$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa File: a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa (raw, json) Hash identifier: Cb0+ap+fL/wNYsJBT7oiFIp3FN1j12py7qULuX70sXM= Subject key identifier: D8:B5:C4:31:E9:42:47:C6:44:63:10:DC:1C:06:E9:2C:68:FC:5E:C4 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AC01642EC51FF5B944A4845A0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 9009 IP address blocks: 172.94.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:42:ec:51:ff:5b:94:4a:48:45:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=534d089d-6fa0-46a6-af77-3f9bf72d4a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:85:c0:44:8d:d8:bd:89:1f:66:c1:6b:28:d9: 2e:87:98:77:b8:80:fb:17:6f:40:6e:a4:b9:b5:8e: 54:e2:da:65:dc:d7:2d:25:4d:3f:bb:d7:86:18:1f: 99:a9:59:4f:d3:61:a9:3b:55:ea:b5:d7:44:59:ef: c4:b6:00:29:de:84:fe:a6:6e:af:13:5a:1f:01:7f: e1:41:b2:8d:2c:25:40:70:87:34:ed:c9:7e:83:c3: 22:e8:5d:32:05:d0:78:0f:36:d8:e8:1f:3d:12:3a: d5:12:14:fc:85:a4:ac:3d:34:b7:34:4a:d6:35:2e: 77:64:cd:3f:e6:19:ec:65:85:52:0c:20:ff:fe:58: ab:83:3f:5b:ca:64:60:ab:ff:22:23:52:9e:2e:ba: 2e:1a:c8:49:ab:36:ae:7e:8c:9a:7e:eb:f4:ce:fd: 17:74:02:8d:06:01:e2:dc:90:3d:9b:28:9e:03:ff: 15:75:90:45:64:eb:02:f5:77:ce:d6:0e:e1:a3:8d: 19:d7:37:02:1b:00:ae:d3:e3:13:2d:51:38:7e:93: b9:8b:30:cb:6a:ef:84:22:c2:da:bd:00:18:1d:43: ed:da:4f:4b:ea:8a:17:72:0a:f0:ff:ca:d2:00:b5: de:05:0f:0e:18:f2:63:bf:29:93:ca:2e:9e:1b:c7: de:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B5:C4:31:E9:42:47:C6:44:63:10:DC:1C:06:E9:2C:68:FC:5E:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:23:47:fc:a4:a9:fc:ee:8c:40:bb:07:e0:88:d6:97:f9:8f: 76:71:cd:1b:0e:b4:13:51:38:f4:55:e7:4b:c3:3c:aa:89:af: 12:44:b9:bd:fc:84:2a:ca:97:a9:44:87:d7:00:b4:f6:2a:17: cf:a4:6b:1d:a0:bc:3c:65:46:71:2c:10:c8:b9:38:9c:10:8b: 8c:e0:ed:ac:58:e8:16:66:fc:30:46:4d:dc:b1:b2:67:91:49: 11:25:91:f9:81:97:87:39:6c:1e:cd:10:5e:e0:d7:f8:cb:0e: f7:c0:8b:fe:99:02:b0:08:05:5d:29:55:44:9f:8c:d7:86:75: 96:fb:9e:28:fc:0e:32:1d:0d:73:f8:91:48:51:fb:af:d9:af: c4:08:af:cf:d8:25:fd:bb:5b:0d:fa:df:ed:86:c1:d4:22:79: c2:98:12:0e:ff:2f:f5:b6:63:c8:84:ae:58:6c:07:95:e5:6a: fe:2d:14:0a:3d:fc:e4:f0:86:2e:dc:5f:11:74:7c:7a:54:da: 82:31:7f:fd:d9:a0:d5:f7:8e:bc:2d:87:40:85:4f:2d:1f:c0: ee:69:7a:05:e2:54:c5:25:eb:d9:8f:fe:cb:83:0f:f1:71:30: e3:26:74:fc:15:c5:30:8c:a7:62:f3:a0:43:aa:5d:f6:c9:c5: 63:f9:53:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFkLsUf9blEpIRaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NTM0ZDA4OWQtNmZhMC00NmE2LWFmNzctM2Y5YmY3MmQ0YTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoXARI3YvYkfZsFrKNkuh5h3uID7F29AbqS5 tY5U4tpl3NctJU0/u9eGGB+ZqVlP02GpO1XqtddEWe/EtgAp3oT+pm6vE1ofAX/h QbKNLCVAcIc07cl+g8Mi6F0yBdB4DzbY6B89EjrVEhT8haSsPTS3NErWNS53ZM0/ 5hnsZYVSDCD//lirgz9bymRgq/8iI1KeLrouGshJqzaufoyafuv0zv0XdAKNBgHi 3JA9myieA/8VdZBFZOsC9XfO1g7ho40Z1zcCGwCu0+MTLVE4fpO5izDLau+EIsLa vQAYHUPt2k9L6ooXcgrw/8rSALXeBQ8OGPJjvymTyi6eG8fe2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNi1xDHpQkfGRGMQ3BwG6Sxo/F7EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTRkOTdmZDgtOGI2MS0z ZDI3LTgwZWQtYjJlODllNDhkZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkjR/ykqfzujEC7B+CI1pf5j3ZxzRsOtBNROPRV50vDPKqJrxJEub38 hCrKl6lEh9cAtPYqF8+kax2gvDxlRnEsEMi5OJwQi4zg7axY6BZm/DBGTdyxsmeR SRElkfmBl4c5bB7NEF7g1/jLDvfAi/6ZArAIBV0pVUSfjNeGdZb7nij8DjIdDXP4 kUhR+6/Zr8QIr8/YJf27Ww363+2GwdQiecKYEg7/L/W2Y8iErlhsB5Xlav4tFAo9 /OTwhi7cXxF0fHpU2oIxf/3ZoNX3jrwth0CFTy0fwO5pegXiVMUl69mP/suDD/Fx MOMmdPwVxTCMp2LzoEOqXfbJxWP5U44= -----END CERTIFICATE-----Generated at Sat Aug 23 10:18:03 2025 by rpki-client