$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8c3deb5-95bc-3e4b-833c-457daed698bd.roa File: f8c3deb5-95bc-3e4b-833c-457daed698bd.roa (raw, json) Hash identifier: UNkoGFo5TmN8VyghNluoFXvquiKrziolEtpLuvy88xU= Subject key identifier: 42:78:8B:01:17:18:D4:8E:31:B7:ED:65:0E:B3:FD:C4:72:FA:BB:03 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B0746C6FB05E4E31CA19B4240 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8c3deb5-95bc-3e4b-833c-457daed698bd.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 9009 IP address blocks: 172.94.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c6:fb:05:e4:e3:1c:a1:9b:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=ccddf4ba-c744-47dc-a272-81373b7fce94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:dc:71:9b:98:29:a5:c1:65:33:49:15:7f:4a: c9:e0:36:ac:6d:5f:38:c4:21:14:74:37:ab:e1:5f: 2f:06:16:c9:d4:74:87:47:1d:69:04:52:d7:48:aa: 76:8e:cc:6d:da:e4:9b:8f:df:df:b0:73:6d:b3:ae: 20:8d:6f:7e:02:29:8b:85:10:12:84:c4:c9:83:13: 8a:40:a2:3f:a2:20:a6:59:50:47:7a:8c:3d:2c:be: 8b:55:03:86:1c:26:29:2b:5b:f3:ca:85:1c:e6:d6: 52:37:fd:e9:15:18:30:ac:f5:b2:c8:96:be:ef:bf: d9:2a:4c:eb:07:b2:e5:90:49:80:fb:e9:ff:80:e7: 8c:ff:48:4d:af:72:23:fe:bb:95:31:c6:41:18:28: bf:5f:64:c2:5f:a7:db:8f:c1:5a:c5:f0:13:0e:f7: ba:02:27:68:7e:5e:e2:31:aa:c5:5f:fa:ae:29:37: e5:4f:52:ad:6c:35:dd:98:00:c1:7a:7b:8f:18:3d: bb:f4:67:f1:b1:96:f0:f8:72:cd:70:65:01:c1:f8: c8:6f:86:11:3a:3f:85:af:f8:71:be:ff:ea:98:a4: 08:a2:07:f4:cc:bc:0a:07:98:76:5b:1e:a5:12:1e: ea:00:ec:2c:56:b5:87:ba:ba:33:63:97:af:cd:ed: 93:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:78:8B:01:17:18:D4:8E:31:B7:ED:65:0E:B3:FD:C4:72:FA:BB:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8c3deb5-95bc-3e4b-833c-457daed698bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:85:8a:72:26:f2:cb:84:49:82:83:1f:14:e0:9a:41:95:2f: eb:4e:c8:5b:7a:86:19:6a:19:36:80:9a:62:75:9d:01:21:42: 4a:11:36:33:81:62:26:c8:86:76:30:d4:6f:d1:d9:a2:46:a3: d3:3b:f8:94:06:44:4e:08:9c:47:25:d9:95:14:ec:e7:17:4c: 62:bb:7a:1c:c0:00:60:24:a2:3a:2a:ac:50:19:cb:bf:ba:48: ef:0a:fd:62:03:2a:cb:e2:6e:aa:00:3a:61:bd:51:65:da:76: 22:95:13:4c:3c:a0:ee:fd:f6:66:f4:01:65:21:cb:02:c5:cf: 0b:2e:b5:c3:82:5f:05:1f:bd:90:53:07:d0:a2:be:81:e9:eb: 2b:f8:9f:38:ea:58:a6:0b:5c:be:ba:a6:0c:8d:67:ed:43:58: d9:be:54:89:3c:0d:ba:fa:4a:f9:61:44:75:9b:94:5a:d2:55: 30:fc:ed:df:4f:e1:2b:1f:26:31:83:0f:9e:72:55:f3:d2:71: cd:40:79:8a:0b:e8:95:2b:06:7b:0e:78:d3:74:8f:a5:01:a0: 9e:fe:fa:61:da:71:f1:6c:44:a9:bc:51:d1:9e:58:a0:9f:b6: 6e:e9:91:49:ef:8b:12:db:58:9d:73:39:c6:20:ae:31:63:b0: c6:ce:ef:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsb7BeTjHKGbQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk Y2NkZGY0YmEtYzc0NC00N2RjLWEyNzItODEzNzNiN2ZjZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNxxm5gppcFlM0kVf0rJ4DasbV84xCEUdDer 4V8vBhbJ1HSHRx1pBFLXSKp2jsxt2uSbj9/fsHNts64gjW9+AimLhRAShMTJgxOK QKI/oiCmWVBHeow9LL6LVQOGHCYpK1vzyoUc5tZSN/3pFRgwrPWyyJa+77/ZKkzr B7LlkEmA++n/gOeM/0hNr3Ij/ruVMcZBGCi/X2TCX6fbj8FaxfATDve6Aidofl7i MarFX/quKTflT1KtbDXdmADBenuPGD279GfxsZbw+HLNcGUBwfjIb4YROj+Fr/hx vv/qmKQIogf0zLwKB5h2Wx6lEh7qAOwsVrWHurozY5evze2TIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ4iwEXGNSOMbftZQ6z/cRy+rsDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjhjM2RlYjUtOTViYy0z ZTRiLTgzM2MtNDU3ZGFlZDY5OGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOFinIm8suESYKDHxTgmkGVL+tOyFt6hhlqGTaAmmJ1nQEhQkoRNjOB YibIhnYw1G/R2aJGo9M7+JQGRE4InEcl2ZUU7OcXTGK7ehzAAGAkojoqrFAZy7+6 SO8K/WIDKsvibqoAOmG9UWXadiKVE0w8oO799mb0AWUhywLFzwsutcOCXwUfvZBT B9CivoHp6yv4nzjqWKYLXL66pgyNZ+1DWNm+VIk8Dbr6SvlhRHWblFrSVTD87d9P 4SsfJjGDD55yVfPScc1AeYoL6JUrBnsOeNN0j6UBoJ7++mHacfFsRKm8UdGeWKCf tm7pkUnvixLbWJ1zOcYgrjFjsMbO70g= -----END CERTIFICATE-----Generated at Fri Sep 5 04:20:17 2025 by rpki-client