$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa File: a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa (raw, json) Hash identifier: NHN1akA2wQz2A8M2ZTX5XTrhaF1XfrUOtJvDeGzUhUw= Subject key identifier: BC:0E:2F:25:41:1E:83:07:38:3C:19:D2:F1:BE:3E:4D:BC:24:4B:63 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584ADECBBFEF5D54C226E79B6F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 40676 IP address blocks: 172.94.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:bf:ef:5d:54:c2:26:e7:9b:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=4de3ecec-a23f-40e4-a7a2-85447c827fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cb:fc:ed:04:8a:1b:8f:26:39:4b:8f:36:1c: 3e:ff:10:93:e8:1f:d1:fc:b2:14:72:47:03:75:9d: 96:79:3f:07:4f:a5:94:90:9d:fb:a8:66:fd:c0:f7: 60:b7:59:7c:f5:46:16:fd:88:a7:32:e2:23:99:bf: 50:93:ea:8a:52:d4:5b:b2:9f:a7:99:f8:b8:b6:84: 3f:21:38:d3:50:86:de:9b:22:09:67:f4:a0:cc:23: 31:a8:4a:2f:fc:c9:b3:46:e9:03:fd:4b:fe:b7:85: c2:78:91:83:7f:0d:6e:f7:2d:95:0c:9e:41:e3:28: 74:4a:3b:25:85:4c:fc:c9:4c:1e:b6:8e:ce:18:26: 03:86:d3:52:6f:7a:46:f5:58:a6:fa:14:10:b6:eb: 6d:7c:36:8d:3a:7e:38:68:15:37:5c:5b:14:7a:a7: 0d:52:89:2a:c6:7d:5f:c9:2d:7c:a8:b5:17:de:9d: e2:4d:02:92:3c:64:1f:01:04:f3:fb:7f:39:ea:b0: 40:9e:1d:b4:f4:db:a0:73:9c:e7:86:65:b4:8c:ed: 6d:39:4d:8a:58:89:ce:49:83:d4:dd:fc:4f:0a:6c: 49:93:52:ef:2a:5f:e2:5f:29:24:74:b9:8e:d4:49: b5:42:f3:b4:d5:b2:c9:71:29:98:7a:c9:75:4f:86: ef:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0E:2F:25:41:1E:83:07:38:3C:19:D2:F1:BE:3E:4D:BC:24:4B:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:dc:78:69:e3:b5:63:64:c2:4f:99:40:34:ce:3e:85:83:58: e6:38:d7:d1:66:bf:f5:86:13:1d:36:58:92:e8:7a:a9:45:dd: 6b:cf:ce:30:72:d1:95:09:ac:2c:eb:07:a1:28:2f:ac:1d:14: 21:b2:f8:cf:d4:78:21:04:18:6c:63:c7:1e:e4:8c:d7:f7:5d: 65:b7:38:9d:bd:6f:37:fd:39:7c:44:23:11:d9:5a:c9:8d:a8: 19:33:f6:ef:2f:80:56:ce:74:d5:89:f6:52:22:a6:2f:73:b3: de:15:d9:d0:18:9b:af:54:70:d7:70:f1:2f:df:3d:fc:b5:f7: 65:cc:c9:2c:3c:31:81:26:3d:bc:41:33:48:7d:54:93:7b:72: f9:b8:da:c8:d8:33:b6:be:54:bd:a5:1e:08:96:0b:65:45:57: 51:ee:13:c8:3d:97:f5:d9:c8:57:1f:04:5d:4d:03:84:e3:8d: 4c:c1:db:ad:c9:91:70:ad:b3:83:ac:e2:11:0a:75:f4:a1:36: 8b:1c:9e:34:fd:53:23:12:2f:09:4d:a7:1f:a7:36:13:fc:0c: ef:32:b7:2b:d6:c5:75:3f:51:63:ef:8a:59:c6:3a:b7:36:1b: 77:ed:ab:e6:33:c5:35:05:79:fa:0c:72:46:66:d2:ab:84:ed: 35:e9:7b:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey7/vXVTCJuebb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk NGRlM2VjZWMtYTIzZi00MGU0LWE3YTItODU0NDdjODI3ZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Mv87QSKG48mOUuPNhw+/xCT6B/R/LIUckcD dZ2WeT8HT6WUkJ37qGb9wPdgt1l89UYW/YinMuIjmb9Qk+qKUtRbsp+nmfi4toQ/ ITjTUIbemyIJZ/SgzCMxqEov/MmzRukD/Uv+t4XCeJGDfw1u9y2VDJ5B4yh0Sjsl hUz8yUweto7OGCYDhtNSb3pG9Vim+hQQtuttfDaNOn44aBU3XFsUeqcNUokqxn1f yS18qLUX3p3iTQKSPGQfAQTz+3856rBAnh209Nugc5znhmW0jO1tOU2KWInOSYPU 3fxPCmxJk1LvKl/iXykkdLmO1Em1QvO01bLJcSmYesl1T4bvXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwOLyVBHoMHODwZ0vG+Pk28JEtjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTg3ZWEzZDQtOGVmMi0z Y2VkLTlkYzgtYWEyM2QyNjZiMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvceGnjtWNkwk+ZQDTOPoWDWOY419Fmv/WGEx02WJLoeqlF3WvPzjBy 0ZUJrCzrB6EoL6wdFCGy+M/UeCEEGGxjxx7kjNf3XWW3OJ29bzf9OXxEIxHZWsmN qBkz9u8vgFbOdNWJ9lIipi9zs94V2dAYm69UcNdw8S/fPfy192XMySw8MYEmPbxB M0h9VJN7cvm42sjYM7a+VL2lHgiWC2VFV1HuE8g9l/XZyFcfBF1NA4TjjUzB263J kXCts4Os4hEKdfShNoscnjT9UyMSLwlNpx+nNhP8DO8ytyvWxXU/UWPvilnGOrc2 G3ftq+YzxTUFefoMckZm0quE7TXpewI= -----END CERTIFICATE-----Generated at Sat Aug 23 18:00:21 2025 by rpki-client