$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/70c1d4ee-db09-3f94-b0f8-866dd2bdcbf1.roa File: 70c1d4ee-db09-3f94-b0f8-866dd2bdcbf1.roa (raw, json) Hash identifier: cSkdQmQrgUeVpXL0OwVgWg8Q7vFPrdre0JsTughzrI0= Subject key identifier: 9A:9F:1A:12:C6:F9:96:17:08:16:62:5E:78:76:E8:31:AE:25:B2:C9 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AE9F66CDCD6B22947B25A8060 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/70c1d4ee-db09-3f94-b0f8-866dd2bdcbf1.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 9009 IP address blocks: 172.94.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6c:dc:d6:b2:29:47:b2:5a:80:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=55b8703d-fa2e-49fb-bc55-508d6f6d3cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dc:3f:55:6a:18:df:be:58:c1:a8:a3:8d:c5: bc:00:41:66:5c:8c:f6:d7:76:33:dc:b8:20:43:3e: 7e:a4:dd:14:79:cf:42:e3:5e:4d:e3:c8:06:80:f9: c6:b9:91:31:02:4f:87:8d:d9:b2:12:5a:07:7f:cc: 19:85:34:46:79:0e:b7:2f:e0:96:fc:95:97:18:a3: a4:6e:94:0f:b5:9a:73:f6:8d:56:de:1d:13:30:bc: 9b:85:da:22:69:79:c5:8a:c8:d6:1c:a2:46:14:2f: 2f:d2:f6:a2:33:de:58:9c:fc:ec:2c:32:fd:9a:e8: 0c:be:b7:c5:5a:a6:89:92:60:92:30:05:35:8f:fb: 62:c4:4f:ad:9b:55:d1:99:38:c4:83:19:ef:45:67: de:17:c0:16:2f:09:55:c0:53:54:94:03:26:48:78: 9e:ee:cd:b1:b1:7c:29:5d:09:49:8e:84:7f:f8:51: c5:c1:22:9f:f0:24:94:d2:6e:8c:65:0b:69:38:6d: d5:df:1c:34:b6:00:5b:fa:b4:4a:f8:8a:39:94:1e: a9:5f:6d:d4:9d:42:9b:b0:ea:5b:f1:80:b2:ea:aa: 75:51:ab:51:40:42:ad:1c:ce:42:4b:05:7e:69:3f: fe:56:3d:de:99:15:88:1e:0b:b1:5d:42:6c:ce:8d: 04:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9F:1A:12:C6:F9:96:17:08:16:62:5E:78:76:E8:31:AE:25:B2:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/70c1d4ee-db09-3f94-b0f8-866dd2bdcbf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d5:88:a9:e7:37:da:a4:37:ac:29:a6:72:b6:7f:76:c5:1e: c7:98:59:5e:51:4e:e5:c5:32:27:fe:13:68:e3:45:68:20:5e: a6:b1:12:51:52:b2:66:d8:93:85:06:aa:c0:76:c4:95:13:94: eb:82:b4:61:46:19:b0:48:24:39:8a:be:52:20:d3:db:75:9f: 95:44:05:29:07:32:46:41:79:76:45:f4:38:0a:ff:83:f9:c6: c7:11:3b:b6:51:9c:17:88:98:ce:cf:84:b1:c7:93:b6:41:c6: bd:85:4c:cd:21:e3:d5:41:35:fb:c7:98:04:ee:85:c6:84:f3: 65:dd:33:ca:1f:11:15:ff:55:8c:f1:4b:d8:22:0d:2a:d5:2c: 28:56:7e:ae:d7:92:6f:b5:3b:7e:48:33:97:12:15:b6:03:4f: b0:73:8c:9a:6d:7c:14:c8:1a:4a:d9:ae:73:87:6c:e8:b7:e8: 04:46:49:8f:8a:8c:68:94:be:34:3f:27:df:cf:22:39:f8:de: f4:cb:48:47:4d:0f:13:15:50:f4:5a:47:98:14:cc:d1:a2:82: 7e:5f:ac:97:49:44:08:da:10:f2:93:30:24:7e:dc:ef:ed:2f: 35:74:2d:77:90:44:3d:b4:0f:ec:01:b3:a7:e0:e1:d6:d2:99: d8:f7:6a:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9mzc1rIpR7JagGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk NTViODcwM2QtZmEyZS00OWZiLWJjNTUtNTA4ZDZmNmQzY2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9w/VWoY375YwaijjcW8AEFmXIz213Yz3Lgg Qz5+pN0Uec9C415N48gGgPnGuZExAk+HjdmyEloHf8wZhTRGeQ63L+CW/JWXGKOk bpQPtZpz9o1W3h0TMLybhdoiaXnFisjWHKJGFC8v0vaiM95YnPzsLDL9mugMvrfF WqaJkmCSMAU1j/tixE+tm1XRmTjEgxnvRWfeF8AWLwlVwFNUlAMmSHie7s2xsXwp XQlJjoR/+FHFwSKf8CSU0m6MZQtpOG3V3xw0tgBb+rRK+Io5lB6pX23UnUKbsOpb 8YCy6qp1UatRQEKtHM5CSwV+aT/+Vj3emRWIHguxXUJszo0EtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqfGhLG+ZYXCBZiXnh26DGuJbLJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzBjMWQ0ZWUtZGIwOS0z Zjk0LWIwZjgtODY2ZGQyYmRjYmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbViKnnN9qkN6wppnK2f3bFHseYWV5RTuXFMif+E2jjRWggXqaxElFS smbYk4UGqsB2xJUTlOuCtGFGGbBIJDmKvlIg09t1n5VEBSkHMkZBeXZF9DgK/4P5 xscRO7ZRnBeImM7PhLHHk7ZBxr2FTM0h49VBNfvHmATuhcaE82XdM8ofERX/VYzx S9giDSrVLChWfq7Xkm+1O35IM5cSFbYDT7BzjJptfBTIGkrZrnOHbOi36ARGSY+K jGiUvjQ/J9/PIjn43vTLSEdNDxMVUPRaR5gUzNGign5frJdJRAjaEPKTMCR+3O/t LzV0LXeQRD20D+wBs6fg4dbSmdj3ahA= -----END CERTIFICATE-----Generated at Sat Aug 23 08:12:43 2025 by rpki-client