$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/adf4984c-b224-31f5-925b-915c2ada3b74.roa File: adf4984c-b224-31f5-925b-915c2ada3b74.roa (raw, json) Hash identifier: 3lgDdzyxc16bsH94/rZUTmLR6F7TMiXf63B2enPVByk= Subject key identifier: 62:5E:AF:60:E1:73:64:6F:12:F5:4D:11:17:15:2E:DF:05:F3:B1:61 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A2ABADB87E2F31058238ADF80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/adf4984c-b224-31f5-925b-915c2ada3b74.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 3223 IP address blocks: 172.94.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:db:87:e2:f3:10:58:23:8a:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=66e91a55-161a-4523-a444-7ca2aaf2cb75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b4:1e:58:7d:aa:be:42:5b:64:89:5a:84:0a: c3:43:87:b7:66:23:d6:78:f9:4a:d6:7b:af:e4:e7: 37:49:04:79:69:ac:4e:37:9f:d6:8f:c0:cf:1c:56: c5:c1:2c:4d:60:da:8a:23:bd:8f:d9:49:9d:e7:64: cf:d3:a3:90:bb:86:e7:f2:f0:61:e6:a8:6a:d1:85: ba:f2:a8:4c:33:2b:92:e6:f5:ff:d9:54:0f:cc:b9: c5:06:b8:81:a2:be:42:4c:dd:14:98:76:59:a5:de: 9a:c9:51:93:84:d4:68:04:7e:77:fb:b5:78:9d:34: af:bb:8c:a8:f6:04:43:6f:c8:78:ba:0c:aa:a5:08: 64:0f:0c:c1:df:4d:c1:87:db:8f:c0:e3:57:7d:50: bf:8a:5d:b2:71:d9:d1:b2:0b:64:e5:00:62:00:f6: fb:93:f7:c2:66:d2:79:e1:32:1f:a7:b6:5c:a3:2c: 35:76:d9:a7:c5:ae:1f:06:4e:90:e5:4b:83:fb:49: 6f:50:1c:46:74:60:30:75:70:e5:f9:f7:7e:fe:34: 1b:c8:c6:cd:36:b2:40:eb:df:fa:36:86:12:49:61: 2e:1e:14:b7:0e:bb:d0:e3:ea:8c:42:64:8f:96:4c: 3f:60:13:76:a0:c6:de:53:ba:fb:fd:d4:d8:a5:cf: 9c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5E:AF:60:E1:73:64:6F:12:F5:4D:11:17:15:2E:DF:05:F3:B1:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/adf4984c-b224-31f5-925b-915c2ada3b74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:f3:78:47:26:57:3c:13:04:92:87:3a:ac:71:79:5a:d0:84: c2:9b:77:86:48:b7:49:6e:50:f2:fb:fb:f9:c1:45:c3:0b:81: c8:52:25:ee:e9:48:9a:ab:17:f9:00:eb:b7:a3:50:eb:63:c8: 08:34:5a:92:29:90:4d:9d:af:ca:ce:d4:5e:87:b7:40:5e:89: 9a:5c:a6:2e:76:af:08:d9:82:60:ec:4c:2c:b2:9e:f8:8c:29: 81:7a:3e:c9:67:29:c0:92:c7:1e:97:95:c9:f1:18:e3:1e:02: 1b:23:75:24:40:65:36:e4:4a:88:09:66:c9:0d:35:0d:56:81: 2d:d2:1b:02:5f:f4:eb:0d:9c:b1:4b:89:93:35:65:29:5a:f0: 5f:2a:e2:4e:a3:be:c2:c2:cb:6e:0f:6c:7e:a3:de:91:e8:4f: 43:57:41:61:85:40:d6:0b:90:8b:62:68:e0:e3:a2:7f:f3:25: ec:4b:31:d7:51:1a:bc:87:27:3b:ee:bf:5b:82:3d:39:4b:26: 16:72:52:38:f7:6c:46:f9:15:ca:83:b2:93:2d:8a:21:0b:12: ce:63:55:30:14:84:e4:05:73:d2:e2:e2:41:96:3b:df:53:4a: 4a:1e:84:05:1c:31:57:19:a2:4f:7a:4f:7d:b1:78:23:64:ea: 26:fe:2f:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqutuH4vMQWCOK34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk NjZlOTFhNTUtMTYxYS00NTIzLWE0NDQtN2NhMmFhZjJjYjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLQeWH2qvkJbZIlahArDQ4e3ZiPWePlK1nuv 5Oc3SQR5aaxON5/Wj8DPHFbFwSxNYNqKI72P2Umd52TP06OQu4bn8vBh5qhq0YW6 8qhMMyuS5vX/2VQPzLnFBriBor5CTN0UmHZZpd6ayVGThNRoBH53+7V4nTSvu4yo 9gRDb8h4ugyqpQhkDwzB303Bh9uPwONXfVC/il2ycdnRsgtk5QBiAPb7k/fCZtJ5 4TIfp7Zcoyw1dtmnxa4fBk6Q5UuD+0lvUBxGdGAwdXDl+fd+/jQbyMbNNrJA69/6 NoYSSWEuHhS3DrvQ4+qMQmSPlkw/YBN2oMbeU7r7/dTYpc+cbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJer2Dhc2RvEvVNERcVLt8F87FhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWRmNDk4NGMtYjIyNC0z MWY1LTkyNWItOTE1YzJhZGEzYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/zeEcmVzwTBJKHOqxxeVrQhMKbd4ZIt0luUPL7+/nBRcMLgchSJe7p SJqrF/kA67ejUOtjyAg0WpIpkE2dr8rO1F6Ht0BeiZpcpi52rwjZgmDsTCyynviM KYF6PslnKcCSxx6XlcnxGOMeAhsjdSRAZTbkSogJZskNNQ1WgS3SGwJf9OsNnLFL iZM1ZSla8F8q4k6jvsLCy24PbH6j3pHoT0NXQWGFQNYLkItiaODjon/zJexLMddR GryHJzvuv1uCPTlLJhZyUjj3bEb5FcqDspMtiiELEs5jVTAUhOQFc9Li4kGWO99T SkoehAUcMVcZok96T32xeCNk6ib+L6c= -----END CERTIFICATE-----Generated at Sun Jun 15 05:26:32 2025 by rpki-client