$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa File: 08340f91-5c11-3164-9641-ece7f93755e1.roa (raw, json) Hash identifier: 9jG6ndgMNtLRwcWGaXsXFUgx+WOdDUH86JsLi/G1CkI= Subject key identifier: 10:B0:E2:2B:7F:EB:8E:B3:88:F8:19:BC:AB:40:01:00:FF:88:D1:53 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A093AA0B89C7F15263E2F3280 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 9009 IP address blocks: 172.94.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:a0:b8:9c:7f:15:26:3e:2f:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=ef0c36a8-6300-4095-ad56-ac8db5929d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:42:c3:39:c1:ea:bd:07:1a:68:4a:bf:ea:bd: 99:58:d6:d8:77:f6:6b:5f:4b:31:ce:84:4c:65:0d: fe:c9:ee:27:5a:9e:4e:81:1e:f1:ac:8b:00:9f:8b: 48:95:01:36:ec:2f:fa:25:4b:36:e5:25:02:89:a0: 58:65:3a:68:74:b3:45:64:03:20:a0:39:bb:91:1e: cf:85:ed:80:3a:d3:63:a3:b0:ee:38:17:a5:f1:9d: b9:00:58:83:f5:cf:f0:40:03:bf:01:ee:fb:80:3e: d8:0b:6e:c6:6f:2b:85:6d:de:16:02:87:90:bb:84: 75:3d:61:c8:e2:16:3f:ca:05:8e:41:0b:4e:b6:b0: f0:a3:ba:29:f0:3f:72:b7:17:5a:78:28:fe:38:31: a6:dc:d7:18:0a:c0:cb:6c:6b:66:5d:39:b3:71:5d: 70:f4:85:a9:5d:8a:c1:90:27:23:ab:91:1d:51:72: b7:d7:d3:8b:20:f6:a9:6a:a7:29:54:e7:3e:f1:77: ce:1a:4f:d2:07:d4:71:79:92:7b:46:b5:40:d2:60: f6:b9:55:54:9d:6e:bc:96:e6:b1:be:1a:a5:7c:7c: 2d:ec:0a:f6:86:a8:0a:ef:b7:3a:3e:b9:6b:ea:c6: d7:4e:a5:45:93:4b:b3:ff:18:2a:77:d8:39:f2:be: 8a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B0:E2:2B:7F:EB:8E:B3:88:F8:19:BC:AB:40:01:00:FF:88:D1:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:81:ce:52:cf:d4:e7:87:0a:25:06:19:0f:48:d0:da:3d:58: 9b:88:f3:bb:1f:e4:cc:92:02:34:ac:44:50:71:4a:9a:ee:e3: 30:e7:54:2c:ab:e9:ee:fe:d7:c2:44:20:28:58:45:c7:0f:5f: 3d:49:2d:73:ff:bd:08:62:be:32:21:1a:bf:55:15:02:07:d0: a5:0c:65:cd:c2:5c:b6:84:7b:4c:c4:c3:a1:45:93:a5:16:6e: 3c:c6:3d:88:b6:f1:91:40:80:23:b7:5d:fe:a4:fa:29:c9:49: 0a:6a:c8:b4:5e:7f:37:11:4e:30:2b:63:da:fb:f9:61:62:98: 84:c0:52:72:1b:5c:54:e3:93:7c:4c:5c:12:66:67:38:48:65: d7:09:fc:15:68:a6:65:4e:e3:4d:8d:35:ae:ef:b0:c0:5f:a1: 91:b8:45:ad:29:f9:41:37:74:c4:d5:ae:49:bc:8f:d2:3c:e3: 78:ea:ff:70:78:8c:a2:a6:9a:5f:f9:c7:f7:45:91:a6:60:51: 28:ea:e4:20:0f:c0:a9:17:69:ca:d1:a4:ab:e3:48:ba:92:6a: c0:31:06:96:7b:21:8a:06:b3:c0:c8:a2:5f:52:0d:19:a2:41: 48:8f:51:86:e4:22:03:37:a8:af:2b:21:1f:2c:35:d4:bb:bb: 8d:fa:ed:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOqC4nH8VJj4vMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk ZWYwYzM2YTgtNjMwMC00MDk1LWFkNTYtYWM4ZGI1OTI5ZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0LDOcHqvQcaaEq/6r2ZWNbYd/ZrX0sxzoRM ZQ3+ye4nWp5OgR7xrIsAn4tIlQE27C/6JUs25SUCiaBYZTpodLNFZAMgoDm7kR7P he2AOtNjo7DuOBel8Z25AFiD9c/wQAO/Ae77gD7YC27GbyuFbd4WAoeQu4R1PWHI 4hY/ygWOQQtOtrDwo7op8D9ytxdaeCj+ODGm3NcYCsDLbGtmXTmzcV1w9IWpXYrB kCcjq5EdUXK319OLIPapaqcpVOc+8XfOGk/SB9RxeZJ7RrVA0mD2uVVUnW68luax vhqlfHwt7Ar2hqgK77c6Prlr6sbXTqVFk0uz/xgqd9g58r6K0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCw4it/646ziPgZvKtAAQD/iNFTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDgzNDBmOTEtNWMxMS0z MTY0LTk2NDEtZWNlN2Y5Mzc1NWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGBzlLP1OeHCiUGGQ9I0No9WJuI87sf5MySAjSsRFBxSpru4zDnVCyr 6e7+18JEIChYRccPXz1JLXP/vQhivjIhGr9VFQIH0KUMZc3CXLaEe0zEw6FFk6UW bjzGPYi28ZFAgCO3Xf6k+inJSQpqyLRefzcRTjArY9r7+WFimITAUnIbXFTjk3xM XBJmZzhIZdcJ/BVopmVO402NNa7vsMBfoZG4Ra0p+UE3dMTVrkm8j9I843jq/3B4 jKKmml/5x/dFkaZgUSjq5CAPwKkXacrRpKvjSLqSasAxBpZ7IYoGs8DIol9SDRmi QUiPUYbkIgM3qK8rIR8sNdS7u4367Yg= -----END CERTIFICATE-----Generated at Tue Jun 3 10:22:20 2025 by rpki-client