$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bd3d3554-3b8e-3804-9f34-e572ee29034a.roa File: bd3d3554-3b8e-3804-9f34-e572ee29034a.roa (raw, json) Hash identifier: +QHWvktmI9aCpe6MWMHYnPRFGeBiPRvHIvGMuL5TQ9E= Subject key identifier: F1:F0:B4:07:77:99:CC:1F:71:82:1B:F2:A9:B1:80:9E:DB:73:A2:D9 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B0746C723244BA0BCE9DE6800 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bd3d3554-3b8e-3804-9f34-e572ee29034a.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 9009 IP address blocks: 172.94.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c7:23:24:4b:a0:bc:e9:de:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=91f50ba4-1ef3-42b7-9157-bb47ff9958c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f7:20:e9:a9:66:3d:5f:9d:5c:36:f8:48:f0: 2e:1d:67:4e:86:3b:1d:b9:d4:f1:96:b8:0e:c1:72: 59:e8:da:10:01:6a:8c:79:e2:c7:b4:54:30:e7:8f: 82:da:60:d1:1c:98:b5:4b:61:77:6f:4f:d1:15:2f: d8:47:c7:e6:de:68:03:6d:17:82:1b:4a:a9:6e:3f: 60:89:c2:ca:ae:b2:26:3c:fa:65:e7:d0:f4:2e:88: 73:e5:cd:3a:ad:15:c9:d8:c5:17:4d:d7:c0:0a:8a: 01:3c:9f:d2:5a:a0:b1:f4:9b:c8:c5:dc:10:74:9a: fb:21:b5:78:8f:be:d4:c2:0d:04:0d:02:9a:72:95: 90:73:5a:27:cc:b3:e7:4a:b4:59:58:ce:89:57:30: 59:e0:c7:53:6b:bd:3d:d0:6b:56:a2:90:e5:87:ec: 07:e7:0c:05:97:a2:7e:c9:02:84:19:3f:38:62:ff: f6:fa:1b:d8:dc:11:a0:a0:ec:16:fe:59:9b:4a:6d: f2:c6:ff:4e:75:38:66:1d:26:8a:4d:c1:2a:4d:56: 9b:2c:b4:3f:9f:17:db:11:06:4a:b8:b1:5f:ef:b9: f9:43:49:f2:23:45:b1:4e:a0:ba:90:de:2e:92:ee: f9:30:9a:53:39:e9:5b:78:f4:90:62:b6:a5:15:74: 72:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F0:B4:07:77:99:CC:1F:71:82:1B:F2:A9:B1:80:9E:DB:73:A2:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bd3d3554-3b8e-3804-9f34-e572ee29034a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:7e:23:3f:fb:cb:03:b8:6e:c3:6d:e5:d7:95:fe:f6:b4:c7: bb:4e:97:99:7c:e1:7c:a9:e4:5b:78:73:76:ab:52:2a:a2:98: 1a:cd:c4:9b:f1:9c:a3:b8:89:91:35:e0:49:e0:f0:35:d0:28: ba:6b:55:ea:2e:3f:d4:28:5e:fc:6c:02:33:95:f5:94:4c:57: cb:c8:45:9d:57:73:7b:51:38:30:98:bb:d7:7e:1e:de:00:2c: fb:61:ab:eb:b2:ad:91:dc:17:9a:d0:8b:95:af:18:1d:19:63: d5:45:40:a9:55:06:da:58:93:cd:c6:c8:89:51:fa:ad:61:37: 7c:16:b4:3b:9e:a0:6b:9b:39:38:37:fd:5a:d3:49:65:6f:b3: eb:9a:4b:6d:99:0a:cd:5a:39:27:fd:b9:52:a6:e6:38:5d:32: 6d:25:a5:52:4c:09:33:69:1d:03:9a:2c:46:a5:7e:ad:07:e7: 3e:aa:ab:d6:2c:7a:cf:b4:f8:b7:0a:8f:0e:e6:5e:af:56:a8: 7c:e8:72:ce:b3:5b:f7:55:cc:73:ae:c9:4b:84:24:a9:46:bd: 32:c1:1b:22:29:65:0b:7b:ed:f3:0c:87:67:b1:dc:1a:6a:f0: 67:c4:d8:14:1b:ea:2e:e6:22:10:0c:e5:af:1c:bb:9a:fa:84: de:b4:73:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRscjJEugvOneaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk OTFmNTBiYTQtMWVmMy00MmI3LTkxNTctYmI0N2ZmOTk1OGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofcg6almPV+dXDb4SPAuHWdOhjsdudTxlrgO wXJZ6NoQAWqMeeLHtFQw54+C2mDRHJi1S2F3b0/RFS/YR8fm3mgDbReCG0qpbj9g icLKrrImPPpl59D0Lohz5c06rRXJ2MUXTdfACooBPJ/SWqCx9JvIxdwQdJr7IbV4 j77Uwg0EDQKacpWQc1onzLPnSrRZWM6JVzBZ4MdTa7090GtWopDlh+wH5wwFl6J+ yQKEGT84Yv/2+hvY3BGgoOwW/lmbSm3yxv9OdThmHSaKTcEqTVabLLQ/nxfbEQZK uLFf77n5Q0nyI0WxTqC6kN4uku75MJpTOelbePSQYralFXRysQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHwtAd3mcwfcYIb8qmxgJ7bc6LZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmQzZDM1NTQtM2I4ZS0z ODA0LTlmMzQtZTU3MmVlMjkwMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABh+Iz/7ywO4bsNt5deV/va0x7tOl5l84Xyp5Ft4c3arUiqimBrNxJvx nKO4iZE14Eng8DXQKLprVeouP9QoXvxsAjOV9ZRMV8vIRZ1Xc3tRODCYu9d+Ht4A LPthq+uyrZHcF5rQi5WvGB0ZY9VFQKlVBtpYk83GyIlR+q1hN3wWtDueoGubOTg3 /VrTSWVvs+uaS22ZCs1aOSf9uVKm5jhdMm0lpVJMCTNpHQOaLEalfq0H5z6qq9Ys es+0+LcKjw7mXq9WqHzocs6zW/dVzHOuyUuEJKlGvTLBGyIpZQt77fMMh2ex3Bpq 8GfE2BQb6i7mIhAM5a8cu5r6hN60c6s= -----END CERTIFICATE-----Generated at Fri Sep 5 04:20:05 2025 by rpki-client