$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d6ace2-7e42-3857-a6df-5915cab5768a.roa File: 27d6ace2-7e42-3857-a6df-5915cab5768a.roa (raw, json) Hash identifier: LLGIo0D4CPnr+hU63Zgzr+mVaH1wQxIQcNmDmNdQzZM= Subject key identifier: 13:F2:49:A5:81:68:2B:9A:9A:C3:00:9F:34:99:CA:E5:BA:39:8A:D2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A23C016D33C3AD92A934A7400 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d6ace2-7e42-3857-a6df-5915cab5768a.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 9009 IP address blocks: 172.94.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:16:d3:3c:3a:d9:2a:93:4a:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=42b6f019-dacb-4e53-83d6-42cb33aebbff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:57:66:72:ab:ac:62:ca:5a:19:d4:70:b5:19: b6:89:2f:70:8a:e3:1a:a7:1b:9c:64:42:87:8d:64: a5:23:5c:29:ac:7c:b2:f3:71:19:29:54:98:a0:29: 74:b0:db:ed:9f:c2:aa:fb:5e:23:c2:4f:74:7c:27: 32:50:b3:2e:5e:a1:91:93:e9:81:ad:0d:cf:c8:09: 30:60:c3:1e:4d:84:6d:55:e0:ec:2a:d0:47:86:98: d4:71:10:84:aa:27:f3:52:9d:ff:2b:3a:e3:2b:3b: c3:31:89:18:f3:82:9c:37:c0:4b:5b:2a:02:80:41: 26:33:da:80:d9:cb:f7:57:15:4c:18:25:f9:f5:d8: 6c:d7:11:03:74:30:90:aa:f7:1e:66:a1:fb:90:5d: b0:9c:fe:e9:91:e9:b9:13:3e:10:03:76:0d:21:b0: b2:9e:fb:ba:52:02:83:d3:a0:b5:59:3f:80:d5:a5: b2:9d:04:b6:7c:d8:a4:84:0f:be:d7:5f:01:25:8c: 8d:74:5e:19:3d:31:99:14:8c:af:4b:e7:68:c6:8e: d5:fe:ac:d5:37:bf:2d:34:76:16:b5:f5:43:fc:d5: cb:29:ed:18:19:3c:ff:c0:b9:d7:6f:9f:89:41:26: 86:42:b0:ab:aa:5e:16:7e:6e:24:0d:40:92:91:9c: 55:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F2:49:A5:81:68:2B:9A:9A:C3:00:9F:34:99:CA:E5:BA:39:8A:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d6ace2-7e42-3857-a6df-5915cab5768a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:05:d7:14:27:ca:18:70:be:70:34:c8:52:a8:a0:7d:7b:fa: e4:87:ef:cc:e5:96:96:c0:f9:05:4f:7e:b7:8d:59:6a:6c:b2: 83:c7:71:1d:b7:17:f1:3c:c4:49:99:6e:d2:e7:ff:77:53:8c: 2a:0a:51:b1:c5:40:eb:d4:88:40:8f:2c:7c:d6:94:36:11:99: 20:94:0e:fb:63:ba:20:0d:32:8c:69:17:13:48:d3:be:82:04: 7c:1a:98:b1:be:ec:76:65:58:c8:72:e4:49:21:93:66:81:fe: 1e:f6:59:39:9f:e5:08:15:49:7b:06:71:8f:e2:a7:a4:10:21: 29:24:8e:f0:c7:bc:46:55:b1:49:79:19:3b:1f:11:3b:6b:93: 01:f6:54:d0:38:93:b2:33:ef:19:1b:1a:aa:63:71:73:e6:09: 0f:b4:f8:ae:5c:0f:ee:dd:97:b1:cc:42:55:98:8e:c3:96:88: a2:6c:ce:44:95:c5:4b:cb:6d:50:eb:98:2b:56:74:82:7a:eb: fe:58:e1:4a:18:47:89:03:d9:cb:6e:4e:aa:e6:57:87:d2:42: e2:48:b8:13:56:52:4a:9d:dd:b0:39:52:94:8e:ae:66:10:90: e7:32:5e:47:72:7d:4d:7f:15:c5:31:8f:a8:f0:03:8e:43:3c: e1:00:d6:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwBbTPDrZKpNKdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk NDJiNmYwMTktZGFjYi00ZTUzLTgzZDYtNDJjYjMzYWViYmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1dmcqusYspaGdRwtRm2iS9wiuMapxucZEKH jWSlI1wprHyy83EZKVSYoCl0sNvtn8Kq+14jwk90fCcyULMuXqGRk+mBrQ3PyAkw YMMeTYRtVeDsKtBHhpjUcRCEqifzUp3/KzrjKzvDMYkY84KcN8BLWyoCgEEmM9qA 2cv3VxVMGCX59dhs1xEDdDCQqvceZqH7kF2wnP7pkem5Ez4QA3YNIbCynvu6UgKD 06C1WT+A1aWynQS2fNikhA++118BJYyNdF4ZPTGZFIyvS+doxo7V/qzVN78tNHYW tfVD/NXLKe0YGTz/wLnXb5+JQSaGQrCrql4Wfm4kDUCSkZxVfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPySaWBaCuamsMAnzSZyuW6OYrSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjdkNmFjZTItN2U0Mi0z ODU3LWE2ZGYtNTkxNWNhYjU3NjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcF1xQnyhhwvnA0yFKooH17+uSH78zllpbA+QVPfreNWWpssoPHcR23 F/E8xEmZbtLn/3dTjCoKUbHFQOvUiECPLHzWlDYRmSCUDvtjuiANMoxpFxNI076C BHwamLG+7HZlWMhy5Ekhk2aB/h72WTmf5QgVSXsGcY/ip6QQISkkjvDHvEZVsUl5 GTsfETtrkwH2VNA4k7Iz7xkbGqpjcXPmCQ+0+K5cD+7dl7HMQlWYjsOWiKJszkSV xUvLbVDrmCtWdIJ66/5Y4UoYR4kD2ctuTqrmV4fSQuJIuBNWUkqd3bA5UpSOrmYQ kOcyXkdyfU1/FcUxj6jwA45DPOEA1hs= -----END CERTIFICATE-----Generated at Tue Jun 17 13:48:55 2025 by rpki-client