$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/581468e0-41f0-3c1a-9e55-877122647768.roa File: 581468e0-41f0-3c1a-9e55-877122647768.roa (raw, json) Hash identifier: YqKb5MEcgNcJcIDVzAtG0+Ej625GoWOVkdIoqos9eQs= Subject key identifier: 05:6E:09:8D:0A:57:3D:B4:95:4A:3A:0F:C8:CD:EC:E8:C5:5C:9F:F6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A06700B2CA065F067EEB05680 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/581468e0-41f0-3c1a-9e55-877122647768.roa Signing time: Fri 30 May 2025 13:01:22 +0000 ROA not before: Fri 30 May 2025 13:01:22 +0000 ROA not after: Thu 28 Aug 2025 13:01:22 +0000 asID: 208485 IP address blocks: 172.94.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:06:70:0b:2c:a0:65:f0:67:ee:b0:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 30 13:01:22 2025 GMT Not After : Aug 28 13:01:22 2025 GMT Subject: CN=81aaefd8-f3d4-488b-acf6-d52dbed98fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5a:63:68:69:bf:dc:5b:1d:53:ca:04:51:ce: 01:a1:d6:82:32:47:31:84:9f:12:2c:08:26:d0:a6: 4b:02:29:16:03:5e:b5:99:0f:b7:24:16:75:26:33: d9:c0:55:76:e2:60:fa:27:73:7c:9a:cc:13:0c:bc: 08:22:36:1a:8a:52:07:06:44:38:36:ed:80:85:0f: d4:11:70:63:e8:c2:be:66:70:a6:ab:0d:b0:73:13: 56:71:6e:c3:02:7d:0f:0e:d0:e6:69:e2:21:3c:65: dd:e3:8e:5e:23:28:8e:73:51:d3:de:e7:37:c6:93: 9f:ae:35:1d:24:fc:5a:f7:24:0e:90:03:85:40:28: 70:2e:42:e3:65:1c:fa:dc:dd:87:b0:27:79:f8:44: 77:06:2c:a4:4e:88:0f:27:1e:2c:00:35:1a:8e:62: 37:b4:9d:d5:ca:f8:ef:af:28:1a:29:1d:6f:7e:12: 2b:d9:3e:09:11:73:36:16:6f:a2:b4:11:65:a2:5f: 7b:4b:1e:57:3c:3f:c8:2b:9e:5e:d9:16:26:f2:0f: 5f:ed:ee:59:14:0b:da:7d:69:b4:62:ab:a6:bb:b9: c0:bb:18:de:5c:79:af:74:e4:75:d2:22:a1:e6:92: 42:bc:0e:41:38:df:06:b1:f1:fa:80:a0:7b:00:98: 65:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6E:09:8D:0A:57:3D:B4:95:4A:3A:0F:C8:CD:EC:E8:C5:5C:9F:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/581468e0-41f0-3c1a-9e55-877122647768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:d1:5d:2f:b6:bb:2a:ed:00:1a:aa:27:64:91:65:b0:ef:8f: a8:bc:a5:42:49:b4:6c:9b:b0:a9:8b:de:d7:fb:8e:4d:19:75: 4b:58:37:e9:91:82:ae:39:f9:54:fb:61:aa:1b:22:66:a8:54: d1:c9:7e:2f:02:79:fa:b0:37:3f:df:10:22:ed:2f:63:8d:f2: 21:7e:0b:52:52:84:e7:84:1b:b4:bc:6a:13:54:eb:e9:28:b5: 94:58:fe:1a:df:af:44:98:68:12:32:75:eb:bd:61:19:4f:bd: af:0b:59:a8:97:95:20:28:01:71:1f:61:d5:9e:94:55:1c:2b: cc:22:aa:0f:8b:ef:86:d4:98:b3:29:14:8e:3e:68:0c:c1:ca: f7:c4:3d:ca:ae:cf:b7:68:ff:28:0a:d0:d1:cd:8e:d5:3d:54: 74:cd:0a:2c:02:9f:d2:d3:61:db:09:10:6b:61:e0:26:96:20: ac:db:91:ab:4f:ec:bd:ff:cc:fe:2a:75:96:f1:d8:16:59:0e: 08:21:e5:d6:41:8d:5b:8a:52:00:a1:82:15:2f:70:c2:ad:ef: a1:93:8e:f7:3b:90:2e:f3:76:c4:3e:7d:f1:2f:ec:bd:2f:de: 74:91:58:e9:60:26:41:82:70:a0:00:cc:d9:f3:e9:c7:b7:5a: 9b:a6:1c:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoGcAssoGXwZ+6wVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUzMDEzMDEyMloXDTI1MDgyODEzMDEyMlowLzEtMCsGA1UEAxMk ODFhYWVmZDgtZjNkNC00ODhiLWFjZjYtZDUyZGJlZDk4ZmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21pjaGm/3FsdU8oEUc4BodaCMkcxhJ8SLAgm 0KZLAikWA161mQ+3JBZ1JjPZwFV24mD6J3N8mswTDLwIIjYailIHBkQ4Nu2AhQ/U EXBj6MK+ZnCmqw2wcxNWcW7DAn0PDtDmaeIhPGXd445eIyiOc1HT3uc3xpOfrjUd JPxa9yQOkAOFQChwLkLjZRz63N2HsCd5+ER3BiykTogPJx4sADUajmI3tJ3Vyvjv rygaKR1vfhIr2T4JEXM2Fm+itBFlol97Sx5XPD/IK55e2RYm8g9f7e5ZFAvafWm0 Yqumu7nAuxjeXHmvdOR10iKh5pJCvA5BON8GsfH6gKB7AJhllwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVuCY0KVz20lUo6D8jN7OjFXJ/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTgxNDY4ZTAtNDFmMC0z YzFhLTllNTUtODc3MTIyNjQ3NzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbRXS+2uyrtABqqJ2SRZbDvj6i8pUJJtGybsKmL3tf7jk0ZdUtYN+mR gq45+VT7YaobImaoVNHJfi8CefqwNz/fECLtL2ON8iF+C1JShOeEG7S8ahNU6+ko tZRY/hrfr0SYaBIydeu9YRlPva8LWaiXlSAoAXEfYdWelFUcK8wiqg+L74bUmLMp FI4+aAzByvfEPcquz7do/ygK0NHNjtU9VHTNCiwCn9LTYdsJEGth4CaWIKzbkatP 7L3/zP4qdZbx2BZZDggh5dZBjVuKUgChghUvcMKt76GTjvc7kC7zdsQ+ffEv7L0v 3nSRWOlgJkGCcKAAzNnz6ce3WpumHHc= -----END CERTIFICATE-----Generated at Sat Jun 7 05:17:55 2025 by rpki-client