$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9575200-c843-3805-a2a1-6a268b2c9334.roa File: c9575200-c843-3805-a2a1-6a268b2c9334.roa (raw, json) Hash identifier: 7A1ywJE8PFbAdb6bO6BntNjFZnFstm8+pz90lUT9/yI= Subject key identifier: 25:F0:B7:A0:3C:27:6C:FB:F5:CA:FF:16:8E:90:5D:50:8C:05:C1:62 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584ADD667293C238F2FA7F000F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9575200-c843-3805-a2a1-6a268b2c9334.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 9009 IP address blocks: 172.94.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:72:93:c2:38:f2:fa:7f:00:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=3d0bf532-379c-4040-affd-3975d34ff38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:be:dc:6d:bd:a9:34:9f:ba:90:3b:4c:89:71: b7:6e:ab:c0:d0:06:ab:ca:6e:5a:b5:04:cd:41:81: 76:47:bb:31:07:5b:67:65:b2:f4:cd:c9:1c:55:67: 56:e2:79:55:b7:5a:36:f4:17:4b:30:b3:46:d1:ff: dc:e6:f7:4b:2f:25:1a:92:e7:3b:d9:74:fb:47:46: 0c:a2:df:af:ec:57:73:8c:a4:1c:0f:b3:ee:fa:f0: 0c:99:e2:df:e5:c4:55:3d:2e:72:59:f5:65:ee:fd: 81:c6:2f:86:48:e7:8b:82:8a:87:63:72:c6:b9:2d: c2:5a:5f:91:17:a7:17:76:1b:6f:7f:be:d9:28:1c: 60:30:5f:11:3e:ed:4b:e0:63:98:d4:b1:ac:57:77: fc:2c:51:a5:34:ee:11:e6:05:cc:e0:98:0f:bd:58: 35:23:a5:a4:4d:a3:47:18:fb:2b:68:22:96:76:a9: 83:c8:7f:d5:8f:0f:1c:6c:d7:55:3c:86:c7:63:cf: 81:dd:23:14:cc:24:90:9c:0a:a3:05:81:8b:71:3e: 86:3e:0a:8f:bb:bb:26:5f:da:6c:02:7b:f0:67:fb: ae:ee:a8:8c:34:cb:ba:3d:49:45:81:c0:4c:3e:fd: 8c:95:0d:6b:51:cc:bc:86:fb:26:ae:90:20:ef:95: 0e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F0:B7:A0:3C:27:6C:FB:F5:CA:FF:16:8E:90:5D:50:8C:05:C1:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9575200-c843-3805-a2a1-6a268b2c9334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:1d:52:08:96:69:68:75:c2:5f:7e:c3:4c:76:21:4f:e7:a5: 9c:ee:ef:93:b5:c0:a3:9c:5e:c0:4d:cb:98:bb:79:36:af:df: 9f:35:b8:67:19:b3:9c:19:5d:9e:cb:c1:15:aa:77:01:e7:7e: 1f:b8:1e:58:ea:ab:79:30:42:60:f7:85:d2:bd:6a:63:74:80: e0:6a:f2:e5:df:9d:d1:3d:97:47:8b:1a:7a:92:45:85:c7:be: 85:9b:ca:8a:9e:3d:8b:be:da:54:7c:01:7e:f0:04:87:5c:de: 24:8f:ba:56:ac:c0:54:d0:b2:98:2d:74:84:97:a1:07:2c:f0: 65:1e:9a:a6:65:77:58:07:70:dc:90:f8:58:6a:60:b0:14:92: 2d:19:dd:90:51:c1:82:d5:33:53:22:b4:0a:f4:b6:98:01:cb: 28:bc:58:c2:23:53:00:bc:7e:97:92:b5:43:dd:b6:52:35:51: 09:1f:43:40:5e:48:76:42:91:41:cd:42:42:e1:03:72:90:56: 65:e7:54:c7:06:b9:b5:ae:13:17:6b:36:2b:fc:db:8f:84:b9: 56:6f:36:02:7f:da:f6:0e:70:3f:36:89:d6:b4:5c:58:e9:a5: 38:82:08:25:ef:f3:6a:43:62:73:6d:5c:86:39:9d:2c:5b:09: 93:1e:a8:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZnKTwjjy+n8AD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk M2QwYmY1MzItMzc5Yy00MDQwLWFmZmQtMzk3NWQzNGZmMzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob7cbb2pNJ+6kDtMiXG3bqvA0Aarym5atQTN QYF2R7sxB1tnZbL0zckcVWdW4nlVt1o29BdLMLNG0f/c5vdLLyUakuc72XT7R0YM ot+v7FdzjKQcD7Pu+vAMmeLf5cRVPS5yWfVl7v2Bxi+GSOeLgoqHY3LGuS3CWl+R F6cXdhtvf77ZKBxgMF8RPu1L4GOY1LGsV3f8LFGlNO4R5gXM4JgPvVg1I6WkTaNH GPsraCKWdqmDyH/Vjw8cbNdVPIbHY8+B3SMUzCSQnAqjBYGLcT6GPgqPu7smX9ps AnvwZ/uu7qiMNMu6PUlFgcBMPv2MlQ1rUcy8hvsmrpAg75UOQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXwt6A8J2z79cr/Fo6QXVCMBcFiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzk1NzUyMDAtYzg0My0z ODA1LWEyYTEtNmEyNjhiMmM5MzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwdUgiWaWh1wl9+w0x2IU/npZzu75O1wKOcXsBNy5i7eTav3581uGcZ s5wZXZ7LwRWqdwHnfh+4Hljqq3kwQmD3hdK9amN0gOBq8uXfndE9l0eLGnqSRYXH voWbyoqePYu+2lR8AX7wBIdc3iSPulaswFTQspgtdISXoQcs8GUemqZld1gHcNyQ +FhqYLAUki0Z3ZBRwYLVM1MitAr0tpgByyi8WMIjUwC8fpeStUPdtlI1UQkfQ0Be SHZCkUHNQkLhA3KQVmXnVMcGubWuExdrNiv824+EuVZvNgJ/2vYOcD82ida0XFjp pTiCCCXv82pDYnNtXIY5nSxbCZMeqDs= -----END CERTIFICATE-----Generated at Sat Aug 23 08:25:04 2025 by rpki-client