXAHTNY6wYl+dj LKc8aBmsQxGPxoGpJpN3B3Gre/iJ6NpySE4muNAJJtT/7yHwJTfQsqXE+n+OU91Y fe9ExGmnrfeZryWlIJQqPRvzOl00wgY= -----END CERTIFICATE-----Generated at Fri Sep 5 02:28:52 2025 by rpki-client