$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4e14254d-55fc-35e4-8793-8e34aa78e99e.roa File: 4e14254d-55fc-35e4-8793-8e34aa78e99e.roa (raw, json) Hash identifier: dWjLdHfxdnIcMMcO+uTG5S1huNa/kiwVEfP7VNAAr7I= Subject key identifier: C8:FB:C1:81:28:55:3F:FD:DE:BC:58:83:AD:CD:31:12:B1:18:8A:AF Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A268AC15EAECAE84AF6358680 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4e14254d-55fc-35e4-8793-8e34aa78e99e.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 212238 IP address blocks: 172.94.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:c1:5e:ae:ca:e8:4a:f6:35:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=e199fe2d-977d-4877-9101-abc0785d4a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:42:50:e3:73:f2:76:c1:09:f3:91:a8:1c:e0: d2:90:3b:e7:3c:33:1f:22:fc:f8:c9:ff:4f:80:65: 6e:1e:8a:69:75:c6:18:cf:ee:8d:f6:9f:c4:9e:18: 7e:10:cb:77:65:8f:e3:a5:40:4d:5c:95:fd:33:bf: e8:cb:cf:ec:a5:0c:05:11:4d:1d:a2:aa:8e:91:4a: 2e:b6:00:c8:e1:02:25:a9:35:0b:69:74:b9:ce:be: 91:16:af:c5:09:77:e4:ed:be:66:b8:c7:34:b0:e9: 7e:d4:0b:0a:0c:51:0c:cd:fc:5c:a4:bf:6f:28:da: da:4e:c0:9b:e4:ae:21:0a:4e:51:25:48:6c:18:58: 53:41:c1:e1:63:73:d1:37:6e:6e:2c:29:bc:b4:a8: 67:d9:e9:b7:a3:da:d0:e1:bb:b7:2d:80:23:7a:c4: 47:37:11:6e:6c:9b:c1:f4:c3:ff:36:7f:47:fc:65: cd:d6:46:62:cf:4e:c5:a5:fa:db:8b:b0:e6:84:31: 0f:af:4e:23:76:da:4c:44:c9:3e:13:48:49:18:a7: 14:f8:bb:d3:e2:36:e7:6b:b4:2a:4e:05:db:01:8d: 28:a1:04:98:55:ec:73:b3:19:11:3e:fd:e9:96:bd: 41:39:d7:f4:53:dc:71:0b:b5:d3:b4:11:7a:1a:95: b7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FB:C1:81:28:55:3F:FD:DE:BC:58:83:AD:CD:31:12:B1:18:8A:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4e14254d-55fc-35e4-8793-8e34aa78e99e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ab:22:89:b5:52:26:67:04:59:8a:15:01:66:7d:04:87:0a: 79:e5:0b:56:ef:43:b1:b1:ec:8d:07:a6:57:bc:80:2a:42:f0: fc:cf:0c:7a:7b:ea:e8:1a:9d:f3:1c:45:05:92:27:72:fa:19: 64:38:c2:2e:35:e6:a5:f2:7a:1a:44:a4:ce:53:a7:d2:f2:c9: 4e:5b:1b:93:4c:3a:e7:f3:0c:61:89:d1:27:34:15:0b:c8:43: a0:23:bf:bb:66:a8:53:59:66:ed:c0:70:f9:27:98:dd:08:4f: 2f:23:ce:12:1f:60:97:e6:16:5d:38:a6:ea:34:81:2f:0f:08: cf:d7:30:34:b9:6d:80:50:24:44:cf:4e:c8:5a:ee:e1:45:0f: c6:7c:4b:c7:11:8b:15:ce:b3:d6:8a:50:4c:98:96:7d:22:de: 4c:a9:e0:19:c6:29:26:14:ba:79:d2:e7:54:cc:c8:eb:f9:0b: 7a:eb:86:27:dc:80:2a:cd:40:40:94:b9:54:35:2b:c4:39:88: 9b:48:72:a1:76:28:7f:f0:6f:6a:83:68:8b:b7:74:9d:88:5d: 48:cc:15:84:b2:7d:a1:e2:79:81:e2:33:e4:25:69:6f:71:dc: 39:8a:9c:6d:3a:c0:2e:e0:4e:f5:b8:0f:c6:15:c9:98:a2:c5: d4:3f:97:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomisFersroSvY1hoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk ZTE5OWZlMmQtOTc3ZC00ODc3LTkxMDEtYWJjMDc4NWQ0YTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0JQ43PydsEJ85GoHODSkDvnPDMfIvz4yf9P gGVuHoppdcYYz+6N9p/Enhh+EMt3ZY/jpUBNXJX9M7/oy8/spQwFEU0doqqOkUou tgDI4QIlqTULaXS5zr6RFq/FCXfk7b5muMc0sOl+1AsKDFEMzfxcpL9vKNraTsCb 5K4hCk5RJUhsGFhTQcHhY3PRN25uLCm8tKhn2em3o9rQ4bu3LYAjesRHNxFubJvB 9MP/Nn9H/GXN1kZiz07Fpfrbi7DmhDEPr04jdtpMRMk+E0hJGKcU+LvT4jbna7Qq TgXbAY0ooQSYVexzsxkRPv3plr1BOdf0U9xxC7XTtBF6GpW3KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMj7wYEoVT/93rxYg63NMRKxGIqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGUxNDI1NGQtNTVmYy0z NWU0LTg3OTMtOGUzNGFhNzhlOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6rIom1UiZnBFmKFQFmfQSHCnnlC1bvQ7Gx7I0Hple8gCpC8PzPDHp7 6uganfMcRQWSJ3L6GWQ4wi415qXyehpEpM5Tp9LyyU5bG5NMOufzDGGJ0Sc0FQvI Q6Ajv7tmqFNZZu3AcPknmN0ITy8jzhIfYJfmFl04puo0gS8PCM/XMDS5bYBQJETP Tsha7uFFD8Z8S8cRixXOs9aKUEyYln0i3kyp4BnGKSYUunnS51TMyOv5C3rrhifc gCrNQECUuVQ1K8Q5iJtIcqF2KH/wb2qDaIu3dJ2IXUjMFYSyfaHieYHiM+QlaW9x 3DmKnG06wC7gTvW4D8YVyZiixdQ/l50= -----END CERTIFICATE-----Generated at Sat Jun 14 17:33:30 2025 by rpki-client