$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9b8666bf-0d99-3c13-8f9f-d752ade285e8.roa File: 9b8666bf-0d99-3c13-8f9f-d752ade285e8.roa (raw, json) Hash identifier: L9JYvyWQ7dA+OyPkRrNOva2HvUyVRFqckUbB0uKHZw4= Subject key identifier: 0E:6D:CD:8E:85:E2:61:99:00:DA:00:F8:FB:B6:49:73:31:EF:39:5E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849D6FA4CF08545D5616E3E936C Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9b8666bf-0d99-3c13-8f9f-d752ade285e8.roa Signing time: Tue 13 May 2025 13:01:02 +0000 ROA not before: Tue 13 May 2025 13:01:02 +0000 ROA not after: Mon 11 Aug 2025 13:01:02 +0000 asID: 60117 IP address blocks: 172.94.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:fa:4c:f0:85:45:d5:61:6e:3e:93:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 13 13:01:02 2025 GMT Not After : Aug 11 13:01:02 2025 GMT Subject: CN=357981d5-d631-4ee9-ba17-18383b63ac9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c2:28:82:cc:25:51:d7:9b:ef:84:bc:7d:de: 44:19:d2:4e:c8:28:4d:a5:86:f1:13:38:c8:96:21: 36:1f:96:48:15:a4:15:72:76:88:e3:81:b6:f4:82: 20:a0:cc:48:06:af:9f:6c:d0:7c:e4:0d:64:63:96: fa:05:0f:8a:7f:41:5f:b2:f6:4f:15:d0:18:d9:34: cd:1f:0c:ae:98:2b:b2:0a:69:fe:e3:7d:eb:c2:c9: 02:bf:da:a3:00:b8:60:3f:f8:f7:57:65:16:35:fb: bf:4e:5f:49:0a:e7:61:3d:68:87:cd:da:32:56:32: 46:22:61:fc:64:ca:4f:13:58:7c:28:aa:2a:fb:02: 66:67:02:a5:3e:94:6e:6c:31:f9:ae:ab:cb:85:da: 6d:31:c4:a0:f5:b2:e7:11:f5:7d:70:5d:f8:dc:9c: 0d:66:2d:f2:83:45:db:6b:df:89:d2:46:ad:72:cc: 9b:ed:b0:ac:80:28:0f:15:a1:74:f6:95:0c:15:e0: 83:20:9b:19:80:09:b1:b3:04:22:12:ab:87:de:4b: 61:29:81:25:1f:d1:36:10:c6:ed:a1:fd:c2:49:97: 16:d6:52:74:0a:c9:e8:7a:29:fd:a7:e7:54:2a:64: ca:02:07:ec:12:84:a9:57:87:3f:c2:5d:65:cf:43: b5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6D:CD:8E:85:E2:61:99:00:DA:00:F8:FB:B6:49:73:31:EF:39:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9b8666bf-0d99-3c13-8f9f-d752ade285e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:51:34:16:bf:7d:8d:32:3b:27:5e:85:a8:d2:7f:c8:9d:90: ad:f6:36:08:48:15:ca:4a:67:4a:29:88:b5:e7:b0:0d:ea:2b: 9c:f5:f0:fc:5d:8b:a3:7c:68:70:60:bc:57:73:f4:c9:ed:2f: d7:48:95:36:a5:aa:5e:f1:71:30:85:50:d8:78:21:29:cc:59: 6e:41:f8:aa:49:c6:78:b4:f8:ea:79:ae:40:b6:c7:cc:44:d7: 26:5a:ab:9f:c2:31:f5:fc:43:e2:bf:ba:fb:3a:49:76:ce:1c: 80:f3:bf:98:82:f2:a2:67:85:93:b2:17:29:ef:5a:89:d8:04: b3:c8:35:07:c8:09:69:84:ce:81:1f:b0:13:28:5c:65:04:93: 71:bb:8a:69:2c:1b:94:6a:a8:6c:56:16:35:ac:b3:da:f7:91: 46:65:53:1a:69:2f:c8:2b:74:a6:b9:85:0a:16:60:e5:c9:d0: 03:38:95:d8:99:56:28:09:93:79:e5:b1:b9:cf:f4:d2:7d:f6: ec:4e:4c:ef:c7:10:8f:b4:53:68:67:7e:b9:f8:04:3d:36:94: b5:23:d5:db:1d:15:16:1d:77:69:a7:26:d6:a5:be:58:65:8c: fa:61:83:cb:47:81:e7:8b:2a:08:39:21:be:92:57:a3:a1:82: 56:9d:7b:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnW+kzwhUXVYW4+k2wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUxMzEzMDEwMloXDTI1MDgxMTEzMDEwMlowLzEtMCsGA1UEAxMk MzU3OTgxZDUtZDYzMS00ZWU5LWJhMTctMTgzODNiNjNhYzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMIogswlUdeb74S8fd5EGdJOyChNpYbxEzjI liE2H5ZIFaQVcnaI44G29IIgoMxIBq+fbNB85A1kY5b6BQ+Kf0FfsvZPFdAY2TTN HwyumCuyCmn+433rwskCv9qjALhgP/j3V2UWNfu/Tl9JCudhPWiHzdoyVjJGImH8 ZMpPE1h8KKoq+wJmZwKlPpRubDH5rqvLhdptMcSg9bLnEfV9cF343JwNZi3yg0Xb a9+J0katcsyb7bCsgCgPFaF09pUMFeCDIJsZgAmxswQiEquH3kthKYElH9E2EMbt of3CSZcW1lJ0Csnoein9p+dUKmTKAgfsEoSpV4c/wl1lz0O12wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5tzY6F4mGZANoA+Pu2SXMx7zleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWI4NjY2YmYtMGQ5OS0z YzEzLThmOWYtZDc1MmFkZTI4NWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5RNBa/fY0yOydehajSf8idkK32NghIFcpKZ0opiLXnsA3qK5z18Pxd i6N8aHBgvFdz9MntL9dIlTalql7xcTCFUNh4ISnMWW5B+KpJxni0+Op5rkC2x8xE 1yZaq5/CMfX8Q+K/uvs6SXbOHIDzv5iC8qJnhZOyFynvWonYBLPINQfICWmEzoEf sBMoXGUEk3G7imksG5RqqGxWFjWss9r3kUZlUxppL8grdKa5hQoWYOXJ0AM4ldiZ VigJk3nlsbnP9NJ99uxOTO/HEI+0U2hnfrn4BD02lLUj1dsdFRYdd2mnJtalvlhl jPphg8tHgeeLKgg5Ib6SV6OhgladewA= -----END CERTIFICATE-----Generated at Sun Jun 15 05:33:21 2025 by rpki-client