$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa File: 3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa (raw, json) Hash identifier: 9ayA+eU9caATZQGgAov2GLiofXQEG8Wpw33VuO8D7hI= Subject key identifier: B9:A1:73:B3:DC:26:14:B4:99:7B:BE:DC:F9:28:D4:8F:86:60:B8:B3 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849DF5A7221A2E34868ABABB480 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 9009 IP address blocks: 172.94.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:72:21:a2:e3:48:68:ab:ab:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=1105dcb0-b078-4557-9221-783f0de59eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:66:b4:1d:61:ab:a9:44:5a:f0:bc:2e:28:4e: 54:bb:68:93:5d:5e:f1:2f:65:c2:83:72:e7:9e:2e: 2c:17:75:be:8c:f3:59:ff:04:c6:92:1a:70:0c:44: 83:50:d1:ff:17:b5:7d:78:7b:de:72:e2:b9:e8:fd: d0:8d:ed:f9:32:ff:73:34:26:c7:c2:a4:3e:ae:fc: 1c:77:3a:f0:57:1c:9a:da:0e:5a:2a:42:a8:c1:2e: e0:9c:9b:ab:1e:58:0d:e2:7e:0a:70:bd:2c:99:9d: 49:8a:46:68:61:ad:9c:1a:9b:f0:ac:bd:5c:35:5c: 35:9a:35:93:0b:bf:ba:0c:8c:d5:d6:59:90:36:82: cb:27:0d:51:11:b0:9b:21:6e:f6:5a:57:1a:c3:bf: c2:6b:74:04:4d:26:54:28:78:b5:fa:83:41:7c:2f: f0:72:cf:1c:64:9f:51:af:ca:4c:ed:26:4c:e3:94: 59:af:bd:fd:9b:19:c7:1b:32:0b:87:9c:21:6e:75: dc:2e:01:a1:e3:59:8a:12:4d:6c:90:25:6f:2b:c6: d6:25:a9:8e:61:23:d0:3a:62:c5:42:7a:ff:49:a8: 3c:98:a5:a3:16:1e:bf:fa:ca:f5:b9:6b:c7:b6:c9: 9a:d3:3f:92:69:37:e0:ff:2a:1c:c2:7e:93:cd:76: 60:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A1:73:B3:DC:26:14:B4:99:7B:BE:DC:F9:28:D4:8F:86:60:B8:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3aea2da0-5e0d-3dc8-8210-80aa9e669320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:7f:db:2b:cb:eb:f4:0f:9d:5a:1a:20:70:09:33:9b:01:65: 53:7c:e4:20:10:8d:a1:d4:6a:a2:2e:9f:70:99:a1:5b:02:57: ae:bb:2c:17:79:42:4b:21:c6:03:5f:3b:00:f3:7f:b4:9b:38: f4:78:0e:52:1e:e3:ea:3b:01:04:22:f5:eb:31:22:a0:73:17: cc:6a:5c:61:a9:62:f3:95:d3:de:36:ac:fd:27:a5:72:bf:ea: 58:de:c9:d0:f0:08:6c:ff:c1:43:d8:f4:9c:13:29:0f:56:1d: ed:c4:74:a0:3c:c9:79:b0:6b:89:cb:fe:3d:ed:e3:17:0b:f6: 6e:02:b3:57:9f:71:f4:97:36:65:67:0c:96:0f:93:e1:fa:49: 1c:53:0e:01:73:2a:93:f0:6a:12:7a:8a:90:fa:b5:b0:31:71: 3b:6b:81:80:de:47:47:1e:cb:61:ff:69:75:d4:86:01:f9:c0: 59:c9:05:0b:85:90:d6:1a:b0:8e:60:df:10:db:11:c7:c6:34: 2e:ac:c3:39:e4:d5:9c:58:f7:63:ba:84:b0:38:d7:92:17:bc: a9:37:49:d2:8c:90:0d:11:c2:15:6f:0d:4c:14:b1:a6:e4:f0: 41:6e:85:b2:87:cc:ba:3c:23:86:99:7c:7e:2d:ef:c4:38:f5: 6d:0b:2e:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnIhouNIaKurtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MTEwNWRjYjAtYjA3OC00NTU3LTkyMjEtNzgzZjBkZTU5ZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWa0HWGrqURa8LwuKE5Uu2iTXV7xL2XCg3Ln ni4sF3W+jPNZ/wTGkhpwDESDUNH/F7V9eHvecuK56P3Qje35Mv9zNCbHwqQ+rvwc dzrwVxya2g5aKkKowS7gnJurHlgN4n4KcL0smZ1JikZoYa2cGpvwrL1cNVw1mjWT C7+6DIzV1lmQNoLLJw1REbCbIW72Wlcaw7/Ca3QETSZUKHi1+oNBfC/wcs8cZJ9R r8pM7SZM45RZr739mxnHGzILh5whbnXcLgGh41mKEk1skCVvK8bWJamOYSPQOmLF Qnr/Sag8mKWjFh6/+sr1uWvHtsma0z+SaTfg/yocwn6TzXZg/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmhc7PcJhS0mXu+3Pko1I+GYLizMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2FlYTJkYTAtNWUwZC0z ZGM4LTgyMTAtODBhYTllNjY5MzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGl/2yvL6/QPnVoaIHAJM5sBZVN85CAQjaHUaqIun3CZoVsCV667LBd5 QkshxgNfOwDzf7SbOPR4DlIe4+o7AQQi9esxIqBzF8xqXGGpYvOV0942rP0npXK/ 6ljeydDwCGz/wUPY9JwTKQ9WHe3EdKA8yXmwa4nL/j3t4xcL9m4Cs1efcfSXNmVn DJYPk+H6SRxTDgFzKpPwahJ6ipD6tbAxcTtrgYDeR0cey2H/aXXUhgH5wFnJBQuF kNYasI5g3xDbEcfGNC6swznk1ZxY92O6hLA415IXvKk3SdKMkA0RwhVvDUwUsabk 8EFuhbKHzLo8I4aZfH4t78Q49W0LLmI= -----END CERTIFICATE-----Generated at Tue Jun 3 10:18:56 2025 by rpki-client