$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/70c1d4ee-db09-3f94-b0f8-866dd2bdcbf1.roa File: 70c1d4ee-db09-3f94-b0f8-866dd2bdcbf1.roa (raw, json) Hash identifier: AX9SXWrejycpflxP5YhDgCzAZ5kkWXOLdQAVdZwViYc= Subject key identifier: B8:D2:FF:CA:6B:E5:05:AC:B6:04:EB:31:3B:2E:70:C1:30:7D:AF:97 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A093AA096F85AD08B01744600 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/70c1d4ee-db09-3f94-b0f8-866dd2bdcbf1.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 9009 IP address blocks: 172.94.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:a0:96:f8:5a:d0:8b:01:74:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=943d815a-a40b-4617-afe8-6f9939d3c6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:07:c7:a8:0c:b2:f9:2f:04:74:4e:49:c9:3f: f7:92:47:da:cf:8d:6a:f4:47:2d:30:99:1e:bd:b8: cb:b3:76:10:55:7b:8d:5f:88:f1:cf:a7:ab:85:38: c9:e6:4d:69:43:5d:c3:eb:1d:4e:f9:dd:d9:de:49: f0:0c:ff:38:4f:71:ab:a2:85:74:e7:a5:38:8d:43: 54:cd:91:dd:60:1c:35:70:21:d4:e1:a2:7f:2a:75: d3:87:f3:6d:8e:b0:ef:54:fc:d2:2f:66:51:30:98: a4:54:17:fa:e0:ce:b8:b8:c7:58:d2:07:45:9a:5f: 97:85:af:73:6c:a7:6a:3c:e9:98:11:ed:e1:11:c2: 82:79:7e:9e:f6:c9:4a:64:f0:87:e4:f6:3f:05:4b: 3a:86:c5:a1:aa:9c:04:03:df:77:9f:92:53:65:97: 90:49:af:1a:48:9e:ee:d9:31:8c:4b:26:ad:79:88: 6c:1a:f3:31:c1:a7:99:5a:ab:b7:c9:45:a0:36:c8: b3:54:72:b9:cc:d2:05:55:ff:ac:ff:13:6a:91:6b: 3d:39:9b:8f:af:eb:8b:97:e6:e2:f1:2b:bb:bd:ff: 90:5b:9a:ec:b4:93:b5:0b:27:47:ce:d7:ee:23:26: a7:de:4d:c1:79:82:1b:c3:c4:ab:8f:66:4d:f6:e7: 4f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D2:FF:CA:6B:E5:05:AC:B6:04:EB:31:3B:2E:70:C1:30:7D:AF:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/70c1d4ee-db09-3f94-b0f8-866dd2bdcbf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:f0:07:04:ae:51:e6:fc:ca:9e:db:e9:ba:71:57:ec:23:52: 90:46:bc:7b:ae:25:47:9c:ad:a8:c5:92:f0:82:28:2c:ad:d3: fa:6d:db:3a:1d:83:c8:0a:c9:3e:ba:06:3f:85:91:ed:b3:2d: eb:b5:3c:44:45:9c:16:71:04:c0:97:35:71:5a:24:34:89:b7: 72:87:4d:67:47:e1:ff:a6:da:d0:69:0a:99:35:07:3f:ac:33: 63:ef:90:da:30:af:d0:5e:04:46:e6:9b:20:ad:ec:a2:c6:a3: 00:7e:9d:8d:d8:3a:e8:9a:97:7c:e4:44:98:7c:64:9b:6d:b8: 1b:fa:8a:44:e1:0b:38:0f:44:7b:3b:86:24:5e:0e:d2:05:38: 12:40:af:ef:74:5b:b6:0b:a6:0e:de:f6:70:21:79:e1:3a:4c: d8:20:3c:fb:f9:37:17:f0:72:c9:68:7b:5b:af:39:92:97:07: 26:11:c7:de:10:2d:59:d9:fe:29:18:09:54:6c:49:2a:9a:72: f2:50:e5:a4:36:85:7c:ba:41:1e:b1:fa:08:b0:a7:4a:86:f8: 78:5e:61:d8:20:83:31:2f:73:8a:82:09:5a:b5:a1:82:71:c0: 8c:f9:89:80:e8:b3:2d:2a:ff:1e:48:6b:11:f3:d2:13:0f:3b: 51:b9:2f:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOqCW+FrQiwF0RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk OTQzZDgxNWEtYTQwYi00NjE3LWFmZTgtNmY5OTM5ZDNjNmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQfHqAyy+S8EdE5JyT/3kkfaz41q9EctMJke vbjLs3YQVXuNX4jxz6erhTjJ5k1pQ13D6x1O+d3Z3knwDP84T3GrooV056U4jUNU zZHdYBw1cCHU4aJ/KnXTh/NtjrDvVPzSL2ZRMJikVBf64M64uMdY0gdFml+Xha9z bKdqPOmYEe3hEcKCeX6e9slKZPCH5PY/BUs6hsWhqpwEA993n5JTZZeQSa8aSJ7u 2TGMSyateYhsGvMxwaeZWqu3yUWgNsizVHK5zNIFVf+s/xNqkWs9OZuPr+uLl+bi 8Su7vf+QW5rstJO1CydHztfuIyan3k3BeYIbw8Srj2ZN9udP7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjS/8pr5QWstgTrMTsucMEwfa+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzBjMWQ0ZWUtZGIwOS0z Zjk0LWIwZjgtODY2ZGQyYmRjYmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTwBwSuUeb8yp7b6bpxV+wjUpBGvHuuJUecrajFkvCCKCyt0/pt2zod g8gKyT66Bj+Fke2zLeu1PERFnBZxBMCXNXFaJDSJt3KHTWdH4f+m2tBpCpk1Bz+s M2PvkNowr9BeBEbmmyCt7KLGowB+nY3YOuial3zkRJh8ZJttuBv6ikThCzgPRHs7 hiReDtIFOBJAr+90W7YLpg7e9nAheeE6TNggPPv5Nxfwcsloe1uvOZKXByYRx94Q LVnZ/ikYCVRsSSqacvJQ5aQ2hXy6QR6x+giwp0qG+HheYdgggzEvc4qCCVq1oYJx wIz5iYDosy0q/x5IaxHz0hMPO1G5L6U= -----END CERTIFICATE-----Generated at Tue Jun 3 10:11:38 2025 by rpki-client