$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bded033-c145-3aad-bef9-ec1a1c913937.roa File: 8bded033-c145-3aad-bef9-ec1a1c913937.roa (raw, json) Hash identifier: jyKeyjqB34CPBFr8y/kLEuC7162Aa8+ydGGHDEb1xJE= Subject key identifier: 68:5A:BF:BC:CE:E9:16:C8:F3:C7:18:B5:F2:18:FD:13:B0:0F:19:17 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A268AB9B4454EDD5B955CB7C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bded033-c145-3aad-bef9-ec1a1c913937.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 9009 IP address blocks: 172.94.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:b9:b4:45:4e:dd:5b:95:5c:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=a82a11ae-5694-4381-98ca-a2f4e81af2b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5e:f4:c8:a2:83:50:14:a8:43:ad:1f:2c:1f: 8e:8f:d7:fb:80:bd:4e:2b:8e:65:26:12:9d:e4:ed: 33:64:17:1b:16:cc:e5:f2:1a:30:ad:4a:4a:c6:2a: fa:b8:d0:78:d4:90:c7:05:b7:94:ff:85:f0:cd:d1: 86:8b:9f:8a:3c:0d:6c:db:eb:55:03:6b:a4:b4:87: a4:8b:47:3b:50:21:b2:b8:89:42:37:b2:5b:ae:12: ff:00:1d:24:ba:13:7e:a8:3f:68:31:d6:d3:fb:53: 52:62:f9:bf:b5:f0:bc:9b:4f:f0:a1:31:a4:a4:5e: 55:f4:57:c8:ef:7b:83:8c:20:6c:bf:3b:03:80:ad: a4:89:f7:97:1b:0a:a4:7a:9e:8d:55:dc:57:ff:7c: 1a:78:c9:fe:b5:38:95:49:48:66:13:ab:8b:e0:45: a1:44:eb:15:b2:fb:99:d9:8c:9c:c2:17:d3:f8:ea: d2:4b:81:86:d8:a9:e6:0a:5a:f9:34:e1:01:6f:41: d6:fc:85:86:a3:f4:ad:2c:42:b7:34:ec:80:f1:df: ac:fc:f2:c1:2a:6c:dd:e0:5e:92:75:eb:62:5a:ca: 74:25:f9:f7:59:1d:88:81:61:4f:97:4e:68:52:cc: 1b:48:70:f8:ad:7f:4b:42:41:02:a8:85:76:96:0c: 66:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5A:BF:BC:CE:E9:16:C8:F3:C7:18:B5:F2:18:FD:13:B0:0F:19:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8bded033-c145-3aad-bef9-ec1a1c913937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:75:2d:a4:2f:61:c9:b8:46:cd:be:2f:8b:1c:e8:9f:37:9a: 40:30:d6:01:52:b4:c1:e9:81:2e:70:df:2a:f0:fc:43:e1:49: 68:81:c3:dc:df:1a:8e:58:2a:b7:8e:09:1a:6a:12:2d:6d:45: b0:c5:79:1e:d6:96:2a:cc:aa:2a:fa:33:08:c4:9b:ab:84:5f: e0:fd:d0:00:6b:e1:77:cd:12:55:f7:fc:6f:d6:ec:92:58:75: 00:bc:79:ec:39:9b:2f:26:67:55:eb:f2:0e:48:6c:76:0c:cb: a2:c7:94:19:d0:5d:e7:e8:ed:5e:16:a5:1f:4a:95:df:a5:ea: eb:0f:a1:be:00:de:59:79:5c:a1:e8:54:e6:e2:d4:53:d7:0f: d3:45:b6:d9:70:da:1d:3f:c0:ef:ed:fd:a5:36:0e:17:ee:8e: b2:09:51:74:5f:68:38:36:f4:0a:d1:c1:7e:f7:9a:ae:5b:d0: 55:c2:f7:f5:53:e7:88:86:eb:80:15:10:15:e2:6f:23:02:59: fb:ff:ca:a7:81:82:db:e8:e5:4c:cd:a0:f3:14:02:d4:06:4f: 65:e6:03:c7:fa:d4:42:a1:b3:6b:4f:7e:1f:50:b8:6f:66:29: c8:0c:0d:8e:a5:ac:41:9b:43:92:f5:dd:11:a7:a1:b4:f2:0d: 6b:68:6a:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomirm0RU7dW5Vct8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk YTgyYTExYWUtNTY5NC00MzgxLTk4Y2EtYTJmNGU4MWFmMmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV70yKKDUBSoQ60fLB+Oj9f7gL1OK45lJhKd 5O0zZBcbFszl8howrUpKxir6uNB41JDHBbeU/4XwzdGGi5+KPA1s2+tVA2uktIek i0c7UCGyuIlCN7JbrhL/AB0kuhN+qD9oMdbT+1NSYvm/tfC8m0/woTGkpF5V9FfI 73uDjCBsvzsDgK2kifeXGwqkep6NVdxX/3waeMn+tTiVSUhmE6uL4EWhROsVsvuZ 2YycwhfT+OrSS4GG2KnmClr5NOEBb0HW/IWGo/StLEK3NOyA8d+s/PLBKmzd4F6S detiWsp0Jfn3WR2IgWFPl05oUswbSHD4rX9LQkECqIV2lgxmVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhav7zO6RbI88cYtfIY/ROwDxkXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOGJkZWQwMzMtYzE0NS0z YWFkLWJlZjktZWMxYTFjOTEzOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIl1LaQvYcm4Rs2+L4sc6J83mkAw1gFStMHpgS5w3yrw/EPhSWiBw9zf Go5YKreOCRpqEi1tRbDFeR7WlirMqir6MwjEm6uEX+D90ABr4XfNElX3/G/W7JJY dQC8eew5my8mZ1Xr8g5IbHYMy6LHlBnQXefo7V4WpR9Kld+l6usPob4A3ll5XKHo VObi1FPXD9NFttlw2h0/wO/t/aU2DhfujrIJUXRfaDg29ArRwX73mq5b0FXC9/VT 54iG64AVEBXibyMCWfv/yqeBgtvo5UzNoPMUAtQGT2XmA8f61EKhs2tPfh9QuG9m KcgMDY6lrEGbQ5L13RGnobTyDWtoakc= -----END CERTIFICATE-----Generated at Mon Jun 16 05:30:04 2025 by rpki-client