$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa File: 28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa (raw, json) Hash identifier: vWm6x6eK19iubFwDCapZD4y4ollYDgp4FtGcpiPYVh4= Subject key identifier: 5E:CC:C1:D4:63:FA:0D:60:92:B0:E4:CB:94:2A:84:16:1F:0A:D3:37 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AC9DBA3B447E28B90B0197480 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 40676 IP address blocks: 172.94.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:a3:b4:47:e2:8b:90:b0:19:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=7203f0d2-bb4c-4192-a64d-725c2584de72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:46:fd:ac:68:e4:46:33:54:6b:c7:45:6b: bc:c0:ac:78:9e:25:4b:66:7c:06:1b:78:a4:32:2d: a9:3f:d8:77:a1:e8:60:9c:a6:2f:30:7a:84:bf:01: 21:f1:21:ea:af:6e:e4:af:88:2d:1b:bb:0f:cd:32: 0b:cc:b5:65:8d:34:ef:54:ec:c0:5b:56:a9:f2:7c: b3:c4:54:be:eb:4a:97:f1:2f:ed:05:e2:29:85:27: 23:33:a4:29:65:3b:e6:eb:ba:d0:8b:30:13:a7:e9: cd:9a:ae:2e:e9:36:2e:7b:6a:0c:05:90:0e:a9:14: ab:f5:c9:3d:46:ff:22:e6:2e:9b:7e:e4:85:c4:d6: f9:68:3f:c0:12:be:a1:9d:90:6d:70:7b:3a:84:74: 36:02:32:8f:ec:bd:46:42:62:15:2e:8c:16:6c:f7: 28:74:70:4c:a1:a9:4f:1d:57:6f:4d:0c:41:b7:07: 26:20:2c:97:72:14:57:51:9d:2a:a8:63:7f:e3:2d: 3f:ac:4e:8c:58:30:4f:7c:c6:0b:b4:55:3d:3f:47: 4e:fa:70:2f:90:76:80:82:33:6b:7f:42:5d:2e:a4: ec:2a:b0:4d:67:d8:39:22:c8:6e:0b:0f:e5:9c:bf: 88:af:09:d7:6a:b9:32:61:5c:41:dc:c0:31:9a:8a: e0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CC:C1:D4:63:FA:0D:60:92:B0:E4:CB:94:2A:84:16:1F:0A:D3:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/28215abb-4cb1-3b52-aac5-5a03c1c63b00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:d7:da:68:bc:ff:e7:f9:7b:41:aa:35:84:cf:71:be:b4:43: 9e:e3:9a:46:f9:6b:b2:04:bd:41:b9:d8:59:7f:f9:85:04:22: dc:97:a6:55:f3:98:1b:d2:de:ae:09:e7:76:d9:8d:af:9d:0b: de:88:13:32:20:73:28:10:3d:6e:55:be:d8:35:65:85:25:d2: 84:01:e2:98:2e:d9:98:4d:3c:a9:c6:f4:fe:4b:b5:e0:4f:32: ee:50:42:ce:ea:4b:12:f1:52:b9:8d:79:7d:ab:f0:c6:14:1d: a1:70:47:7e:b6:6b:15:a1:b3:5d:81:ac:e2:18:dd:48:7c:13: e3:d5:0b:01:82:19:00:16:49:1d:56:ff:e7:05:8b:54:bc:e5: 64:bd:04:4d:75:62:8b:33:7f:8a:41:a4:b7:7c:8e:8a:6d:e7: 6b:ee:4b:3d:23:0e:ec:6d:b5:14:4c:13:1b:64:07:5d:38:48: 89:6b:0f:ed:8a:f4:69:b0:97:98:6f:60:90:a3:f9:11:33:0d: 6b:35:86:c3:00:d9:83:b5:22:4d:7d:35:05:bb:15:f3:9f:3c: b5:4f:cd:11:3e:4c:51:c0:f8:8e:e6:62:11:ac:74:ee:53:24: 03:32:2e:91:63:75:fd:5a:74:c3:3c:9d:0b:a7:23:95:d7:56: 87:4e:b5:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ26O0R+KLkLAZdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk NzIwM2YwZDItYmI0Yy00MTkyLWE2NGQtNzI1YzI1ODRkZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3JG/axo5EYzVGvHRWu8wKx4niVLZnwGG3ik Mi2pP9h3oehgnKYvMHqEvwEh8SHqr27kr4gtG7sPzTILzLVljTTvVOzAW1ap8nyz xFS+60qX8S/tBeIphScjM6QpZTvm67rQizATp+nNmq4u6TYue2oMBZAOqRSr9ck9 Rv8i5i6bfuSFxNb5aD/AEr6hnZBtcHs6hHQ2AjKP7L1GQmIVLowWbPcodHBMoalP HVdvTQxBtwcmICyXchRXUZ0qqGN/4y0/rE6MWDBPfMYLtFU9P0dO+nAvkHaAgjNr f0JdLqTsKrBNZ9g5IshuCw/lnL+IrwnXarkyYVxB3MAxmorgqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7MwdRj+g1gkrDky5QqhBYfCtM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjgyMTVhYmItNGNiMS0z YjUyLWFhYzUtNWEwM2MxYzYzYjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF51MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnX2mi8/+f5e0GqNYTPcb60Q57jmkb5a7IEvUG52Fl/+YUEItyXplXz mBvS3q4J53bZja+dC96IEzIgcygQPW5Vvtg1ZYUl0oQB4pgu2ZhNPKnG9P5LteBP Mu5QQs7qSxLxUrmNeX2r8MYUHaFwR362axWhs12BrOIY3Uh8E+PVCwGCGQAWSR1W /+cFi1S85WS9BE11Yoszf4pBpLd8jopt52vuSz0jDuxttRRMExtkB104SIlrD+2K 9Gmwl5hvYJCj+REzDWs1hsMA2YO1Ik19NQW7FfOfPLVPzRE+TFHA+I7mYhGsdO5T JAMyLpFjdf1adMM8nQunI5XXVodOtVk= -----END CERTIFICATE-----Generated at Sat Aug 23 16:25:42 2025 by rpki-client