$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa File: 08340f91-5c11-3164-9641-ece7f93755e1.roa (raw, json) Hash identifier: FvqFAsQ1odW5TQ/9VG3MHnqn/yIbcJSZG8EmK7J5q3U= Subject key identifier: D0:AC:33:63:43:3E:7B:40:E6:7B:5B:C9:2F:3F:90:D4:05:6F:DE:7C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AE9F66D0EBB1766D56283BE00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 9009 IP address blocks: 172.94.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6d:0e:bb:17:66:d5:62:83:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=83a9eec2-59e0-4555-9970-06c67af363fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:07:a9:c6:ec:b2:75:16:3f:24:d4:15:14:1d: 59:23:c6:ae:67:9a:4f:05:17:17:4c:35:50:72:ba: e6:14:66:7e:79:1a:39:e1:e4:02:a9:36:03:0b:62: f3:b7:04:50:0b:f3:e9:bf:cf:27:d1:0e:8f:07:e3: c4:5a:7e:05:85:b3:cb:bd:5e:be:16:43:3e:ee:f2: d2:6f:d6:31:90:c8:1f:11:09:ea:ef:44:37:c8:2e: a4:1d:9e:3a:a2:42:e5:33:77:8d:c4:46:5e:a8:00: f8:8a:bd:5a:ad:7d:4c:84:77:12:d0:46:8d:74:0f: 3e:e0:5f:5b:e9:c1:4d:30:98:90:ef:5d:87:9f:d7: 6f:f8:99:63:3f:8f:7a:4d:51:27:f4:bb:f7:0f:17: 4b:95:0b:2c:23:87:f6:ec:8a:59:b0:fd:68:01:d8: b3:65:8e:f8:e6:29:b0:4b:2a:96:3b:9a:27:5b:1b: 3d:75:47:3b:a3:fe:f7:c5:9b:07:8a:ea:08:d8:ec: da:8e:e7:89:b9:d7:f5:38:c8:d3:8d:d3:28:dc:f6: a6:9c:58:e0:bb:2b:67:24:3f:5a:6b:81:ee:98:d9: 07:60:bd:8e:db:25:64:2e:b1:1f:5c:06:fa:f4:37: 14:e8:eb:02:09:bf:9a:55:35:ab:2c:ac:8b:e2:63: 83:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AC:33:63:43:3E:7B:40:E6:7B:5B:C9:2F:3F:90:D4:05:6F:DE:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:fd:89:f9:84:05:87:3f:21:1a:bd:8f:a3:a1:d1:4d:1c:51: 6f:0f:45:f4:0f:07:80:30:52:26:37:d1:cb:42:89:75:8b:c5: af:f9:38:9e:cc:aa:4f:1f:f5:85:24:6e:63:37:5a:7a:93:f1: 0a:92:59:09:f2:e1:02:96:38:fc:0b:7b:da:09:32:a8:c0:47: 34:28:31:3b:83:31:bb:f7:53:ea:4f:3a:f8:c8:ea:b7:ea:18: 0c:be:13:1a:1b:8b:81:cf:28:44:21:e9:18:e5:ae:24:3e:9b: 4c:e8:23:96:11:c6:c4:76:57:8e:99:4a:79:3b:0e:4c:88:64: 6a:61:b7:67:02:55:91:28:3e:e4:ea:3f:6b:08:cd:fc:83:03: 31:46:e2:33:a4:07:93:42:4e:b9:b5:20:3e:ec:a8:2a:20:bb: 92:d8:fb:e0:f4:ed:5f:a7:10:3b:ad:f4:b3:fe:90:ed:4a:3a: f7:d5:c2:fd:bf:5e:f6:6c:60:fc:0d:e9:cd:26:ca:1c:cd:f9: 48:41:c3:aa:a3:84:22:f4:7f:c8:5f:0d:84:1b:ea:b7:d2:ce: ca:16:3e:1f:09:31:4d:52:6e:49:b6:36:c9:1d:a0:8c:cc:19: 83:e8:15:8a:9c:c9:b6:14:a6:5d:1a:3e:31:9e:85:0a:09:d9: 85:12:17:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9m0Ouxdm1WKDvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk ODNhOWVlYzItNTllMC00NTU1LTk5NzAtMDZjNjdhZjM2M2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQepxuyydRY/JNQVFB1ZI8auZ5pPBRcXTDVQ crrmFGZ+eRo54eQCqTYDC2LztwRQC/Ppv88n0Q6PB+PEWn4FhbPLvV6+FkM+7vLS b9YxkMgfEQnq70Q3yC6kHZ46okLlM3eNxEZeqAD4ir1arX1MhHcS0EaNdA8+4F9b 6cFNMJiQ712Hn9dv+JljP496TVEn9Lv3DxdLlQssI4f27IpZsP1oAdizZY745imw SyqWO5onWxs9dUc7o/73xZsHiuoI2OzajueJudf1OMjTjdMo3PamnFjguytnJD9a a4HumNkHYL2O2yVkLrEfXAb69DcU6OsCCb+aVTWrLKyL4mODcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCsM2NDPntA5ntbyS8/kNQFb958MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDgzNDBmOTEtNWMxMS0z MTY0LTk2NDEtZWNlN2Y5Mzc1NWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL9ifmEBYc/IRq9j6Oh0U0cUW8PRfQPB4AwUiY30ctCiXWLxa/5OJ7M qk8f9YUkbmM3WnqT8QqSWQny4QKWOPwLe9oJMqjARzQoMTuDMbv3U+pPOvjI6rfq GAy+Exobi4HPKEQh6RjlriQ+m0zoI5YRxsR2V46ZSnk7DkyIZGpht2cCVZEoPuTq P2sIzfyDAzFG4jOkB5NCTrm1ID7sqCogu5LY++D07V+nEDut9LP+kO1KOvfVwv2/ XvZsYPwN6c0myhzN+UhBw6qjhCL0f8hfDYQb6rfSzsoWPh8JMU1Sbkm2NskdoIzM GYPoFYqcybYUpl0aPjGehQoJ2YUSFxI= -----END CERTIFICATE-----Generated at Sat Aug 23 08:28:31 2025 by rpki-client