$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa File: 728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa (raw, json) Hash identifier: nGIPx/GUkkcCr0vr1sPjs9zuga+n+tg7FmVKtN5IrxQ= Subject key identifier: 64:65:B8:40:E9:C5:A0:7B:A1:CD:E6:6E:DE:5C:B8:47:B1:0F:06:22 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849D42FB6535BC6C71553F33C80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 9009 IP address blocks: 172.94.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:b6:53:5b:c6:c7:15:53:f3:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=757b0b71-aa10-45bb-a6d7-c5edf31a7cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4d:ae:b6:e5:7a:16:85:7b:69:f2:00:6d:6f: 81:55:df:4f:32:b9:f3:96:91:4e:48:f5:2d:07:05: 8f:9d:c2:f1:e9:99:6b:7a:04:18:3d:d1:08:d1:bd: 43:4f:0f:d3:13:d2:f5:32:4a:1c:52:71:1d:cf:7b: 51:57:22:a3:23:62:06:0f:9b:a4:94:0d:34:c2:8d: 2b:ff:72:17:6d:a8:d8:6f:53:42:b4:8d:45:7e:a7: 48:3f:86:9b:2c:0e:05:9c:d2:1c:9c:09:21:22:8d: 67:49:e3:22:a7:05:48:e7:f0:d7:03:a3:1a:31:e8: 25:01:8b:bf:5b:1e:76:eb:e0:24:f7:00:07:bb:cf: f0:08:a4:18:ff:70:d9:c4:f1:c1:18:16:81:63:2f: d7:70:0a:ac:29:13:68:a3:cf:92:cc:29:5b:7d:ac: df:44:d0:20:d0:9e:df:52:90:76:95:ce:43:96:05: 90:92:35:ed:e0:89:1c:98:45:8d:54:98:59:ce:a8: c1:b0:6a:77:10:01:12:50:e5:97:04:f5:22:10:18: fb:cc:c1:52:23:18:a2:73:21:9a:0c:4b:cb:fe:5e: 91:d0:ef:2f:9a:db:e4:f4:df:fb:5b:b9:f3:dd:77: f9:a8:be:a2:bc:a4:88:2c:9d:9e:6d:07:44:a4:f3: 87:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:65:B8:40:E9:C5:A0:7B:A1:CD:E6:6E:DE:5C:B8:47:B1:0F:06:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/728a6ddc-6df3-31bb-b9aa-53dc93a5763a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:47:92:69:12:93:30:39:4d:99:55:e8:64:a6:da:33:06:b7: 52:c9:40:55:67:fd:2a:ad:c9:af:a3:68:0b:8a:ce:c1:4a:8f: 12:51:d3:19:86:15:63:2e:a3:aa:3f:d1:ee:a8:a4:3b:dd:65: ad:a0:4f:c8:12:9e:69:33:0b:2a:57:ad:3c:97:4d:c4:60:11: 21:b5:8f:8e:56:87:a1:65:fb:4a:a0:f8:0a:c1:58:23:f6:fb: 96:30:0e:f0:59:48:31:b2:10:99:17:c5:23:4d:8c:5d:d4:7c: c7:a2:2d:74:59:e8:75:5c:7d:9d:89:be:12:f9:63:27:b9:82: ba:e3:9d:f0:56:7a:33:a0:1c:e9:ae:da:60:14:27:43:92:08: be:6b:ee:ca:58:7b:ae:87:96:f0:57:1e:d8:3a:b4:5a:30:58: 27:ff:57:da:79:5a:3f:8b:84:74:c5:53:76:6e:32:04:b2:84: 6b:2c:08:da:b8:69:48:91:41:c3:65:33:ef:cd:da:a5:17:13: e4:06:56:25:2e:5b:9f:38:61:7a:19:3b:85:26:22:88:78:b7: 6f:f3:76:c6:67:a1:32:b6:bf:39:b2:ea:da:79:fb:01:da:12: a5:e7:56:69:c0:5a:5d:02:89:d7:8e:6a:d6:2b:de:49:dd:d1: 3c:47:0d:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL7ZTW8bHFVPzPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NzU3YjBiNzEtYWExMC00NWJiLWE2ZDctYzVlZGYzMWE3Y2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA702utuV6FoV7afIAbW+BVd9PMrnzlpFOSPUt BwWPncLx6ZlregQYPdEI0b1DTw/TE9L1MkocUnEdz3tRVyKjI2IGD5uklA00wo0r /3IXbajYb1NCtI1FfqdIP4abLA4FnNIcnAkhIo1nSeMipwVI5/DXA6MaMeglAYu/ Wx526+Ak9wAHu8/wCKQY/3DZxPHBGBaBYy/XcAqsKRNoo8+SzClbfazfRNAg0J7f UpB2lc5DlgWQkjXt4IkcmEWNVJhZzqjBsGp3EAESUOWXBPUiEBj7zMFSIxiicyGa DEvL/l6R0O8vmtvk9N/7W7nz3Xf5qL6ivKSILJ2ebQdEpPOHkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRluEDpxaB7oc3mbt5cuEexDwYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzI4YTZkZGMtNmRmMy0z MWJiLWI5YWEtNTNkYzkzYTU3NjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZHkmkSkzA5TZlV6GSm2jMGt1LJQFVn/Sqtya+jaAuKzsFKjxJR0xmG FWMuo6o/0e6opDvdZa2gT8gSnmkzCypXrTyXTcRgESG1j45Wh6Fl+0qg+ArBWCP2 +5YwDvBZSDGyEJkXxSNNjF3UfMeiLXRZ6HVcfZ2JvhL5Yye5grrjnfBWejOgHOmu 2mAUJ0OSCL5r7spYe66HlvBXHtg6tFowWCf/V9p5Wj+LhHTFU3ZuMgSyhGssCNq4 aUiRQcNlM+/N2qUXE+QGViUuW584YXoZO4UmIoh4t2/zdsZnoTK2vzmy6tp5+wHa EqXnVmnAWl0CideOatYr3knd0TxHDdE= -----END CERTIFICATE-----Generated at Tue Jun 3 10:19:03 2025 by rpki-client