$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d0876aa-9c6d-3355-9dea-0862c0e2b013.roa File: 9d0876aa-9c6d-3355-9dea-0862c0e2b013.roa (raw, json) Hash identifier: X5Cfk8S73WlBpGrNGeXL1wMQvprmkiFe1/w6gNiJJXw= Subject key identifier: AB:C2:68:90:E5:97:B8:E7:8A:37:C4:36:34:1C:A9:C0:E1:6B:79:03 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A1465785EF49F656CB0A6E400 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d0876aa-9c6d-3355-9dea-0862c0e2b013.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 9009 IP address blocks: 172.94.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:78:5e:f4:9f:65:6c:b0:a6:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=873d6093-21de-4e7d-9311-b7fa7e9a6a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e6:96:bb:b1:69:46:e6:fa:8e:64:ed:ac:ac: 1a:e9:a8:1d:0d:dc:48:3d:82:10:da:c9:7c:d2:1e: 10:7c:23:59:bd:ec:65:cc:10:22:39:21:a9:54:9f: b4:a5:bd:83:de:79:59:2e:ff:63:f6:be:bb:4f:2d: 1c:45:48:06:f6:61:e1:c4:96:21:b7:39:ad:d3:3f: 25:69:69:d5:67:5e:dd:f4:d1:24:84:ad:54:47:9d: 0e:9b:e0:a6:b6:97:38:a2:2e:df:e1:1b:7a:d8:17: 7b:ce:7b:31:14:a0:fa:0b:3d:f5:e0:d2:ea:c6:98: 83:bd:32:31:b7:0f:9a:cf:db:86:93:20:51:b9:f5: 64:41:d8:4b:a3:e1:10:ee:c5:16:4c:2e:03:f3:48: 87:43:60:27:eb:c8:c8:0d:42:b2:94:2e:3d:88:79: e9:25:fb:9f:40:74:81:d8:5a:95:4c:ce:06:77:80: 6c:47:65:d2:fd:70:75:dc:ec:16:0a:bf:c0:77:55: 95:65:52:10:66:91:52:74:0a:9f:44:02:bb:63:98: 8d:05:51:21:3c:7f:86:bb:dc:cb:2b:f8:09:7f:99: 34:fa:0d:26:a2:8d:10:59:d7:aa:f3:2e:4c:3c:45: a7:89:6d:d8:5e:b4:69:61:38:05:dc:1a:94:7d:c4: fa:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C2:68:90:E5:97:B8:E7:8A:37:C4:36:34:1C:A9:C0:E1:6B:79:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d0876aa-9c6d-3355-9dea-0862c0e2b013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c4:d6:2b:6c:e1:ed:28:cb:25:0e:cb:79:37:da:d4:d3:b8: eb:34:e0:ad:b6:84:f9:b6:44:20:29:56:a1:a6:ec:8d:3e:8f: db:e8:47:04:a9:bf:60:83:96:8f:6c:f9:48:d9:29:f2:cf:e5: 3e:f5:7f:d9:88:47:c2:38:1f:46:1f:47:5c:fa:f0:2a:17:9a: d7:d7:bc:45:a9:0f:5a:b8:74:c0:29:b9:25:27:bb:14:3d:41: 3e:e2:45:d5:2b:7b:30:fb:7a:37:b9:d6:d9:e3:a4:32:08:a9: 83:89:12:16:7d:79:ef:da:cf:87:fa:8a:5b:04:dd:66:e5:02: 1d:19:d5:a1:c9:59:1d:ba:6d:27:0a:02:dd:31:81:84:e8:b0: 82:b4:fe:5c:54:91:a2:a2:55:5b:5b:be:e2:09:b8:23:55:93: 18:28:42:f3:ed:ba:4f:04:09:f9:23:44:94:a1:17:23:46:46: 0b:8d:33:83:62:91:ff:93:1e:f3:93:e7:a9:ef:2f:79:00:3e: e1:bc:54:bd:93:5b:af:c4:b3:5f:ba:18:ff:46:93:22:8c:cd: 0d:8a:a9:2e:d0:c6:e1:4a:7f:b8:9d:73:7b:13:09:d2:40:6d: 3d:1c:c3:39:75:39:98:09:fa:5b:d6:77:b6:e8:72:0d:4c:e3: 04:ff:5b:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXhe9J9lbLCm5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ODczZDYwOTMtMjFkZS00ZTdkLTkzMTEtYjdmYTdlOWE2YTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOaWu7FpRub6jmTtrKwa6agdDdxIPYIQ2sl8 0h4QfCNZvexlzBAiOSGpVJ+0pb2D3nlZLv9j9r67Ty0cRUgG9mHhxJYhtzmt0z8l aWnVZ17d9NEkhK1UR50Om+Cmtpc4oi7f4Rt62Bd7znsxFKD6Cz314NLqxpiDvTIx tw+az9uGkyBRufVkQdhLo+EQ7sUWTC4D80iHQ2An68jIDUKylC49iHnpJfufQHSB 2FqVTM4Gd4BsR2XS/XB13OwWCr/Ad1WVZVIQZpFSdAqfRAK7Y5iNBVEhPH+Gu9zL K/gJf5k0+g0moo0QWdeq8y5MPEWniW3YXrRpYTgF3BqUfcT67QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvCaJDll7jnijfENjQcqcDha3kDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWQwODc2YWEtOWM2ZC0z MzU1LTlkZWEtMDg2MmMwZTJiMDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF59MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDE1its4e0oyyUOy3k32tTTuOs04K22hPm2RCApVqGm7I0+j9voRwSp v2CDlo9s+UjZKfLP5T71f9mIR8I4H0YfR1z68CoXmtfXvEWpD1q4dMApuSUnuxQ9 QT7iRdUrezD7eje51tnjpDIIqYOJEhZ9ee/az4f6ilsE3WblAh0Z1aHJWR26bScK At0xgYTosIK0/lxUkaKiVVtbvuIJuCNVkxgoQvPtuk8ECfkjRJShFyNGRguNM4Ni kf+THvOT56nvL3kAPuG8VL2TW6/Es1+6GP9GkyKMzQ2KqS7QxuFKf7idc3sTCdJA bT0cwzl1OZgJ+lvWd7bocg1M4wT/WyM= -----END CERTIFICATE-----Generated at Mon Jun 16 16:37:50 2025 by rpki-client