$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2c0db4a6-1513-35d3-ac4d-0112a3da3c2a.roa File: 2c0db4a6-1513-35d3-ac4d-0112a3da3c2a.roa (raw, json) Hash identifier: OU2h62gU0+NkIiQxNVHZ56PaaLpoaWNG3jha857T30A= Subject key identifier: 9A:20:8B:35:1C:7C:7F:7E:53:AD:FC:47:62:7C:95:B5:5A:C0:38:37 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849BDDA17A13D9993FBFBCA1980 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2c0db4a6-1513-35d3-ac4d-0112a3da3c2a.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 197450 IP address blocks: 172.94.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:17:a1:3d:99:93:fb:fb:ca:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=b8735774-6c34-4efa-b962-550d81d4177f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:93:25:95:b1:77:c6:ea:5a:71:d3:01:72:8c: 32:cb:da:0c:7b:87:85:56:d1:0c:9a:ee:65:aa:9d: 5f:10:8a:12:12:01:c8:42:b6:1d:65:80:2a:da:11: c8:73:40:21:59:55:ff:a8:5f:48:5f:46:2b:2e:df: 03:3c:d3:98:86:3b:88:d7:70:90:e0:f5:6e:82:b9: de:f7:35:de:f8:0e:f8:eb:2b:63:81:cc:3a:8e:d4: 62:ba:0c:5b:c3:54:58:53:f0:b8:e1:c3:50:31:e4: 05:05:b9:f9:59:55:42:90:1e:1d:cd:4b:82:81:b6: df:a5:b9:87:1a:a3:c5:1f:fa:c0:8a:63:9e:66:aa: e1:38:2c:78:24:dd:4f:28:27:28:4f:6c:8e:74:60: 24:9c:f0:ea:cc:36:c3:cf:4b:05:72:96:b2:56:62: 82:e7:a1:92:5e:fb:06:6f:8a:44:ad:c2:e5:33:03: a9:45:75:2f:b7:97:03:8b:e3:3e:15:ff:39:6e:2a: da:6d:88:f6:6d:80:45:db:9e:6e:7a:1f:99:97:11: e1:53:8a:9d:0e:dd:30:55:ff:06:e9:28:29:e2:20: f7:6a:32:20:05:a3:44:26:ff:b3:75:34:e8:28:cd: 0f:7f:44:c3:75:83:e7:ac:77:05:07:17:fc:07:29: 62:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:20:8B:35:1C:7C:7F:7E:53:AD:FC:47:62:7C:95:B5:5A:C0:38:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2c0db4a6-1513-35d3-ac4d-0112a3da3c2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b0:a9:70:c9:2c:dc:12:14:9d:2a:52:1f:fc:2a:5e:7d:0a: fc:9a:cd:ee:a5:72:b1:17:a5:69:76:f9:57:75:a0:fa:e1:ec: 32:40:f0:fb:59:3b:7c:80:5a:b7:2c:99:d0:39:66:86:65:ba: af:b3:83:96:a8:d1:23:b6:8f:2d:b5:ad:bc:20:78:c0:3d:8d: a3:8a:d8:74:b0:7b:7f:ac:35:af:25:2f:70:9e:b8:ba:d7:4f: 04:61:7b:83:d5:7d:7c:9e:f4:99:5c:61:89:77:35:bd:74:be: 54:ed:e5:8a:4e:b2:8c:0c:4e:9a:be:06:ed:62:7d:98:a4:87: 44:2f:92:25:f1:32:1d:05:61:ab:a6:2f:ca:82:1c:a9:fe:1f: 0b:23:5f:52:89:5a:b6:9f:67:2d:92:71:b1:d9:d5:3a:1d:8f: e1:32:1f:07:ac:68:a7:a8:a5:7e:ae:6c:cf:83:c5:a4:7b:ca: 15:a3:86:52:3a:d2:23:ba:30:8c:b8:23:28:32:18:80:3a:f2: f5:a3:88:82:b8:12:d3:e5:98:37:29:91:70:75:f0:51:f6:ff: 6f:7f:36:49:7a:82:8d:8e:24:85:2e:b7:27:5b:c5:38:db:62: cf:5b:5c:50:ae:67:5b:c4:54:ff:73:28:e2:fb:80:23:7e:9f: 9b:32:48:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92hehPZmT+/vKGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk Yjg3MzU3NzQtNmMzNC00ZWZhLWI5NjItNTUwZDgxZDQxNzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZMllbF3xupacdMBcowyy9oMe4eFVtEMmu5l qp1fEIoSEgHIQrYdZYAq2hHIc0AhWVX/qF9IX0YrLt8DPNOYhjuI13CQ4PVugrne 9zXe+A746ytjgcw6jtRiugxbw1RYU/C44cNQMeQFBbn5WVVCkB4dzUuCgbbfpbmH GqPFH/rAimOeZqrhOCx4JN1PKCcoT2yOdGAknPDqzDbDz0sFcpayVmKC56GSXvsG b4pErcLlMwOpRXUvt5cDi+M+Ff85birabYj2bYBF255ueh+ZlxHhU4qdDt0wVf8G 6Sgp4iD3ajIgBaNEJv+zdTToKM0Pf0TDdYPnrHcFBxf8BylidwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJogizUcfH9+U638R2J8lbVawDg3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmMwZGI0YTYtMTUxMy0z NWQzLWFjNGQtMDExMmEzZGEzYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF55MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCwqXDJLNwSFJ0qUh/8Kl59Cvyaze6lcrEXpWl2+Vd1oPrh7DJA8PtZ O3yAWrcsmdA5ZoZluq+zg5ao0SO2jy21rbwgeMA9jaOK2HSwe3+sNa8lL3CeuLrX TwRhe4PVfXye9JlcYYl3Nb10vlTt5YpOsowMTpq+Bu1ifZikh0QvkiXxMh0FYaum L8qCHKn+HwsjX1KJWrafZy2ScbHZ1Todj+EyHwesaKeopX6ubM+DxaR7yhWjhlI6 0iO6MIy4IygyGIA68vWjiIK4EtPlmDcpkXB18FH2/29/Nkl6go2OJIUutydbxTjb Ys9bXFCuZ1vEVP9zKOL7gCN+n5sySAk= -----END CERTIFICATE-----Generated at Sun Jun 15 05:15:24 2025 by rpki-client