$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/398494c3-1252-3807-8284-21f1409f97d3.roa File: 398494c3-1252-3807-8284-21f1409f97d3.roa (raw, json) Hash identifier: DWJorsPbyAfuF7EwYFnsvUSVq3z58Lq8Wb2XA6hoAw4= Subject key identifier: C1:BE:94:D7:62:99:B2:DB:FB:63:38:15:D4:50:02:BD:F7:E2:AD:C5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A1F24E54960CA4D4C0B8DF080 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/398494c3-1252-3807-8284-21f1409f97d3.roa Signing time: Sun 08 Jun 2025 09:25:10 +0000 ROA not before: Sun 08 Jun 2025 09:25:10 +0000 ROA not after: Sat 06 Sep 2025 09:25:10 +0000 asID: 207184 IP address blocks: 172.94.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:24:e5:49:60:ca:4d:4c:0b:8d:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 8 09:25:10 2025 GMT Not After : Sep 6 09:25:10 2025 GMT Subject: CN=48bc5a76-a9ed-417e-b0c1-23e2916f1d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:79:00:d5:07:6c:91:c8:0b:f8:b1:e4:ea:0a: ca:a0:51:c1:29:14:2c:a1:68:da:74:e3:51:b8:25: 10:91:c2:e6:39:e1:a5:bd:7d:85:4b:cd:3d:e4:c0: 50:8f:a3:23:83:bc:1c:24:87:e9:21:0f:a4:80:89: 05:48:c8:0b:2c:39:57:5e:57:f6:ca:39:1f:99:3a: d8:df:d2:fc:96:b2:32:00:1a:25:7b:97:87:f3:d9: b8:e2:fa:de:c6:f6:35:23:35:c7:65:35:5a:e6:02: ab:97:e6:c8:25:02:93:cc:cf:f5:dd:d6:37:9d:b0: 5b:bb:a6:e1:75:55:8a:ee:ec:bb:7a:8c:d0:48:9b: 4c:5a:e2:f8:1b:69:e3:91:3f:83:08:e7:3e:47:25: 8e:e0:f4:7a:36:9b:9a:2f:03:40:5e:d2:eb:1c:90: 22:b6:63:df:f0:22:46:3a:30:a6:01:c6:87:6d:f3: 7f:95:3f:b6:7b:b7:8f:7e:f4:24:34:3d:16:23:1d: 9e:1a:af:54:c9:98:9a:da:d9:98:09:50:7a:cd:3b: 82:5a:cb:49:7a:b7:45:17:db:4e:d9:ce:a5:e5:cf: f9:74:3f:a1:05:d4:db:7b:fd:09:fd:5c:7a:80:fb: 27:b9:95:d4:6c:2a:1c:f2:56:f9:17:a0:c2:5d:7d: 92:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BE:94:D7:62:99:B2:DB:FB:63:38:15:D4:50:02:BD:F7:E2:AD:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/398494c3-1252-3807-8284-21f1409f97d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:9c:37:1a:b3:9a:dd:d4:38:13:0b:82:41:19:08:c0:2f:d2: 0c:44:07:04:bb:2b:e5:c1:c7:bb:8f:d8:9d:16:b7:2c:d0:ae: 5d:8f:64:e1:ea:75:c8:e8:a6:51:ae:e7:6f:63:ed:26:20:5e: 3f:85:df:56:bd:ae:9c:ec:55:3c:29:76:c6:b0:b8:63:f4:7e: a1:c5:5d:92:8f:96:2e:7b:60:02:3a:3e:e9:a8:52:f1:2b:18: 1b:c5:66:77:73:5c:84:2f:ef:df:88:96:c1:e9:8b:96:a6:22: c8:16:49:3d:e3:0d:65:49:fc:20:cc:02:73:dd:f4:8a:a2:32: 76:c9:27:30:97:df:37:2f:e6:f3:3d:ac:e9:cc:87:7c:d7:9a: 9e:a3:b2:c8:f2:3e:a4:fb:18:1d:0d:f9:d8:e8:7c:d5:23:77: 90:9e:b1:4d:ed:43:7f:11:63:05:70:48:90:45:59:a2:f3:b7: 2c:e7:9d:1b:c4:39:fb:ff:24:99:46:8d:24:5e:54:8d:80:34: 61:12:7f:99:40:82:87:5b:7b:34:90:09:4b:f7:74:71:b8:6d: a3:a1:c2:90:71:da:82:e1:32:ae:ce:db:e5:c4:81:3d:92:d0: e8:d1:4c:ab:e0:76:c3:32:37:ed:c4:c0:9d:7d:5b:1f:9c:27: 22:79:e0:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofJOVJYMpNTAuN8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYwODA5MjUxMFoXDTI1MDkwNjA5MjUxMFowLzEtMCsGA1UEAxMk NDhiYzVhNzYtYTllZC00MTdlLWIwYzEtMjNlMjkxNmYxZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3kA1QdskcgL+LHk6grKoFHBKRQsoWjadONR uCUQkcLmOeGlvX2FS8095MBQj6Mjg7wcJIfpIQ+kgIkFSMgLLDlXXlf2yjkfmTrY 39L8lrIyABole5eH89m44vrexvY1IzXHZTVa5gKrl+bIJQKTzM/13dY3nbBbu6bh dVWK7uy7eozQSJtMWuL4G2njkT+DCOc+RyWO4PR6NpuaLwNAXtLrHJAitmPf8CJG OjCmAcaHbfN/lT+2e7ePfvQkND0WIx2eGq9UyZia2tmYCVB6zTuCWstJerdFF9tO 2c6l5c/5dD+hBdTbe/0J/Vx6gPsnuZXUbCoc8lb5F6DCXX2SLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMG+lNdimbLb+2M4FdRQAr334q3FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzk4NDk0YzMtMTI1Mi0z ODA3LTgyODQtMjFmMTQwOWY5N2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+cNxqzmt3UOBMLgkEZCMAv0gxEBwS7K+XBx7uP2J0WtyzQrl2PZOHq dcjoplGu529j7SYgXj+F31a9rpzsVTwpdsawuGP0fqHFXZKPli57YAI6PumoUvEr GBvFZndzXIQv79+IlsHpi5amIsgWST3jDWVJ/CDMAnPd9IqiMnbJJzCX3zcv5vM9 rOnMh3zXmp6jssjyPqT7GB0N+djofNUjd5CesU3tQ38RYwVwSJBFWaLztyznnRvE Ofv/JJlGjSReVI2ANGESf5lAgodbezSQCUv3dHG4baOhwpBx2oLhMq7O2+XEgT2S 0OjRTKvgdsMyN+3EwJ19Wx+cJyJ54P0= -----END CERTIFICATE-----Generated at Wed Jul 2 16:11:34 2025 by rpki-client