$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa File: d2eba7e0-6a87-3e70-9830-21cdb930b252.roa (raw, json) Hash identifier: XK5uiUtHqqH8BvVDHT6gRLowkt07Ie7gT2f4OLxM2Wo= Subject key identifier: D2:15:89:75:88:A9:DE:7C:E6:C5:9F:7A:78:A4:94:71:C4:46:4C:0A Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AA6F62CB20112CFCB50C7A880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 9009 IP address blocks: 172.94.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:2c:b2:01:12:cf:cb:50:c7:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=77caa966-ed39-4f87-a107-c5bf4e67a3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3e:87:62:51:e6:ed:30:a9:77:84:72:dd:f2: 9d:36:36:94:16:24:97:41:bd:b5:7e:55:be:c2:ec: ac:00:e0:0b:54:dc:54:03:20:6c:fb:35:84:a2:2a: 93:a9:5c:9d:8f:74:27:b4:df:70:11:61:ba:ce:a4: c2:d8:16:56:2c:6b:05:d9:38:54:7d:2c:b3:a9:5c: a3:42:91:f1:cf:31:3d:f0:ac:2c:6b:2d:0f:af:e3: 68:a9:86:92:70:99:a8:ca:3a:74:4f:fb:7d:e7:45: 3a:2b:61:a8:7f:7a:48:50:76:3f:03:73:9a:4b:44: ce:6f:ac:aa:1e:7f:b7:a0:07:04:40:6b:7e:24:8d: e6:6c:7f:9c:88:23:de:97:64:73:6b:e4:98:31:62: 93:e8:04:61:21:cc:e5:70:4d:42:53:59:ce:f3:f4: 67:6b:74:01:40:d4:e1:7b:66:b4:2b:e8:17:bc:3d: 1d:1b:ea:d5:3d:ca:ee:dc:95:f7:6c:f3:33:9d:58: 9e:af:b3:b5:37:1d:8c:bb:11:c8:c7:6e:17:08:56: 45:1b:2e:df:9b:93:4f:4d:7e:b4:fd:6e:8d:3d:7a: 6b:61:ad:65:6c:22:c8:09:cd:b1:05:6a:e0:1c:f8: 9e:03:15:26:fc:ad:d0:7f:fb:b5:e0:76:4c:f2:c2: 6c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:15:89:75:88:A9:DE:7C:E6:C5:9F:7A:78:A4:94:71:C4:46:4C:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:83:0b:7b:d3:c4:01:f5:71:50:48:d3:14:c8:e1:21:e5:d4: f4:ee:ac:56:91:77:9f:31:02:64:d4:57:71:58:e3:6f:f0:20: 50:e9:d7:b2:45:2e:45:9c:72:38:cf:b0:c8:f5:5e:e5:08:94: 0f:ff:f9:d0:ff:4c:7d:09:10:9b:e6:67:ed:06:28:1e:7b:5a: eb:76:d6:d7:28:44:01:a6:9b:68:46:6f:c9:f7:1f:10:b3:87: 43:55:49:86:a6:08:43:75:23:78:56:c2:88:06:62:55:de:59: d4:c8:cc:82:f2:87:d0:df:64:e9:a6:8f:f7:71:46:45:ef:f6: b9:f4:29:35:98:0c:c1:8b:44:5d:b1:5c:f2:0c:e9:3d:ba:37: e7:07:0f:93:42:8b:db:e2:01:37:93:2f:bb:1b:ae:76:c4:1f: 78:9b:c3:22:8b:b5:92:25:b4:88:ee:f7:7b:13:62:69:20:ae: b0:9f:e1:a3:26:90:da:a2:13:5a:c4:03:1d:1f:b5:b8:0c:49: 37:87:7e:bb:0a:b3:cd:62:28:97:e1:53:d6:11:76:a0:00:a2: de:e9:4d:a3:7e:7a:d4:12:e5:65:2a:8c:d5:d3:5c:b7:3a:2b: 72:34:39:a5:00:0f:8e:75:3f:a1:0e:c0:a2:9c:7f:c3:41:92: 4d:e8:51:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9iyyARLPy1DHqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk NzdjYWE5NjYtZWQzOS00Zjg3LWExMDctYzViZjRlNjdhM2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj6HYlHm7TCpd4Ry3fKdNjaUFiSXQb21flW+ wuysAOALVNxUAyBs+zWEoiqTqVydj3QntN9wEWG6zqTC2BZWLGsF2ThUfSyzqVyj QpHxzzE98Kwsay0Pr+NoqYaScJmoyjp0T/t950U6K2Gof3pIUHY/A3OaS0TOb6yq Hn+3oAcEQGt+JI3mbH+ciCPel2Rza+SYMWKT6ARhIczlcE1CU1nO8/Rna3QBQNTh e2a0K+gXvD0dG+rVPcru3JX3bPMznVier7O1Nx2MuxHIx24XCFZFGy7fm5NPTX60 /W6NPXprYa1lbCLICc2xBWrgHPieAxUm/K3Qf/u14HZM8sJsZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIViXWIqd585sWfeniklHHERkwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDJlYmE3ZTAtNmE4Ny0z ZTcwLTk4MzAtMjFjZGI5MzBiMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASDC3vTxAH1cVBI0xTI4SHl1PTurFaRd58xAmTUV3FY42/wIFDp17JF LkWccjjPsMj1XuUIlA//+dD/TH0JEJvmZ+0GKB57Wut21tcoRAGmm2hGb8n3HxCz h0NVSYamCEN1I3hWwogGYlXeWdTIzILyh9DfZOmmj/dxRkXv9rn0KTWYDMGLRF2x XPIM6T26N+cHD5NCi9viATeTL7sbrnbEH3ibwyKLtZIltIju93sTYmkgrrCf4aMm kNqiE1rEAx0ftbgMSTeHfrsKs81iKJfhU9YRdqAAot7pTaN+etQS5WUqjNXTXLc6 K3I0OaUAD451P6EOwKKcf8NBkk3oUWo= -----END CERTIFICATE-----Generated at Sat Aug 23 09:01:21 2025 by rpki-client