$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa File: 438abf06-355b-3925-b81c-ed0f431c4a35.roa (raw, json) Hash identifier: PwYWQ+XyhbGZYGtO49aVO/pqQHt5ZrT6sKYJmLaevhA= Subject key identifier: CE:06:03:E0:35:3E:79:B8:3F:71:25:7B:6E:54:9D:01:38:48:A7:35 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AC876534FC77CFFAFEA7F3FC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 3223 IP address blocks: 172.94.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:53:4f:c7:7c:ff:af:ea:7f:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=d78c1d6e-e955-45ae-980a-c5c9b8fc3a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f8:25:f8:da:d3:6a:3a:5c:53:18:58:bf:a2: 2a:5b:9e:74:71:77:0f:88:44:b6:bd:43:7d:37:8e: e7:07:db:42:da:cb:9a:5d:fc:4a:44:54:e5:c7:a2: 96:9f:f1:b7:3b:4a:a6:8a:1e:2f:1d:04:8e:78:d0: 4e:41:80:82:9b:28:5e:64:81:15:fe:eb:71:91:39: f2:d2:41:f7:38:3f:2c:5f:49:86:5b:8a:7b:69:73: 12:96:eb:db:8f:b2:aa:a9:78:57:9a:66:51:5f:e1: 5e:8d:7b:00:5c:b7:90:cb:43:da:97:8a:f8:aa:f2: 1e:18:d1:1f:dd:a3:01:c6:94:38:dc:db:e4:cf:4a: de:5e:c3:63:0f:06:50:5f:45:d0:99:32:b3:7c:74: 3a:50:dd:bb:1f:09:71:56:79:f8:dd:f0:46:c1:25: 84:96:28:2a:f2:c9:38:ec:ec:46:e9:a7:19:8c:55: 31:2c:ce:0e:ab:fc:8a:c4:d1:10:06:cc:d2:38:12: e4:5c:44:6c:0b:44:30:1e:5d:25:d9:a9:06:a0:a5: 3b:52:22:9b:a5:15:b7:a1:56:69:11:ee:9a:b0:50: a0:f4:84:e8:5b:1f:b4:51:7b:c6:41:cf:5e:83:bd: ca:0f:83:69:a4:03:55:07:e2:71:af:bf:78:df:84: 2c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:06:03:E0:35:3E:79:B8:3F:71:25:7B:6E:54:9D:01:38:48:A7:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:5d:95:f9:80:46:b8:84:fb:4a:0a:79:eb:ed:07:57:57:fc: d8:84:15:2c:e4:9b:21:c3:de:9b:12:f9:e7:13:a6:7b:77:23: 46:ba:85:fb:6a:0a:af:24:5b:8a:b0:4e:67:2f:bc:d8:08:46: b4:9c:9d:f7:b4:5f:51:2d:4c:a4:06:e1:79:ea:0e:4c:40:b9: e1:bf:3b:be:ca:c2:58:b6:23:c6:95:ec:a5:ce:d6:69:5f:a5: 54:fb:5e:ce:00:93:bb:c6:12:95:b2:78:8a:18:a6:16:54:07: 98:6a:28:4e:cb:2c:d6:10:e6:27:4a:46:44:6a:8d:6b:fb:8d: 15:3d:3d:c7:e8:71:69:61:8e:8f:4a:29:4c:be:41:e1:3f:b7: bc:25:6d:bd:b9:5f:94:72:19:8a:d0:90:01:4f:56:c9:7a:2d: 61:94:ee:9c:d8:0d:5b:bd:c2:54:71:bf:54:0f:ac:29:db:d1: 29:7c:5c:7e:11:8c:f0:de:ac:45:87:7c:24:c3:e8:f7:01:45: 46:75:2d:86:5f:0a:79:c8:7d:82:86:77:e2:47:d5:62:42:7c: b0:94:a7:e5:f2:6b:e4:87:8e:4a:b0:70:38:1f:92:a3:42:63: 1c:6c:d7:6f:eb:25:bd:43:d5:17:cf:5e:bc:ab:be:41:29:d3: b1:81:5d:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdlNPx3z/r+p/P8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDc4YzFkNmUtZTk1NS00NWFlLTk4MGEtYzVjOWI4ZmMzYTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfgl+NrTajpcUxhYv6IqW550cXcPiES2vUN9 N47nB9tC2suaXfxKRFTlx6KWn/G3O0qmih4vHQSOeNBOQYCCmyheZIEV/utxkTny 0kH3OD8sX0mGW4p7aXMSluvbj7KqqXhXmmZRX+FejXsAXLeQy0Pal4r4qvIeGNEf 3aMBxpQ43Nvkz0reXsNjDwZQX0XQmTKzfHQ6UN27HwlxVnn43fBGwSWEligq8sk4 7OxG6acZjFUxLM4Oq/yKxNEQBszSOBLkXERsC0QwHl0l2akGoKU7UiKbpRW3oVZp Ee6asFCg9IToWx+0UXvGQc9eg73KD4NppANVB+Jxr79434QsPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4GA+A1Pnm4P3Ele25UnQE4SKc1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDM4YWJmMDYtMzU1Yi0z OTI1LWI4MWMtZWQwZjQzMWM0YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtdlfmARriE+0oKeevtB1dX/NiEFSzkmyHD3psS+ecTpnt3I0a6hftq Cq8kW4qwTmcvvNgIRrScnfe0X1EtTKQG4XnqDkxAueG/O77Kwli2I8aV7KXO1mlf pVT7Xs4Ak7vGEpWyeIoYphZUB5hqKE7LLNYQ5idKRkRqjWv7jRU9PcfocWlhjo9K KUy+QeE/t7wlbb25X5RyGYrQkAFPVsl6LWGU7pzYDVu9wlRxv1QPrCnb0Sl8XH4R jPDerEWHfCTD6PcBRUZ1LYZfCnnIfYKGd+JH1WJCfLCUp+Xya+SHjkqwcDgfkqNC Yxxs12/rJb1D1RfPXryrvkEp07GBXfU= -----END CERTIFICATE-----Generated at Sat Aug 23 06:53:34 2025 by rpki-client