$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0db4c19-9c7b-3357-a679-a1fc2c19717a.roa File: a0db4c19-9c7b-3357-a679-a1fc2c19717a.roa (raw, json) Hash identifier: dPzyrofaHksQFw1c2j6FZmDIbr6FPBdpB/F4xODOnUo= Subject key identifier: 92:40:DD:23:88:CC:16:A4:14:04:59:29:10:25:B5:DE:E9:56:16:C3 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A2D76B6478CAF702AF6289BE0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0db4c19-9c7b-3357-a679-a1fc2c19717a.roa Signing time: Fri 13 Jun 2025 12:31:20 +0000 ROA not before: Fri 13 Jun 2025 12:31:20 +0000 ROA not after: Thu 11 Sep 2025 12:31:20 +0000 asID: 329007 IP address blocks: 172.94.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:76:b6:47:8c:af:70:2a:f6:28:9b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 13 12:31:20 2025 GMT Not After : Sep 11 12:31:20 2025 GMT Subject: CN=d17a4c89-9623-4693-82fd-d9d8144b9456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:03:76:c8:4f:2b:1b:9e:0a:02:73:4c:d8:62: 96:24:3c:52:e3:08:d0:71:13:23:50:6c:55:6b:a1: 91:5d:85:bb:94:7b:a1:97:d0:e3:f0:21:1f:be:15: f1:75:74:c4:07:9f:70:35:bd:5a:46:ab:81:06:3f: 15:c8:b6:0f:2a:08:45:1d:62:f9:a2:07:1d:89:fd: f7:68:74:0b:19:2b:a6:b2:24:c0:3b:30:c6:36:d4: 72:99:d0:b3:26:fa:79:4f:86:9d:4f:52:1d:8a:c2: 0b:95:4a:73:0d:7b:b7:97:3f:ab:84:1a:26:8f:af: e2:5d:6f:28:b0:60:d4:2f:f8:dd:0b:bc:10:52:b5: ba:3c:92:c4:22:df:1f:bb:1c:3c:88:d2:6d:2a:5e: b7:21:5a:84:70:87:89:31:33:01:19:9a:c6:bf:cb: f9:b6:91:bd:2e:33:ee:9f:0c:3a:78:e8:74:c6:29: 5d:27:57:af:a1:b5:6e:c8:bd:67:95:3d:7e:cd:0d: 42:86:4c:53:a8:25:94:d7:14:6a:36:5f:aa:f2:4a: 24:e4:98:9f:60:78:c6:0c:8e:b0:f8:55:39:58:50: 5f:8b:e7:ed:15:63:eb:19:b1:c0:a5:97:7d:60:97: f5:36:c8:3d:f6:31:e2:dc:42:71:47:52:ed:ec:2b: 2c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:40:DD:23:88:CC:16:A4:14:04:59:29:10:25:B5:DE:E9:56:16:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0db4c19-9c7b-3357-a679-a1fc2c19717a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:bc:a8:59:ca:02:ce:f4:b4:ec:75:ce:00:b8:b8:2f:fa:8a: cd:76:a0:a5:20:0a:4e:0f:fd:bc:66:64:75:3a:2b:18:9c:ce: 0d:bc:d0:0a:35:d7:6e:bb:01:27:9e:5d:53:4e:53:03:f1:69: b2:85:ad:83:7f:d4:0f:17:7f:05:6e:4a:6d:66:70:0f:ae:77: 36:96:25:d3:09:5d:7c:77:a5:29:7c:e9:c7:be:a2:f5:5f:f6: 0c:34:35:2c:b9:9c:eb:59:e8:a4:4c:c5:bc:8f:38:d9:37:b8: 1c:64:8d:ab:5d:92:ed:57:4a:b4:e1:c1:92:13:98:d7:df:20: 98:4c:8f:9b:eb:ac:c0:73:0c:3e:d0:36:c7:bb:9b:e5:ad:36: e3:e9:60:a1:99:3a:f8:79:ec:48:14:8e:4e:09:7a:ca:2d:50: ef:bf:0a:d7:ea:1b:cb:d1:84:fc:46:f9:fa:b6:2d:2a:be:0b: df:ab:a3:e3:cd:e2:47:0d:95:d6:7a:62:bf:a2:b8:f0:e6:a5: b7:dd:e2:5d:62:0b:42:7f:fb:8d:fd:5a:80:92:44:15:00:d3: 9c:1d:42:68:e2:8d:93:d1:5c:99:f3:03:2e:29:a0:c4:49:84: 5b:5a:ba:d7:b5:15:3a:14:19:3f:35:9e:ec:56:b0:e7:3f:e2: d2:33:45:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEotdrZHjK9wKvYom+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxMzEyMzEyMFoXDTI1MDkxMTEyMzEyMFowLzEtMCsGA1UEAxMk ZDE3YTRjODktOTYyMy00NjkzLTgyZmQtZDlkODE0NGI5NDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgN2yE8rG54KAnNM2GKWJDxS4wjQcRMjUGxV a6GRXYW7lHuhl9Dj8CEfvhXxdXTEB59wNb1aRquBBj8VyLYPKghFHWL5ogcdif33 aHQLGSumsiTAOzDGNtRymdCzJvp5T4adT1IdisILlUpzDXu3lz+rhBomj6/iXW8o sGDUL/jdC7wQUrW6PJLEIt8fuxw8iNJtKl63IVqEcIeJMTMBGZrGv8v5tpG9LjPu nww6eOh0xildJ1evobVuyL1nlT1+zQ1ChkxTqCWU1xRqNl+q8kok5JifYHjGDI6w +FU5WFBfi+ftFWPrGbHApZd9YJf1Nsg99jHi3EJxR1Lt7CsstwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJA3SOIzBakFARZKRAltd7pVhbDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTBkYjRjMTktOWM3Yi0z MzU3LWE2NzktYTFmYzJjMTk3MTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy8qFnKAs70tOx1zgC4uC/6is12oKUgCk4P/bxmZHU6Kxiczg280Ao1 1267ASeeXVNOUwPxabKFrYN/1A8XfwVuSm1mcA+udzaWJdMJXXx3pSl86ce+ovVf 9gw0NSy5nOtZ6KRMxbyPONk3uBxkjatdku1XSrThwZITmNffIJhMj5vrrMBzDD7Q Nse7m+WtNuPpYKGZOvh57EgUjk4JesotUO+/CtfqG8vRhPxG+fq2LSq+C9+ro+PN 4kcNldZ6Yr+iuPDmpbfd4l1iC0J/+439WoCSRBUA05wdQmjijZPRXJnzAy4poMRJ hFtaute1FToUGT81nuxWsOc/4tIzRSs= -----END CERTIFICATE-----Generated at Sun Jun 15 21:58:16 2025 by rpki-client