$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6057ef7b-5b34-3d50-820b-5115e319967d.roa File: 6057ef7b-5b34-3d50-820b-5115e319967d.roa (raw, json) Hash identifier: oHJyj+6mX3SU77quH0bX09wDSQHOB61Tz/IX4EdJ7TM= Subject key identifier: 14:C5:1C:16:A3:F1:86:45:63:F5:01:73:0B:C7:E6:05:8C:B9:6F:54 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B047C12D97464866675A118B0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6057ef7b-5b34-3d50-820b-5115e319967d.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 9009 IP address blocks: 172.94.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:12:d9:74:64:86:66:75:a1:18:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=b3bfa7f3-f167-4d1c-a350-6b57f3e38ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:57:ef:6b:df:e6:82:ac:eb:a2:75:11:07:63: 8f:ed:33:62:22:7c:55:6c:27:68:16:58:35:4c:2a: f0:62:cc:11:54:e5:23:e2:16:e6:59:1b:17:04:0c: d9:2a:d4:c8:56:0e:97:5f:f3:4e:3f:32:0b:83:03: 07:53:93:c1:de:25:d9:f9:98:42:83:08:fd:f3:d6: a8:5f:0c:4a:83:b5:4a:cf:87:2a:c9:db:71:ba:24: 38:d1:ab:20:8b:d1:68:06:2e:7e:72:08:32:09:fc: f0:ec:9a:fd:a3:2c:75:c6:3d:c0:cf:ee:b5:82:21: ba:ad:96:10:27:31:08:a8:5d:89:9e:c1:9c:21:fd: 44:19:bd:36:cf:65:db:69:8e:cd:30:a3:0f:ce:2d: f3:a8:13:57:77:b3:65:88:ac:e8:69:94:35:1c:b1: e2:cc:d3:1d:7d:16:44:d7:88:93:e1:a2:9f:45:65: 3a:d8:67:88:cc:c5:c3:08:1d:49:05:68:39:66:f1: 5a:0f:8c:0c:d5:26:52:86:a6:ce:39:cd:a4:04:55: c0:a5:d2:55:8a:87:28:bf:03:de:ff:01:79:30:12: dc:54:bf:4a:c9:f4:73:72:83:25:0e:49:14:4c:a8: b3:b7:26:8b:72:54:fc:3f:db:22:5b:0b:23:cf:70: 39:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C5:1C:16:A3:F1:86:45:63:F5:01:73:0B:C7:E6:05:8C:B9:6F:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6057ef7b-5b34-3d50-820b-5115e319967d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a6:cd:7b:b0:f4:7b:03:b7:d2:0d:52:90:50:ac:c2:a7:e7: ee:d2:fd:68:d5:37:83:df:72:30:39:e9:58:65:fc:31:32:92: 6b:6d:1f:77:2c:cc:5c:a5:40:e3:fd:d2:df:de:ac:ef:d1:c3: b0:19:c6:41:0a:05:ac:e7:a0:6c:20:01:77:09:f1:0f:87:8a: fb:b1:4d:96:44:d5:76:a6:82:85:8a:02:4c:b4:64:75:7e:e9: 84:80:58:eb:72:d3:d1:d4:bb:a8:75:86:58:db:c3:e5:8b:17: 4c:45:45:a9:14:61:ff:23:50:fa:1c:88:6d:9e:e6:34:ae:30: 08:3b:a2:d2:06:dc:dd:53:c5:b3:66:a8:81:0f:c7:18:ea:59: 48:e7:6a:9e:4c:5f:84:c4:eb:ea:59:50:8e:d2:be:b8:7e:0a: e3:76:7a:92:5c:00:22:58:71:c4:9a:5b:a7:78:67:23:cd:ed: f6:43:3b:d0:b3:4f:a2:65:2a:ba:cf:f4:a5:75:40:09:7f:76: 65:e9:7a:c7:f7:b5:e4:3b:7b:16:73:b2:5b:95:e0:16:7c:c4: 20:68:cf:c2:7d:39:77:b3:16:06:db:e9:71:f6:72:62:45:db: a9:79:99:2b:1c:64:38:9d:e2:59:80:55:fd:f3:49:e5:9f:36: 9f:fc:44:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBLZdGSGZnWhGLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk YjNiZmE3ZjMtZjE2Ny00ZDFjLWEzNTAtNmI1N2YzZTM4Y2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Vfva9/mgqzronURB2OP7TNiInxVbCdoFlg1 TCrwYswRVOUj4hbmWRsXBAzZKtTIVg6XX/NOPzILgwMHU5PB3iXZ+ZhCgwj989ao XwxKg7VKz4cqydtxuiQ40asgi9FoBi5+cggyCfzw7Jr9oyx1xj3Az+61giG6rZYQ JzEIqF2JnsGcIf1EGb02z2XbaY7NMKMPzi3zqBNXd7NliKzoaZQ1HLHizNMdfRZE 14iT4aKfRWU62GeIzMXDCB1JBWg5ZvFaD4wM1SZShqbOOc2kBFXApdJViocovwPe /wF5MBLcVL9KyfRzcoMlDkkUTKiztyaLclT8P9siWwsjz3A5lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTFHBaj8YZFY/UBcwvH5gWMuW9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjA1N2VmN2ItNWIzNC0z ZDUwLTgyMGItNTExNWUzMTk5NjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF57MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFamzXuw9HsDt9INUpBQrMKn5+7S/WjVN4PfcjA56Vhl/DEykmttH3cs zFylQOP90t/erO/Rw7AZxkEKBaznoGwgAXcJ8Q+HivuxTZZE1XamgoWKAky0ZHV+ 6YSAWOty09HUu6h1hljbw+WLF0xFRakUYf8jUPociG2e5jSuMAg7otIG3N1TxbNm qIEPxxjqWUjnap5MX4TE6+pZUI7Svrh+CuN2epJcACJYccSaW6d4ZyPN7fZDO9Cz T6JlKrrP9KV1QAl/dmXpesf3teQ7exZzsluV4BZ8xCBoz8J9OXezFgbb6XH2cmJF 26l5mSscZDid4lmAVf3zSeWfNp/8RI8= -----END CERTIFICATE-----Generated at Fri Sep 5 04:43:43 2025 by rpki-client