$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa File: 5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa (raw, json) Hash identifier: 6ettSbPfDofhi8IsFpHD731y7kcfltBCC9/F2CQkGq0= Subject key identifier: B4:92:82:E3:12:9F:5E:BE:52:E3:1E:DE:E8:53:0E:44:98:5F:48:90 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A268AC13944EA2423CCCC1080 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 212238 IP address blocks: 172.94.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:c1:39:44:ea:24:23:cc:cc:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=16aefd07-86fd-4711-beea-b82ee438d3ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b8:bd:cc:dc:24:52:b1:21:77:af:d5:54:f4: dd:48:ca:ef:24:0d:5c:23:0d:b7:7c:1d:be:bc:ee: 22:31:07:2e:20:da:f2:bd:5b:65:b4:96:d5:f8:76: 7c:37:85:97:a7:37:d4:09:23:5a:70:2c:bc:8d:79: d9:72:70:89:d3:65:51:40:61:94:6f:9a:72:77:9b: 75:95:a6:e9:26:74:95:67:7d:1e:ca:4d:b9:16:26: 35:b8:e5:05:f3:d5:99:03:1d:69:30:33:27:94:a8: 17:30:0b:2e:f5:05:47:ab:c0:6e:2b:5b:75:25:32: 25:ee:05:f8:e8:18:43:a3:c0:91:3b:16:39:2c:f8: 72:e7:33:28:ed:04:5b:94:94:bd:6f:8e:16:2c:b2: e1:5a:00:9b:53:30:ef:77:96:1e:60:80:82:3c:4e: 69:f9:89:6a:c1:ff:8a:ef:b9:54:82:b9:de:16:27: ce:b1:a0:0e:15:10:88:5f:39:9b:23:d4:39:f8:fe: 4c:66:ca:f5:7a:b3:34:b2:be:bd:ba:c2:9b:40:a1: 58:9e:c7:52:d6:1a:25:ab:69:d6:4f:45:0b:ca:33: 4f:d8:4f:0e:b7:b7:be:d0:f0:b9:79:32:0f:c5:ba: 3c:4c:3b:cc:54:62:cb:1e:f4:e6:a7:99:d1:0f:69: 29:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:92:82:E3:12:9F:5E:BE:52:E3:1E:DE:E8:53:0E:44:98:5F:48:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:7f:07:85:f2:ae:1d:f6:2b:5e:92:3d:f3:46:04:d6:74:ff: 23:3d:88:7f:27:45:bb:f9:95:af:49:e0:55:5d:e9:f3:f5:72: 4d:a6:c5:0e:f0:90:09:61:56:f7:74:c5:13:2d:77:0e:55:8b: d1:91:9a:03:db:2f:83:db:16:95:9d:be:4c:2d:ed:04:ef:b7: 85:60:17:b0:94:9d:a6:2f:09:54:57:a8:ad:c2:ec:64:79:56: 76:17:aa:71:87:76:70:0f:0b:6a:92:15:0c:bb:df:24:53:0e: 9d:9e:cd:57:e8:56:20:d1:ad:65:d2:70:b5:7e:d4:3b:a3:35: 7a:33:4e:91:e9:89:6b:60:05:7b:e5:d0:f0:49:cd:4e:8c:2e: b1:04:fe:2c:82:66:a4:66:79:b9:d3:71:01:42:81:cd:e8:cc: 0a:01:a1:32:e6:8b:31:92:4e:47:33:47:96:38:23:62:63:ad: 8e:a2:7b:0b:4c:a8:78:b5:92:1a:c7:9f:76:49:b7:fe:dd:80: 87:fa:3e:00:6f:ee:b4:16:a1:db:c3:9a:d0:d5:cc:e4:4f:9d: 07:42:63:cb:96:ff:28:96:3a:a2:01:4b:02:bf:5d:2a:7a:03: 57:12:d9:fd:fe:45:e1:79:ea:11:ec:17:e3:9a:dc:d4:df:54: 37:26:19:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomisE5ROokI8zMEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk MTZhZWZkMDctODZmZC00NzExLWJlZWEtYjgyZWU0MzhkM2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7i9zNwkUrEhd6/VVPTdSMrvJA1cIw23fB2+ vO4iMQcuINryvVtltJbV+HZ8N4WXpzfUCSNacCy8jXnZcnCJ02VRQGGUb5pyd5t1 labpJnSVZ30eyk25FiY1uOUF89WZAx1pMDMnlKgXMAsu9QVHq8BuK1t1JTIl7gX4 6BhDo8CROxY5LPhy5zMo7QRblJS9b44WLLLhWgCbUzDvd5YeYICCPE5p+Ylqwf+K 77lUgrneFifOsaAOFRCIXzmbI9Q5+P5MZsr1erM0sr69usKbQKFYnsdS1holq2nW T0ULyjNP2E8Ot7e+0PC5eTIPxbo8TDvMVGLLHvTmp5nRD2kpwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSSguMSn16+UuMe3uhTDkSYX0iQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNWNhNTcxYjEtNDkwNy0z MjRjLTgxMDQtYmVkNmNjMGZkZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9/B4Xyrh32K16SPfNGBNZ0/yM9iH8nRbv5la9J4FVd6fP1ck2mxQ7w kAlhVvd0xRMtdw5Vi9GRmgPbL4PbFpWdvkwt7QTvt4VgF7CUnaYvCVRXqK3C7GR5 VnYXqnGHdnAPC2qSFQy73yRTDp2ezVfoViDRrWXScLV+1DujNXozTpHpiWtgBXvl 0PBJzU6MLrEE/iyCZqRmebnTcQFCgc3ozAoBoTLmizGSTkczR5Y4I2JjrY6iewtM qHi1khrHn3ZJt/7dgIf6PgBv7rQWodvDmtDVzORPnQdCY8uW/yiWOqIBSwK/XSp6 A1cS2f3+ReF56hHsF+Oa3NTfVDcmGfg= -----END CERTIFICATE-----Generated at Sat Jun 14 17:43:59 2025 by rpki-client