$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/18cce3f0-6a9b-362d-8fd9-8c716ddc1a6d.roa File: 18cce3f0-6a9b-362d-8fd9-8c716ddc1a6d.roa (raw, json) Hash identifier: 3iNPZzaMt9Kj6E+TK3tiAv7gCfy3pzdGK8XzhfMJaK4= Subject key identifier: 43:D7:BB:E3:78:FA:0F:3C:BF:E6:A9:57:86:C9:6E:B6:4F:0D:89:F7 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849E7BA821AD31726D4EA39A040 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/18cce3f0-6a9b-362d-8fd9-8c716ddc1a6d.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 9009 IP address blocks: 172.94.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:82:1a:d3:17:26:d4:ea:39:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=617b38bc-a1d1-4cd9-92a7-8fb14a2e3698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:38:96:7d:ed:a6:a8:a9:4c:d0:f3:c3:17:e1: 2c:fc:92:20:bd:ba:7e:27:4f:2e:54:7b:37:62:92: 49:19:fd:c6:e1:ca:e9:c2:18:8e:84:73:e5:1d:d8: 88:b6:2f:72:04:25:cd:62:d4:4b:01:1c:a4:ac:5f: 3c:9b:ee:06:91:1c:b6:95:28:fe:cf:6d:29:c8:87: e7:88:0a:fd:ba:3d:78:0e:0b:2f:19:36:82:da:bf: cd:cc:ce:b4:4e:7e:13:9b:8d:db:82:6a:91:08:ef: 5e:5b:74:a4:5a:a1:dd:4f:59:3e:35:84:55:66:e5: dd:52:6b:79:98:e3:c4:ef:86:bd:83:40:3d:3b:d1: e1:58:90:83:be:c8:5b:be:54:db:a2:ba:80:7b:98: d8:ba:52:53:20:c7:13:e4:f8:a2:78:75:b7:40:da: f9:2b:ed:65:22:fe:bd:74:02:e3:31:16:77:69:6e: 17:c3:b0:e2:9e:72:da:0b:51:ff:4e:e3:af:6f:bd: 36:64:8d:e3:87:3b:e2:be:7b:a9:4d:e5:91:7f:15: 6a:e0:5a:2a:f4:00:51:c2:e0:6a:ce:25:ca:aa:fc: 8f:8d:14:4a:08:c0:d1:13:3d:f2:88:7b:53:40:d9: f2:63:1d:e5:af:21:6a:c7:34:85:1f:b4:88:90:ba: 17:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D7:BB:E3:78:FA:0F:3C:BF:E6:A9:57:86:C9:6E:B6:4F:0D:89:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/18cce3f0-6a9b-362d-8fd9-8c716ddc1a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:aa:10:92:40:42:8c:9e:52:50:86:26:58:e0:5b:25:5b:90: 0f:0d:c6:22:ea:a3:7b:60:0b:f6:d4:c1:91:6e:06:d7:d6:fe: 7f:d0:5b:ed:8b:c9:00:6a:46:a5:ff:d0:ca:42:0a:09:4d:e5: 72:c9:6e:f8:76:40:f7:14:9a:90:d9:9b:d3:7e:60:5b:62:f5: e8:04:32:98:1e:ee:18:0e:7b:ef:54:75:63:cc:a1:c5:65:33: 2f:82:d4:83:a3:9f:c6:5e:53:bd:93:21:2a:bf:93:ba:b3:88: c0:24:12:fd:54:93:a6:a8:e7:c5:c2:b1:6f:b6:bd:b5:b0:c8: 94:8a:94:fe:7a:6b:ee:87:fb:43:ca:14:ca:49:ea:64:00:ff: dc:24:72:9d:b8:3d:f5:b8:b0:cb:8d:25:89:c2:69:05:e6:b2: 6e:88:61:d5:af:e5:6f:cb:68:e3:25:ea:70:b6:2e:f1:65:90: e9:d8:4f:96:10:cb:0e:bb:3b:27:23:79:77:8b:cc:72:89:b6: 40:ca:de:15:02:ca:91:2f:8b:5d:db:ef:46:c0:1f:4a:0a:91: bc:81:dd:db:a4:d7:28:db:e0:70:34:38:33:4c:65:64:13:52: f5:c2:53:b2:5b:87:6e:6a:f7:15:86:fc:c5:f9:63:32:ca:41: 21:d8:a9:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuoIa0xcm1Oo5oEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk NjE3YjM4YmMtYTFkMS00Y2Q5LTkyYTctOGZiMTRhMmUzNjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDiWfe2mqKlM0PPDF+Es/JIgvbp+J08uVHs3 YpJJGf3G4crpwhiOhHPlHdiIti9yBCXNYtRLARykrF88m+4GkRy2lSj+z20pyIfn iAr9uj14DgsvGTaC2r/NzM60Tn4Tm43bgmqRCO9eW3SkWqHdT1k+NYRVZuXdUmt5 mOPE74a9g0A9O9HhWJCDvshbvlTborqAe5jYulJTIMcT5PiieHW3QNr5K+1lIv69 dALjMRZ3aW4Xw7DinnLaC1H/TuOvb702ZI3jhzvivnupTeWRfxVq4Foq9ABRwuBq ziXKqvyPjRRKCMDREz3yiHtTQNnyYx3lryFqxzSFH7SIkLoXGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPXu+N4+g88v+apV4bJbrZPDYn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMThjY2UzZjAtNmE5Yi0z NjJkLThmZDktOGM3MTZkZGMxYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGqEJJAQoyeUlCGJljgWyVbkA8NxiLqo3tgC/bUwZFuBtfW/n/QW+2L yQBqRqX/0MpCCglN5XLJbvh2QPcUmpDZm9N+YFti9egEMpge7hgOe+9UdWPMocVl My+C1IOjn8ZeU72TISq/k7qziMAkEv1Uk6ao58XCsW+2vbWwyJSKlP56a+6H+0PK FMpJ6mQA/9wkcp24PfW4sMuNJYnCaQXmsm6IYdWv5W/LaOMl6nC2LvFlkOnYT5YQ yw67OycjeXeLzHKJtkDK3hUCypEvi13b70bAH0oKkbyB3duk1yjb4HA0ODNMZWQT UvXCU7Jbh25q9xWG/MX5YzLKQSHYqaM= -----END CERTIFICATE-----Generated at Tue Jun 3 10:13:05 2025 by rpki-client