$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/903f3150-8c22-338c-b68e-6ae7cf33b7b5.roa File: 903f3150-8c22-338c-b68e-6ae7cf33b7b5.roa (raw, json) Hash identifier: TsAaY1C2ixsiwop1VFSjASgJ689YAP4J1+JGqQJv1LU= Subject key identifier: 7D:F0:45:A4:8A:AE:C6:5A:4F:8B:5E:22:34:5F:E5:66:72:BC:C6:16 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B047C10E261F4EA45B78BDF5C Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/903f3150-8c22-338c-b68e-6ae7cf33b7b5.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 396356 IP address blocks: 172.94.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:10:e2:61:f4:ea:45:b7:8b:df:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=230d63a5-5819-4a28-80b2-62907df31288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:92:c1:79:96:f1:05:34:fd:f3:13:1f:a0:cb: 34:e0:92:d6:51:bc:1b:ac:c2:e4:c6:5a:cf:24:fe: 00:f8:81:7f:a3:c3:29:1f:10:37:bb:78:89:2f:18: 45:97:e0:5f:ea:ba:8e:cc:42:72:5d:fc:58:36:42: c5:ea:1c:fb:9b:2f:7e:35:c4:3d:f5:02:69:af:bb: 95:d0:2e:a8:f4:36:be:78:e4:ae:a2:26:8c:ff:94: f4:db:15:b4:da:cf:ab:09:8d:8c:f0:2c:bc:23:49: 4c:41:81:01:ef:a0:b7:ab:7b:65:d0:2d:cf:28:ad: 81:b9:0f:56:5e:cc:9c:91:6e:4d:f7:b3:50:6e:4a: 84:98:4e:b1:31:7d:e3:5c:b4:8f:b4:9d:f0:d4:ad: 6c:8a:db:71:b8:cd:38:56:db:c6:8f:50:14:77:9c: 94:46:17:9e:72:7a:14:e8:c0:d2:d6:85:68:69:7f: 33:d1:a3:be:71:50:20:d5:80:e6:ff:c2:e4:a7:a0: 1a:05:bb:f1:72:0a:3f:d3:50:40:cc:76:c2:6c:49: 16:66:c5:f4:6e:52:57:b4:0b:b9:f2:67:44:d8:e0: 49:62:51:ae:c0:47:3b:78:58:ec:fd:16:1e:80:02: 4a:4d:06:27:e0:1a:bc:85:b5:fc:cc:7d:cd:7c:04: 13:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F0:45:A4:8A:AE:C6:5A:4F:8B:5E:22:34:5F:E5:66:72:BC:C6:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/903f3150-8c22-338c-b68e-6ae7cf33b7b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c2:9f:71:86:d6:31:38:a4:4f:2f:be:45:34:93:e1:2b:42: c4:8c:0e:cb:44:09:3d:00:11:c9:3c:93:2c:a4:dd:b2:63:b0: e3:0a:e4:a1:b6:26:51:c4:c1:22:5c:46:56:62:9f:bc:f7:04: 69:cb:c9:83:44:a6:da:06:74:20:54:a0:0c:a9:d0:56:9b:aa: e6:2d:3c:99:b1:24:11:5d:0c:67:a7:4f:22:d0:b2:c3:4f:3a: 2e:40:3a:39:fc:1a:d7:40:e3:51:97:d9:dd:20:90:11:d5:f8: 2b:58:42:3a:2a:a1:15:e1:d6:93:97:32:26:8a:c3:12:12:f4: 99:9d:e6:37:5c:93:4a:de:71:75:1e:20:c1:e8:b9:1a:27:73: 9d:37:35:62:ac:96:bf:d0:6b:85:d8:eb:4f:67:97:aa:ba:77: e8:7f:3f:c5:d2:35:d3:4a:10:25:3a:b5:aa:cf:88:f7:19:c0: 37:29:e7:b8:14:ba:cd:fd:26:11:c1:8a:3c:a6:b9:45:6c:2f: d9:28:d7:ef:2e:86:45:b9:da:87:1f:79:e4:e5:0e:ec:a2:95: 6b:d1:94:af:e8:0b:30:0d:92:9a:f5:66:c6:49:36:9f:b6:dd: 20:ca:05:4e:c3:c3:b4:f3:f1:78:c6:df:2a:b9:fa:2c:e6:94: b0:de:9c:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBDiYfTqRbeL31wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk MjMwZDYzYTUtNTgxOS00YTI4LTgwYjItNjI5MDdkZjMxMjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpLBeZbxBTT98xMfoMs04JLWUbwbrMLkxlrP JP4A+IF/o8MpHxA3u3iJLxhFl+Bf6rqOzEJyXfxYNkLF6hz7my9+NcQ99QJpr7uV 0C6o9Da+eOSuoiaM/5T02xW02s+rCY2M8Cy8I0lMQYEB76C3q3tl0C3PKK2BuQ9W XsyckW5N97NQbkqEmE6xMX3jXLSPtJ3w1K1sittxuM04VtvGj1AUd5yURheecnoU 6MDS1oVoaX8z0aO+cVAg1YDm/8Lkp6AaBbvxcgo/01BAzHbCbEkWZsX0blJXtAu5 8mdE2OBJYlGuwEc7eFjs/RYegAJKTQYn4Bq8hbX8zH3NfAQT4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3wRaSKrsZaT4teIjRf5WZyvMYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTAzZjMxNTAtOGMyMi0z MzhjLWI2OGUtNmFlN2NmMzNiN2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTCn3GG1jE4pE8vvkU0k+ErQsSMDstECT0AEck8kyyk3bJjsOMK5KG2 JlHEwSJcRlZin7z3BGnLyYNEptoGdCBUoAyp0FabquYtPJmxJBFdDGenTyLQssNP Oi5AOjn8GtdA41GX2d0gkBHV+CtYQjoqoRXh1pOXMiaKwxIS9Jmd5jdck0recXUe IMHouRonc503NWKslr/Qa4XY609nl6q6d+h/P8XSNdNKECU6tarPiPcZwDcp57gU us39JhHBijymuUVsL9ko1+8uhkW52ocfeeTlDuyilWvRlK/oCzANkpr1ZsZJNp+2 3SDKBU7Dw7Tz8XjG3yq5+izmlLDenLQ= -----END CERTIFICATE-----Generated at Sun Sep 7 12:42:15 2025 by rpki-client