$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f001b637-cd3b-3f79-9db5-e640908c6166.roa File: f001b637-cd3b-3f79-9db5-e640908c6166.roa (raw, json) Hash identifier: RmSAXwqNIL1UiX5v6/+bQ3LJvzYP3QRZy5Cmy7Amj3k= Subject key identifier: 6F:2B:39:13:7E:12:68:A5:76:FD:46:EA:AF:BD:98:1C:4E:98:D4:B8 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584ACB40ED6C0914620421649A80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f001b637-cd3b-3f79-9db5-e640908c6166.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 3223 IP address blocks: 172.94.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:ed:6c:09:14:62:04:21:64:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=c5508d1b-31cc-4fac-8d28-8bddd9095ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c2:5f:d9:44:66:49:e4:d3:63:28:9c:89:c0: 36:32:31:51:d9:09:9b:d3:1c:7b:0d:80:55:0e:be: e7:e4:1a:e8:53:8a:9c:7c:c0:53:00:98:d1:37:ec: da:38:11:29:ba:3d:26:e9:ae:51:1a:3b:77:94:f0: d2:63:72:e5:e9:e7:9c:da:6a:97:9d:ba:59:64:9f: 51:61:02:0b:c4:b1:32:a2:ad:27:df:3e:4d:d9:3d: c3:99:b7:78:dc:88:fb:07:b2:24:03:b8:62:48:85: 1d:e6:f9:70:cb:88:6a:dc:18:6a:8d:64:0f:30:b1: 21:e3:e7:83:d8:e6:20:f0:91:be:2d:c0:8a:37:01: a0:3a:b2:dc:b6:f8:59:18:8f:8c:5b:70:7c:f0:29: b1:9c:c1:53:ef:ba:ca:f2:d8:44:26:60:e5:bd:79: bb:ec:43:41:6f:d0:ea:ea:61:e1:34:52:49:80:87: 0f:48:e3:dd:0c:97:a0:2a:a2:e4:14:71:d2:17:65: d9:32:8a:85:d9:86:0c:5e:ec:b2:0d:54:da:6d:17: fe:76:89:ee:6d:83:73:57:45:ab:0e:b4:dd:66:5a: aa:a0:c7:71:61:62:93:31:31:55:af:df:85:e4:90: 81:ad:6d:cb:9e:03:c5:c0:51:ce:fa:29:dd:e6:8b: 42:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2B:39:13:7E:12:68:A5:76:FD:46:EA:AF:BD:98:1C:4E:98:D4:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f001b637-cd3b-3f79-9db5-e640908c6166.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:85:44:4f:ff:72:2f:4d:00:42:d4:09:3d:6d:95:12:30:3b: f5:33:1b:7a:ce:29:18:b5:4b:66:41:72:8a:e2:ea:c4:73:10: 6e:c8:1d:06:24:44:f3:b1:11:02:c3:98:41:33:32:af:ba:78: 8e:0c:a8:ee:a1:96:0e:ff:70:84:5e:0f:1d:01:b1:f2:4d:db: 7b:c4:9f:d5:28:4d:d7:9c:ea:a8:ec:41:8c:f7:39:77:83:7b: a0:c5:72:b5:7b:e8:e3:dd:65:4b:a5:e7:e0:02:62:4c:32:e0: 93:77:17:0e:67:ff:55:00:6c:82:55:25:c0:79:42:b3:b9:75: df:10:1f:39:ca:b2:48:6a:d3:39:0e:80:78:79:08:6f:03:7f: 84:5e:2f:b5:01:bb:6a:f1:71:98:f7:88:6e:dc:e7:8b:df:1f: d7:c9:88:c5:0a:25:25:32:73:4c:61:8f:6b:55:6d:2b:38:dc: 4f:a5:c8:4d:d9:b9:70:c7:cd:35:66:a4:ff:56:be:db:98:2c: 3f:71:b6:fc:54:3b:17:bb:8b:e7:a7:9f:5e:ff:4d:29:0a:bc: 99:8e:8f:32:11:6f:18:7f:09:38:c7:3a:59:88:bd:9d:e8:14: 96:13:87:78:13:17:c5:a8:f7:36:e3:ff:39:e0:8a:70:1b:cd: 48:a3:8d:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQO1sCRRiBCFkmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk YzU1MDhkMWItMzFjYy00ZmFjLThkMjgtOGJkZGQ5MDk1Y2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08Jf2URmSeTTYyicicA2MjFR2Qmb0xx7DYBV Dr7n5BroU4qcfMBTAJjRN+zaOBEpuj0m6a5RGjt3lPDSY3Ll6eec2mqXnbpZZJ9R YQILxLEyoq0n3z5N2T3Dmbd43Ij7B7IkA7hiSIUd5vlwy4hq3BhqjWQPMLEh4+eD 2OYg8JG+LcCKNwGgOrLctvhZGI+MW3B88CmxnMFT77rK8thEJmDlvXm77ENBb9Dq 6mHhNFJJgIcPSOPdDJegKqLkFHHSF2XZMoqF2YYMXuyyDVTabRf+donubYNzV0Wr DrTdZlqqoMdxYWKTMTFVr9+F5JCBrW3LngPFwFHO+ind5otCyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8rORN+Emildv1G6q+9mBxOmNS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjAwMWI2MzctY2QzYi0z Zjc5LTlkYjUtZTY0MDkwOGM2MTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGFRE//ci9NAELUCT1tlRIwO/UzG3rOKRi1S2ZBcori6sRzEG7IHQYk RPOxEQLDmEEzMq+6eI4MqO6hlg7/cIReDx0BsfJN23vEn9UoTdec6qjsQYz3OXeD e6DFcrV76OPdZUul5+ACYkwy4JN3Fw5n/1UAbIJVJcB5QrO5dd8QHznKskhq0zkO gHh5CG8Df4ReL7UBu2rxcZj3iG7c54vfH9fJiMUKJSUyc0xhj2tVbSs43E+lyE3Z uXDHzTVmpP9WvtuYLD9xtvxUOxe7i+enn17/TSkKvJmOjzIRbxh/CTjHOlmIvZ3o FJYTh3gTF8Wo9zbj/znginAbzUijjeg= -----END CERTIFICATE-----Generated at Sat Aug 23 08:20:51 2025 by rpki-client