$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b3f244e3-32bf-3660-9dcf-ac2efb480d61.roa File: b3f244e3-32bf-3660-9dcf-ac2efb480d61.roa (raw, json) Hash identifier: ujrEgBu81XzdCo2pQEg6Mqj+2hXfKRz1xOug0O4n2XI= Subject key identifier: 03:E1:84:D8:BB:5C:FD:77:40:D6:69:A0:C4:C8:57:80:57:FD:EE:E5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AE9F6704D3B4A82B85DE50400 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b3f244e3-32bf-3660-9dcf-ac2efb480d61.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 9009 IP address blocks: 172.94.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:70:4d:3b:4a:82:b8:5d:e5:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=62498fa0-ccd5-4395-a524-ff076e486008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:37:f2:f5:73:a6:b2:87:28:40:6c:0a:bc:b6: 81:42:12:c7:16:fc:94:ac:57:6a:f5:4f:1e:47:33: b9:4a:67:43:93:d3:46:b3:f9:64:7b:90:7e:03:69: 94:b8:b4:02:22:2b:40:65:d4:ab:78:2c:a0:c9:ac: 6a:80:0a:38:43:7b:77:79:0d:c3:9f:86:35:7d:d7: 22:3a:92:30:07:0f:84:73:10:3e:e0:15:9d:14:ae: 28:62:16:5b:89:c2:4c:87:aa:29:1f:40:a6:96:b9: 19:49:fb:9f:e0:33:0b:30:8b:d4:c9:54:78:5f:35: 83:dd:93:fa:c2:d7:f1:96:f4:6c:04:df:ce:c5:f3: 62:0e:54:fc:25:9d:20:38:a1:b1:2a:9f:8f:b9:7c: e4:5f:23:eb:84:7f:84:92:4b:25:da:a3:f9:dc:37: 75:71:e5:08:45:73:a6:f6:8b:f0:a5:61:58:68:a2: 8e:f5:48:8b:c5:85:00:df:49:2a:b0:73:49:d8:5c: 9e:16:3d:98:c3:d8:96:9e:ea:52:93:8b:f3:cd:15: dc:88:f1:9e:a4:2b:7a:f8:da:c3:76:ae:45:79:53: 37:20:78:9d:ea:76:8b:1c:3f:dc:93:20:9f:55:2e: 6d:fc:a5:f6:16:8b:9d:ee:66:26:53:21:81:ed:61: 74:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E1:84:D8:BB:5C:FD:77:40:D6:69:A0:C4:C8:57:80:57:FD:EE:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b3f244e3-32bf-3660-9dcf-ac2efb480d61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:cb:f6:10:b0:ef:b2:81:b1:cd:80:7b:5a:41:73:85:ad:44: 82:88:93:e8:e0:f4:84:88:16:e6:a4:80:18:44:14:fc:60:38: 8d:bc:55:af:79:47:03:1c:63:9c:1d:52:75:09:b9:23:6c:8c: af:c3:ac:aa:5d:9b:58:e5:c7:5d:fc:89:fd:08:f3:1c:5a:5e: 5a:d5:37:55:04:61:9b:04:07:71:bc:60:35:01:32:dd:7b:52: 27:17:d3:fe:55:85:a1:99:28:87:95:c2:53:62:19:bc:cc:f6: e6:61:17:f3:ab:71:ee:76:f3:45:d9:85:ec:10:cd:d4:23:6a: c4:15:98:93:b6:8d:90:61:c1:9b:20:01:43:2c:63:09:81:32: 69:d8:96:e7:c0:a7:84:d6:38:ef:1f:a4:db:8a:a0:a1:ea:ea: 22:a8:85:36:83:bc:2c:aa:ef:2e:42:6f:04:62:13:90:ce:e1: 94:d6:2d:a7:0f:f5:ce:6f:11:56:62:5d:f0:ca:5e:b2:0b:fa: 3f:99:ad:7b:1d:be:b9:2b:a7:6e:87:39:47:a0:52:e8:7b:cc: c1:66:f5:5a:d7:13:9a:45:69:e4:df:79:df:57:e7:c1:2b:8a: e1:5f:02:0a:da:3a:f8:1c:73:68:48:b6:4b:66:92:e5:af:d6: 4d:c7:83:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9nBNO0qCuF3lBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk NjI0OThmYTAtY2NkNS00Mzk1LWE1MjQtZmYwNzZlNDg2MDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDfy9XOmsocoQGwKvLaBQhLHFvyUrFdq9U8e RzO5SmdDk9NGs/lke5B+A2mUuLQCIitAZdSreCygyaxqgAo4Q3t3eQ3Dn4Y1fdci OpIwBw+EcxA+4BWdFK4oYhZbicJMh6opH0CmlrkZSfuf4DMLMIvUyVR4XzWD3ZP6 wtfxlvRsBN/OxfNiDlT8JZ0gOKGxKp+PuXzkXyPrhH+Ekksl2qP53Dd1ceUIRXOm 9ovwpWFYaKKO9UiLxYUA30kqsHNJ2FyeFj2Yw9iWnupSk4vzzRXciPGepCt6+NrD dq5FeVM3IHid6naLHD/ckyCfVS5t/KX2Foud7mYmUyGB7WF0jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPhhNi7XP13QNZpoMTIV4BX/e7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjNmMjQ0ZTMtMzJiZi0z NjYwLTlkY2YtYWMyZWZiNDgwZDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTL9hCw77KBsc2Ae1pBc4WtRIKIk+jg9ISIFuakgBhEFPxgOI28Va95 RwMcY5wdUnUJuSNsjK/DrKpdm1jlx138if0I8xxaXlrVN1UEYZsEB3G8YDUBMt17 UicX0/5VhaGZKIeVwlNiGbzM9uZhF/Orce5280XZhewQzdQjasQVmJO2jZBhwZsg AUMsYwmBMmnYlufAp4TWOO8fpNuKoKHq6iKohTaDvCyq7y5CbwRiE5DO4ZTWLacP 9c5vEVZiXfDKXrIL+j+ZrXsdvrkrp26HOUegUuh7zMFm9VrXE5pFaeTfed9X58Er iuFfAgraOvgcc2hItktmkuWv1k3Hg+g= -----END CERTIFICATE-----Generated at Sat Aug 23 09:06:05 2025 by rpki-client