$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85beb1b8-b364-349e-8940-19989e438bc7.roa File: 85beb1b8-b364-349e-8940-19989e438bc7.roa (raw, json) Hash identifier: fiaVikrozS3/WS9t3akKu2g+BT0EwztnssnGsJzsjDA= Subject key identifier: 45:C6:8C:B6:55:F9:FF:71:CF:84:93:E0:A3:6B:05:6F:E9:00:DE:29 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A268AC7316F3145C4055F9750 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85beb1b8-b364-349e-8940-19989e438bc7.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 9009 IP address blocks: 172.94.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:c7:31:6f:31:45:c4:05:5f:97:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=f6cfa6e9-c35e-4862-b954-94d3ef02052a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:51:bb:df:ac:de:fc:1e:86:db:26:71:89:8c: cb:09:13:a3:54:ac:78:b8:13:12:6e:8a:e9:ab:8d: ba:02:2a:58:1c:02:af:07:dd:dd:6f:01:3a:e9:7b: ef:4a:6d:c9:70:2b:d3:55:c9:c5:5a:b9:d4:4f:75: d0:bd:f8:e3:84:94:a0:ac:00:7e:b5:28:6a:65:03: f0:39:6d:4f:d7:e2:0d:6f:bc:c0:85:87:8b:47:04: 56:58:8c:6a:35:61:5c:54:67:c9:98:3a:32:5e:b1: 57:0c:e8:a9:3c:27:a6:8f:14:c3:01:a3:08:20:25: 39:0e:dd:ea:cb:cb:00:49:91:09:ec:0a:72:b8:71: a8:47:99:58:9e:ff:1e:d2:fa:21:67:8a:6b:ef:02: 25:28:88:4d:c3:b4:96:b1:f7:2f:2f:ef:55:f2:5d: 71:ca:ef:3a:7f:7c:60:d1:7a:b8:1f:3d:87:db:3e: f5:8e:b8:f9:c9:68:ab:35:79:32:6f:71:84:ae:ca: 3b:57:25:df:3b:9e:9d:31:dc:55:37:7a:9c:96:fc: 2e:82:7b:0b:29:ab:40:0f:a5:4a:ca:b4:d6:21:b2: 73:fb:cb:23:a5:4b:62:f0:fa:b7:ea:28:13:4e:09: ed:08:e9:86:fd:3e:10:38:ef:6e:65:af:d1:12:fb: 5f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C6:8C:B6:55:F9:FF:71:CF:84:93:E0:A3:6B:05:6F:E9:00:DE:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/85beb1b8-b364-349e-8940-19989e438bc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:b2:26:95:16:be:65:0b:4e:ea:14:19:0d:f7:59:1f:0c:cd: b8:cd:42:5f:b4:91:bf:7e:a8:b7:48:73:33:a8:38:46:18:5e: 29:54:26:f4:66:95:0c:f9:6f:5d:80:ad:66:ad:39:7c:61:68: 8b:89:7a:ea:65:54:b0:d3:0d:fa:ad:8d:63:85:39:7a:c1:02: 30:b2:2a:a2:15:18:3c:14:e1:db:ec:04:5a:9c:19:73:90:bf: 65:51:d8:f8:9d:40:1d:22:12:ec:e8:1d:56:63:db:0e:92:0d: 28:da:3e:5c:17:ab:c2:d0:55:10:87:a2:a0:da:9a:b6:7c:4e: 83:ca:64:69:9e:57:cf:fd:aa:8d:01:ea:65:4a:38:97:26:11: 5d:93:97:71:fe:f1:f0:74:68:b4:0a:bc:99:41:ca:a8:6d:da: 69:44:08:36:16:93:72:3e:f0:09:ff:d3:db:a4:20:e7:32:a0: 73:9b:95:0e:c0:8c:a1:37:86:69:0a:de:27:66:5e:c2:b1:f5: 76:01:b9:5a:74:ef:8d:53:c0:c8:8e:b7:bf:5a:36:00:32:f4: a5:2b:16:73:a3:95:5c:e3:4e:74:41:32:bf:fd:38:e4:fc:fe: 25:bc:75:9d:cb:11:77:cd:3c:99:d3:b4:cd:4c:04:67:ae:f2: 77:82:42:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomiscxbzFFxAVfl1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk ZjZjZmE2ZTktYzM1ZS00ODYyLWI5NTQtOTRkM2VmMDIwNTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVG736ze/B6G2yZxiYzLCROjVKx4uBMSborp q426AipYHAKvB93dbwE66XvvSm3JcCvTVcnFWrnUT3XQvfjjhJSgrAB+tShqZQPw OW1P1+INb7zAhYeLRwRWWIxqNWFcVGfJmDoyXrFXDOipPCemjxTDAaMIICU5Dt3q y8sASZEJ7ApyuHGoR5lYnv8e0vohZ4pr7wIlKIhNw7SWsfcvL+9V8l1xyu86f3xg 0Xq4Hz2H2z71jrj5yWirNXkyb3GErso7VyXfO56dMdxVN3qclvwugnsLKatAD6VK yrTWIbJz+8sjpUti8Pq36igTTgntCOmG/T4QOO9uZa/REvtfIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXGjLZV+f9xz4ST4KNrBW/pAN4pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODViZWIxYjgtYjM2NC0z NDllLTg5NDAtMTk5ODllNDM4YmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISyJpUWvmULTuoUGQ33WR8MzbjNQl+0kb9+qLdIczOoOEYYXilUJvRm lQz5b12ArWatOXxhaIuJeuplVLDTDfqtjWOFOXrBAjCyKqIVGDwU4dvsBFqcGXOQ v2VR2PidQB0iEuzoHVZj2w6SDSjaPlwXq8LQVRCHoqDamrZ8ToPKZGmeV8/9qo0B 6mVKOJcmEV2Tl3H+8fB0aLQKvJlByqht2mlECDYWk3I+8An/09ukIOcyoHOblQ7A jKE3hmkK3idmXsKx9XYBuVp0741TwMiOt79aNgAy9KUrFnOjlVzjTnRBMr/9OOT8 /iW8dZ3LEXfNPJnTtM1MBGeu8neCQn8= -----END CERTIFICATE-----Generated at Mon Jun 16 15:58:22 2025 by rpki-client