$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/90ab5ed4-8bcc-3fa7-bad5-6d531fbff5c0.roa File: 90ab5ed4-8bcc-3fa7-bad5-6d531fbff5c0.roa (raw, json) Hash identifier: 1BUmQvCW+Gbzz20VjTOsBB2Iy/gUZlPIQ29sS9niS4U= Subject key identifier: 0E:07:6B:7B:A0:50:93:F3:1A:97:F4:4A:C9:BA:23:74:34:D4:A0:A1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A03A53A3D66CBB2D52C86E340 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/90ab5ed4-8bcc-3fa7-bad5-6d531fbff5c0.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 36352 IP address blocks: 172.94.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:3a:3d:66:cb:b2:d5:2c:86:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=3e457b35-8a67-4667-a6cb-1bacf7432c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3d:3e:35:bb:6e:4b:87:93:82:e4:df:96:9a: 41:dc:b0:46:9b:c7:3c:6b:e6:34:20:c0:dd:59:3d: 7a:9c:a4:31:09:e2:a9:15:e2:6b:ce:75:ae:2e:3d: 6e:9f:48:69:07:9c:1c:c6:2a:d3:78:e5:82:35:47: 99:75:58:1d:d3:37:2a:7f:d7:88:ba:b6:1a:29:36: cd:c0:6c:b5:e5:67:2c:2e:79:14:c7:73:64:9e:80: 2b:55:b8:f0:d1:bf:4c:94:df:84:f5:53:1c:66:eb: 58:b7:2a:83:69:6d:07:5b:fd:80:05:32:59:fb:8c: ae:9a:bb:4b:c3:47:ed:46:89:39:c4:ec:55:f9:2d: f5:e2:04:44:49:3a:e8:ad:1c:cf:61:ab:73:6b:e5: 17:b2:72:73:18:65:10:66:70:61:18:43:40:0d:a1: f0:5f:4f:e3:02:3b:93:94:8b:44:57:1d:dc:2a:24: 7b:a1:d3:5d:e3:4b:c8:f8:e2:75:db:80:10:c0:5b: bf:b1:bf:d4:cd:d5:c0:2d:dc:00:b4:f3:93:f8:7e: 74:87:37:ba:9e:13:81:f9:2d:de:26:0c:d9:f7:8a: 09:7f:1f:b9:51:d4:8d:50:65:de:20:a1:84:9a:45: e1:a0:1c:a1:05:6a:ff:0d:6d:f7:2d:fd:9d:20:a4: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:07:6B:7B:A0:50:93:F3:1A:97:F4:4A:C9:BA:23:74:34:D4:A0:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/90ab5ed4-8bcc-3fa7-bad5-6d531fbff5c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:89:2c:18:64:5e:1c:d9:60:8b:91:1a:47:af:1d:87:f8:64: 52:96:43:2b:e5:f4:7d:3e:0c:80:b7:39:1b:29:36:2d:f4:ab: c6:b2:17:55:2b:08:5b:d2:53:a9:7c:10:75:f4:d7:01:6e:45: 9f:7d:42:07:4b:ca:1a:ed:70:07:a7:87:ca:fa:18:a5:8e:cb: ea:f0:07:22:c8:13:48:8f:1b:ad:a5:f8:d4:9a:2d:0b:60:b0: bf:8a:ca:33:c4:9c:f7:01:21:2a:35:e0:e5:23:3c:cd:26:82: 55:9f:d4:c4:0a:79:c3:1b:1e:05:06:91:a1:5f:c1:2c:16:05: b7:44:e8:b1:9a:f7:c0:1e:c7:0d:f1:28:d0:91:2e:c2:ad:d9: 98:3c:8b:74:66:b9:42:9f:db:73:0f:ea:16:93:a7:47:ad:54: 30:92:7d:ed:72:c7:d7:26:a7:f4:0f:62:75:af:6f:4a:1e:98: dc:2f:5a:0b:96:88:2f:c8:b8:94:0e:75:86:f3:7a:0c:8b:2a: 9a:15:0c:23:68:bf:b3:07:af:33:5d:c7:d8:8b:ce:67:5f:44: 14:fa:b1:14:5e:cb:98:6f:b5:ad:5d:92:b1:0c:9f:be:a7:d3: c4:4f:3b:92:58:32:c6:d8:cc:d0:a2:61:14:0f:ad:22:8e:c0: ed:05:3f:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpTo9Zsuy1SyG40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk M2U0NTdiMzUtOGE2Ny00NjY3LWE2Y2ItMWJhY2Y3NDMyYzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT0+NbtuS4eTguTflppB3LBGm8c8a+Y0IMDd WT16nKQxCeKpFeJrznWuLj1un0hpB5wcxirTeOWCNUeZdVgd0zcqf9eIurYaKTbN wGy15WcsLnkUx3NknoArVbjw0b9MlN+E9VMcZutYtyqDaW0HW/2ABTJZ+4yumrtL w0ftRok5xOxV+S314gRESTrorRzPYatza+UXsnJzGGUQZnBhGENADaHwX0/jAjuT lItEVx3cKiR7odNd40vI+OJ124AQwFu/sb/UzdXALdwAtPOT+H50hze6nhOB+S3e JgzZ94oJfx+5UdSNUGXeIKGEmkXhoByhBWr/DW33Lf2dIKTnEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4Ha3ugUJPzGpf0Ssm6I3Q01KChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTBhYjVlZDQtOGJjYy0z ZmE3LWJhZDUtNmQ1MzFmYmZmNWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF48MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2JLBhkXhzZYIuRGkevHYf4ZFKWQyvl9H0+DIC3ORspNi30q8ayF1Ur CFvSU6l8EHX01wFuRZ99QgdLyhrtcAenh8r6GKWOy+rwByLIE0iPG62l+NSaLQtg sL+KyjPEnPcBISo14OUjPM0mglWf1MQKecMbHgUGkaFfwSwWBbdE6LGa98Aexw3x KNCRLsKt2Zg8i3RmuUKf23MP6haTp0etVDCSfe1yx9cmp/QPYnWvb0oemNwvWguW iC/IuJQOdYbzegyLKpoVDCNov7MHrzNdx9iLzmdfRBT6sRRey5hvta1dkrEMn76n 08RPO5JYMsbYzNCiYRQPrSKOwO0FP/Y= -----END CERTIFICATE-----Generated at Sun Jun 15 05:00:08 2025 by rpki-client