$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa File: baa6a648-7ab8-39bf-8357-a787b0346893.roa (raw, json) Hash identifier: yDTKMEp9vtrqxcXBPti16bh1Ci/GscHRiasT5oIhOIk= Subject key identifier: 81:81:88:84:24:56:B8:3F:77:F7:80:A3:88:51:8A:13:33:DE:D8:CE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A2ABAE1269DF674551EA73D80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 3223 IP address blocks: 172.94.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:e1:26:9d:f6:74:55:1e:a7:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=74939b2a-7412-4c00-972b-5516da7e6a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1c:f2:94:11:c1:86:40:3e:b5:6e:65:25:26: a5:86:bf:81:bb:70:3f:d8:de:ff:ff:e4:a5:dd:8f: b5:f4:a2:46:9d:e1:f1:e8:d6:89:93:c8:28:93:96: 89:0d:6d:9f:ba:34:46:e6:db:df:56:84:47:37:dd: ab:59:be:f1:35:6f:c8:75:cd:2a:64:d2:96:65:a0: 00:50:2e:6b:6b:2d:30:49:d9:ef:14:ec:71:b9:79: 48:55:59:4a:99:3b:f3:51:a6:1c:cd:48:f0:bb:70: 1c:1b:bd:0b:9c:2c:a1:66:6e:42:5e:f7:f6:93:9f: f3:cb:bb:73:ce:f5:db:07:d3:a4:53:9a:d4:58:4e: 82:4b:52:db:5f:9a:74:4b:72:b4:c6:71:b9:82:dd: 04:20:88:ad:be:02:f2:0a:49:6a:bf:11:79:40:8d: ca:34:50:c7:2b:33:1a:a7:92:c4:c6:3d:19:69:b6: 86:5e:cd:52:16:c0:4d:57:fe:9a:71:3a:21:29:36: 7b:fc:81:55:cb:f8:93:b6:e9:52:c8:f7:d3:fa:15: 93:6d:66:7e:87:57:fa:55:1d:6c:68:44:67:af:a2: b1:23:fc:ea:66:80:37:bb:4c:86:ac:9f:ae:bb:f8: ea:03:47:98:83:63:8c:3f:ef:f0:b7:87:89:9b:80: 6a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:81:88:84:24:56:B8:3F:77:F7:80:A3:88:51:8A:13:33:DE:D8:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/baa6a648-7ab8-39bf-8357-a787b0346893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:72:cd:a9:0e:08:6d:1a:ee:c5:44:92:c9:c6:69:b8:a1:82: a2:81:d5:e5:56:97:4b:a3:76:17:0a:d3:c1:45:4a:d7:c4:ff: 4b:01:bd:10:7f:a3:bc:d3:ca:f6:00:f1:fa:95:81:33:3e:2e: a0:14:40:08:b2:5b:bd:1b:26:48:12:79:37:45:4a:c8:80:7b: 63:bf:ff:9b:53:bf:95:00:ce:b7:bf:b9:53:b8:07:06:78:64: 78:1d:50:1c:83:e3:95:ff:0f:85:12:7a:91:86:10:7c:c0:3e: c0:71:5f:21:ca:64:f9:9f:5b:7a:70:f6:3d:42:01:80:82:5e: 8c:e1:55:44:2e:85:76:3a:72:f6:4f:55:82:1e:c3:77:32:66: c6:34:9f:af:72:9f:26:48:20:9f:aa:be:67:32:a2:80:7d:54: 34:15:e4:09:53:63:ef:20:25:3b:64:af:a5:9d:f4:e8:88:7c: 21:c2:c2:fd:14:87:5f:e0:6f:ca:3f:69:03:46:30:f7:a5:ea: 50:73:a9:ea:47:d8:9f:ba:ff:4c:47:07:5b:a7:e6:1d:92:e4: 6c:b8:50:38:99:92:f5:66:43:63:3f:fb:c0:f4:ef:09:13:14: b2:0f:b8:57:99:aa:eb:27:2e:97:b2:93:e2:09:4c:11:4b:80: 2b:07:14:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquuEmnfZ0VR6nPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk NzQ5MzliMmEtNzQxMi00YzAwLTk3MmItNTUxNmRhN2U2YTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBzylBHBhkA+tW5lJSalhr+Bu3A/2N7//+Sl 3Y+19KJGneHx6NaJk8gok5aJDW2fujRG5tvfVoRHN92rWb7xNW/Idc0qZNKWZaAA UC5ray0wSdnvFOxxuXlIVVlKmTvzUaYczUjwu3AcG70LnCyhZm5CXvf2k5/zy7tz zvXbB9OkU5rUWE6CS1LbX5p0S3K0xnG5gt0EIIitvgLyCklqvxF5QI3KNFDHKzMa p5LExj0ZabaGXs1SFsBNV/6acTohKTZ7/IFVy/iTtulSyPfT+hWTbWZ+h1f6VR1s aERnr6KxI/zqZoA3u0yGrJ+uu/jqA0eYg2OMP+/wt4eJm4BqUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGBiIQkVrg/d/eAo4hRihMz3tjOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmFhNmE2NDgtN2FiOC0z OWJmLTgzNTctYTc4N2IwMzQ2ODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClyzakOCG0a7sVEksnGabihgqKB1eVWl0ujdhcK08FFStfE/0sBvRB/ o7zTyvYA8fqVgTM+LqAUQAiyW70bJkgSeTdFSsiAe2O//5tTv5UAzre/uVO4BwZ4 ZHgdUByD45X/D4USepGGEHzAPsBxXyHKZPmfW3pw9j1CAYCCXozhVUQuhXY6cvZP VYIew3cyZsY0n69ynyZIIJ+qvmcyooB9VDQV5AlTY+8gJTtkr6Wd9OiIfCHCwv0U h1/gb8o/aQNGMPel6lBzqepH2J+6/0xHB1un5h2S5Gy4UDiZkvVmQ2M/+8D07wkT FLIPuFeZqusnLpeyk+IJTBFLgCsHFDI= -----END CERTIFICATE-----Generated at Sun Jun 15 06:07:19 2025 by rpki-client