$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d0876aa-9c6d-3355-9dea-0862c0e2b013.roa File: 9d0876aa-9c6d-3355-9dea-0862c0e2b013.roa (raw, json) Hash identifier: FeCS3OvSqI3NunFuWSy5h5V8tDi5UEJWogg35eaRhuw= Subject key identifier: 97:4B:9D:58:60:9B:4E:86:00:10:CF:66:F6:1A:3A:0C:40:5E:5F:D2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AF521509E661D61E9969E37C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d0876aa-9c6d-3355-9dea-0862c0e2b013.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 9009 IP address blocks: 172.94.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:50:9e:66:1d:61:e9:96:9e:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=cf0979af-b77e-425f-86b8-f245d6067e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4f:7a:a5:61:73:b7:5d:72:f0:35:43:e8:45: 6d:06:3f:00:28:3b:94:c9:5e:79:43:5f:bf:c2:7c: 67:69:15:45:8e:4b:c4:a7:91:d1:ea:0d:b8:33:96: 0e:36:6d:7e:4b:a5:0b:bc:fe:16:0f:a5:48:b3:1d: 00:59:87:4c:b9:53:49:a7:67:d9:b2:78:15:91:e6: 85:32:95:46:4a:7b:53:5a:e1:95:b1:d8:e6:84:1d: ad:07:86:70:ef:2d:d3:0b:11:89:25:e1:ee:ca:10: ba:ca:82:e8:07:2c:cc:7f:21:e1:d0:4c:19:36:a6: 72:b6:9e:a1:20:b5:9b:c0:b2:a2:9e:52:f7:71:92: 72:fb:41:c8:75:29:cf:f0:84:08:5c:5e:b3:df:e1: 3f:04:a6:06:b4:f8:aa:71:fa:79:7f:49:11:6e:71: b6:a3:e5:e5:6a:53:9c:ae:c8:62:9a:bc:51:78:75: 6f:d9:cd:81:53:26:47:a6:83:29:db:f0:3e:6f:40: 61:95:8c:8e:6c:f7:9e:5c:a8:03:d7:17:d3:11:49: 1d:41:4a:60:76:0e:ee:a4:33:e7:ab:19:30:2c:54: 11:a1:07:36:60:96:03:a1:a3:10:b2:1d:d0:24:29: d0:74:1d:07:a8:ed:2a:80:da:d0:1b:94:3b:b5:16: 92:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4B:9D:58:60:9B:4E:86:00:10:CF:66:F6:1A:3A:0C:40:5E:5F:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d0876aa-9c6d-3355-9dea-0862c0e2b013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:3a:17:7f:dc:98:ce:76:fd:a8:90:2e:47:6c:86:8c:c8:a5: e3:7f:2d:d0:b3:b0:a9:7f:f0:c2:68:ec:6e:0c:b3:81:14:9b: b7:82:79:e2:af:c2:4e:dd:91:24:be:f6:34:dd:c3:b7:45:c7: 16:1c:24:1b:71:ef:95:ec:01:f8:59:ea:26:12:d8:f3:05:e3: c9:7a:6a:44:ea:5f:26:a7:b5:21:05:ff:8b:a2:ca:25:e2:42: e2:a3:cf:fa:22:7e:3f:1f:f0:09:41:9d:43:ed:91:2e:56:1b: 00:65:c1:ea:5a:a8:98:78:41:a5:ba:d1:95:22:ce:e5:b4:cb: 41:67:6a:e9:6c:6f:34:8e:9d:4f:53:7d:1c:41:4c:2e:85:79: 20:e8:d5:2a:11:f6:59:85:78:6e:02:75:33:d9:ae:f2:8b:ad: 7d:ed:da:f5:a9:4a:68:97:1c:85:64:bb:6c:d6:db:ba:a0:ea: 7d:7e:31:c5:f0:6c:25:c4:70:33:67:da:48:67:4d:e0:92:e2: ec:0a:80:60:1d:90:56:75:7b:8a:d1:5d:23:87:4d:5e:3a:92: 1f:eb:08:a5:5f:50:8f:bf:b3:2c:cb:24:7e:fa:0b:d3:04:55: 6c:ee:75:dd:50:1f:00:80:19:e0:40:1f:4a:21:c9:05:82:6a: fd:40:39:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IVCeZh1h6ZaeN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2YwOTc5YWYtYjc3ZS00MjVmLTg2YjgtZjI0NWQ2MDY3ZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE96pWFzt11y8DVD6EVtBj8AKDuUyV55Q1+/ wnxnaRVFjkvEp5HR6g24M5YONm1+S6ULvP4WD6VIsx0AWYdMuVNJp2fZsngVkeaF MpVGSntTWuGVsdjmhB2tB4Zw7y3TCxGJJeHuyhC6yoLoByzMfyHh0EwZNqZytp6h ILWbwLKinlL3cZJy+0HIdSnP8IQIXF6z3+E/BKYGtPiqcfp5f0kRbnG2o+XlalOc rshimrxReHVv2c2BUyZHpoMp2/A+b0BhlYyObPeeXKgD1xfTEUkdQUpgdg7upDPn qxkwLFQRoQc2YJYDoaMQsh3QJCnQdB0HqO0qgNrQG5Q7tRaSFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdLnVhgm06GABDPZvYaOgxAXl/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWQwODc2YWEtOWM2ZC0z MzU1LTlkZWEtMDg2MmMwZTJiMDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF59MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABc6F3/cmM52/aiQLkdshozIpeN/LdCzsKl/8MJo7G4Ms4EUm7eCeeKv wk7dkSS+9jTdw7dFxxYcJBtx75XsAfhZ6iYS2PMF48l6akTqXyantSEF/4uiyiXi QuKjz/oifj8f8AlBnUPtkS5WGwBlwepaqJh4QaW60ZUizuW0y0FnaulsbzSOnU9T fRxBTC6FeSDo1SoR9lmFeG4CdTPZrvKLrX3t2vWpSmiXHIVku2zW27qg6n1+McXw bCXEcDNn2khnTeCS4uwKgGAdkFZ1e4rRXSOHTV46kh/rCKVfUI+/syzLJH76C9ME VWzudd1QHwCAGeBAH0ohyQWCav1AOR0= -----END CERTIFICATE-----Generated at Fri Sep 5 02:35:13 2025 by rpki-client