$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa File: baa6a648-7ab8-39bf-8357-a787b0346893.roa (raw, json) Hash identifier: OH5WIr7FM5XmnLolE/vj5YSJ6Ayv2b7cAu0KkuPUsio= Subject key identifier: 72:92:1A:3E:CA:6A:4D:4F:C7:64:9D:6B:84:CC:5E:81:B6:34:BF:9C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B0B76AD7DD8A85B0BC149D900 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 3223 IP address blocks: 172.94.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:ad:7d:d8:a8:5b:0b:c1:49:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=44198d43-5c11-4cef-9e34-5f1593ccf2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b7:c9:71:19:86:a8:29:0d:52:ee:f6:aa:6f: 39:d8:74:3b:0b:f9:82:7a:e7:74:aa:11:6d:01:1e: 77:80:00:13:59:e6:3d:1b:55:9a:a2:b1:b8:6f:6a: cd:b5:f8:8a:2c:8d:f4:67:74:e6:de:8d:70:9c:5b: 1e:e4:a8:f4:62:92:d1:33:c1:ae:0f:2e:96:4a:3a: 36:8f:8d:2b:e1:81:a1:15:37:4f:f6:e3:de:65:9c: 19:1e:97:7b:75:a9:f6:1b:c2:52:3b:25:46:15:e4: d1:e8:ea:f2:2b:4f:61:86:3b:82:2a:f8:49:e2:0e: 77:47:e2:ac:b0:53:43:f3:8c:38:c7:0e:62:29:34: 7b:e3:94:4d:0d:e5:9e:d6:9a:62:36:25:05:7b:ab: 45:bd:f3:3c:ad:48:b9:0e:65:55:5a:36:78:37:75: da:94:f7:cb:4a:6f:74:3b:62:72:bb:f3:32:53:e4: 45:e0:e0:06:39:10:68:ec:ba:f7:b0:35:a4:25:3b: ca:1b:5b:5a:4c:7f:44:ce:1f:fb:2c:c1:41:57:b6: 54:98:1c:de:70:76:1a:10:53:f9:f4:19:c4:42:35: a3:50:2a:60:3f:ec:3f:dd:ed:3b:07:ed:85:20:e1: 43:10:3a:b0:ce:61:c7:e1:c8:2b:81:1a:ba:46:23: bc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:92:1A:3E:CA:6A:4D:4F:C7:64:9D:6B:84:CC:5E:81:B6:34:BF:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d3:92:ea:8b:10:73:9e:72:05:06:e9:81:b2:53:b4:9f:d4: 7a:67:bb:f9:93:5d:88:c6:52:75:71:85:a7:aa:ef:0a:26:e6: 98:1f:d6:f0:1f:b8:83:57:49:15:b2:a3:be:0b:3c:5b:85:a0: 2f:fe:a6:10:15:9f:d5:0f:43:66:fa:7d:d3:36:71:92:55:6a: 4b:40:90:ec:9e:0f:ac:84:8d:f5:52:ab:f5:5a:9d:7d:36:a5: a0:30:35:e8:76:b2:cc:22:cc:61:df:c0:3c:b1:80:b2:fe:24: a0:e1:92:23:64:30:07:e8:1b:a5:7f:de:46:db:75:88:c5:93: 2d:68:84:c8:47:c9:db:29:16:29:c8:32:ce:38:cd:54:c2:90: c0:08:57:1f:a1:b8:7b:28:fe:0e:c3:da:2f:65:00:98:22:34: fe:6d:ff:0a:3b:18:eb:66:03:b6:74:3e:dc:6f:37:5d:20:c7: 87:e4:23:5b:6a:7a:cf:de:2e:9d:e8:28:61:a3:b5:c5:f1:fd: 76:ee:8e:81:cc:8a:54:ee:a8:5e:17:21:06:74:18:a3:25:47: 35:91:bf:57:c9:71:7f:2e:b1:73:35:e4:e0:c2:5a:8f:92:7a: b1:ed:65:74:1a:ff:73:32:48:8f:00:d4:da:53:fe:0f:55:6c: 86:0f:cd:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdq192KhbC8FJ2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NDQxOThkNDMtNWMxMS00Y2VmLTllMzQtNWYxNTkzY2NmMmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrfJcRmGqCkNUu72qm852HQ7C/mCeud0qhFt AR53gAATWeY9G1WaorG4b2rNtfiKLI30Z3Tm3o1wnFse5Kj0YpLRM8GuDy6WSjo2 j40r4YGhFTdP9uPeZZwZHpd7dan2G8JSOyVGFeTR6OryK09hhjuCKvhJ4g53R+Ks sFND84w4xw5iKTR745RNDeWe1ppiNiUFe6tFvfM8rUi5DmVVWjZ4N3XalPfLSm90 O2Jyu/MyU+RF4OAGORBo7Lr3sDWkJTvKG1taTH9Ezh/7LMFBV7ZUmBzecHYaEFP5 9BnEQjWjUCpgP+w/3e07B+2FIOFDEDqwzmHH4cgrgRq6RiO8TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKSGj7Kak1Px2Sda4TMXoG2NL+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmFhNmE2NDgtN2FiOC0z OWJmLTgzNTctYTc4N2IwMzQ2ODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbTkuqLEHOecgUG6YGyU7Sf1Hpnu/mTXYjGUnVxhaeq7wom5pgf1vAf uINXSRWyo74LPFuFoC/+phAVn9UPQ2b6fdM2cZJVaktAkOyeD6yEjfVSq/VanX02 paAwNeh2sswizGHfwDyxgLL+JKDhkiNkMAfoG6V/3kbbdYjFky1ohMhHydspFinI Ms44zVTCkMAIVx+huHso/g7D2i9lAJgiNP5t/wo7GOtmA7Z0PtxvN10gx4fkI1tq es/eLp3oKGGjtcXx/XbujoHMilTuqF4XIQZ0GKMlRzWRv1fJcX8usXM15ODCWo+S erHtZXQa/3MySI8A1NpT/g9VbIYPzdY= -----END CERTIFICATE-----Generated at Fri Sep 5 23:36:54 2025 by rpki-client