$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa File: c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa (raw, json) Hash identifier: escHhXEYWaYxTC0t4NDnGbi4+2VhhbEaFFxYLkneBUM= Subject key identifier: 71:92:93:39:2A:B2:8A:BF:70:AC:4C:17:14:F4:E3:5B:3F:DD:FB:90 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AE461265BF016B8823DBAA900 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 206264 IP address blocks: 172.94.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:26:5b:f0:16:b8:82:3d:ba:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=4a1f4bd9-16ce-43c2-91e8-55e958dd4b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4c:04:17:7f:e5:7a:bd:5b:ba:ea:e5:56:00: 9c:d4:12:ec:a2:44:10:9b:c2:d2:34:d0:1c:82:6e: 5b:de:33:ae:9c:1f:c7:88:15:de:ac:3c:54:38:50: 84:19:30:bb:d4:7e:aa:f4:5b:39:f5:0e:c6:e8:0e: d1:87:45:11:e3:c2:d7:3b:2e:88:72:58:95:4d:1b: f1:21:a0:51:43:70:d8:ce:16:45:14:5d:c9:17:82: 1b:2f:d2:15:a2:fc:60:7e:68:17:6c:a3:65:a1:f9: e4:f5:af:a4:87:c7:04:23:c1:ad:35:9f:31:66:a7: aa:ec:72:f0:62:a8:c6:49:ef:eb:49:bb:a4:fb:0a: 48:2a:ac:1e:b7:61:93:33:e6:f8:6f:8d:06:51:41: 61:d1:6e:0f:7a:cd:11:a3:1d:9d:ac:6b:5c:5f:d7: 54:cf:8b:f5:ab:db:9b:81:54:0a:80:09:2c:83:b9: 19:95:c6:1c:9a:2c:83:6f:f2:f4:2e:43:f7:f4:fd: 41:ec:e0:24:76:64:95:22:ff:ab:44:8d:63:5a:d6: 64:ab:13:f8:d6:c8:4b:48:ab:3c:64:74:16:40:66: a2:ff:2e:05:fa:95:6b:ec:c1:c4:34:ac:e7:50:cf: 75:c8:3f:da:d1:99:a6:23:26:b2:3b:e9:bd:1b:02: 5b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:92:93:39:2A:B2:8A:BF:70:AC:4C:17:14:F4:E3:5B:3F:DD:FB:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:db:ff:8c:da:a0:a4:cc:99:af:65:fc:7c:e8:ec:12:f5:2d: 1c:2f:e2:39:2d:ea:df:3a:b6:7c:ca:e9:52:39:11:32:ef:b6: 43:96:5b:06:42:e7:1e:cb:aa:0b:cf:ce:33:8a:56:2e:9f:3e: 23:6a:6f:c3:38:e3:6d:34:d8:25:9c:d3:58:5f:7e:29:4c:fe: 13:d6:a6:18:db:d1:80:aa:c4:ad:95:3a:21:92:aa:91:6f:a0: 7f:be:36:08:dd:fc:93:75:7d:bf:7a:e9:7a:38:f0:bc:a5:f1: c2:a6:75:2e:b1:91:5a:69:92:c9:cd:7a:b4:c8:ee:df:fe:af: 44:9d:db:61:18:ce:41:0a:e0:90:40:eb:be:9f:a9:f7:46:22: 77:14:3c:ac:61:07:8b:37:3a:8d:4b:21:b3:19:be:13:fe:68: 8a:a7:72:94:b8:c8:ec:3c:26:9f:3b:09:b1:f2:8a:6b:dd:c9: 3c:67:fb:5b:d5:00:c8:a8:08:aa:53:46:74:93:cf:67:fb:ea: d6:8a:e1:39:79:76:67:bf:e3:44:66:ad:4c:49:02:d1:49:41: 20:1b:4c:ec:f5:43:33:0b:9e:aa:cc:9f:29:3f:1f:00:80:ae: 88:b7:63:aa:06:1d:e8:d4:37:80:cc:4b:33:56:a0:4f:d0:0e: f8:b5:26:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSZb8Ba4gj26qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NGExZjRiZDktMTZjZS00M2MyLTkxZTgtNTVlOTU4ZGQ0YjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkwEF3/ler1buurlVgCc1BLsokQQm8LSNNAc gm5b3jOunB/HiBXerDxUOFCEGTC71H6q9Fs59Q7G6A7Rh0UR48LXOy6IcliVTRvx IaBRQ3DYzhZFFF3JF4IbL9IVovxgfmgXbKNlofnk9a+kh8cEI8GtNZ8xZqeq7HLw YqjGSe/rSbuk+wpIKqwet2GTM+b4b40GUUFh0W4Pes0Rox2drGtcX9dUz4v1q9ub gVQKgAksg7kZlcYcmiyDb/L0LkP39P1B7OAkdmSVIv+rRI1jWtZkqxP41shLSKs8 ZHQWQGai/y4F+pVr7MHENKznUM91yD/a0ZmmIyayO+m9GwJbewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGSkzkqsoq/cKxMFxT041s/3fuQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzhmNWM1ZTEtMTczMC0z YWM2LThkOTUtNGU5NDc0ZjczODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLb/4zaoKTMma9l/Hzo7BL1LRwv4jkt6t86tnzK6VI5ETLvtkOWWwZC 5x7LqgvPzjOKVi6fPiNqb8M442002CWc01hffilM/hPWphjb0YCqxK2VOiGSqpFv oH++Ngjd/JN1fb966Xo48Lyl8cKmdS6xkVppksnNerTI7t/+r0Sd22EYzkEK4JBA 676fqfdGIncUPKxhB4s3Oo1LIbMZvhP+aIqncpS4yOw8Jp87CbHyimvdyTxn+1vV AMioCKpTRnSTz2f76taK4Tl5dme/40RmrUxJAtFJQSAbTOz1QzMLnqrMnyk/HwCA roi3Y6oGHejUN4DMSzNWoE/QDvi1JlU= -----END CERTIFICATE-----Generated at Sat Aug 23 13:26:08 2025 by rpki-client