$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8b33f9e9-15bc-35a3-8c65-df2802e53ba6.roa File: 8b33f9e9-15bc-35a3-8c65-df2802e53ba6.roa (raw, json) Hash identifier: 6Nbx5FxL+i7wkPXh1v2fdhdaNZOrqp855MwpIp7f0T4= Subject key identifier: 6F:64:F8:42:B7:68:65:60:C1:3E:83:9B:A5:45:6B:A2:18:2A:AA:29 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A103545115C98BD394A0D3460 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8b33f9e9-15bc-35a3-8c65-df2802e53ba6.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 212238 IP address blocks: 172.94.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:45:11:5c:98:bd:39:4a:0d:34:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=0e7a6605-14e1-4264-a3d0-e7d058d6ab26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:af:2e:5d:81:52:41:70:44:1b:e2:a9:75: 8b:b3:5d:c7:72:ce:ac:cb:cc:90:7a:8f:55:b8:a2: 39:e0:df:e7:9a:02:5c:f5:8b:48:68:3d:6b:b9:57: cf:85:75:c2:e8:8a:0f:fa:ae:4b:96:0a:f6:c4:96: 9f:f2:b0:6a:31:96:05:bd:bb:bd:1c:76:6b:3a:5f: 74:7b:57:da:39:3d:b5:50:bd:57:41:ed:ae:d1:0a: b3:88:12:d5:e9:1f:df:5e:77:98:2b:eb:29:7d:63: b5:76:03:2e:d2:e4:b9:20:27:6e:a8:fa:c6:20:67: 72:93:ab:2d:a9:61:b0:d3:7e:99:f2:8f:53:b8:ae: c6:e0:af:bd:9c:33:35:2f:16:52:6a:e6:5e:bd:9d: 4b:d4:17:ba:6e:77:59:b0:f9:40:6c:72:47:58:0b: dd:ae:cd:b2:a8:80:d6:c6:dc:28:68:79:f4:58:60: 72:6b:9f:1a:a7:03:ef:02:d5:6e:d1:10:00:8e:9e: 59:1b:78:b1:65:f1:d3:a4:bf:75:19:97:26:cd:89: a4:ac:e2:55:64:03:82:47:9a:fa:60:11:2d:95:98: 31:72:64:28:ba:5f:8c:60:77:ee:00:8b:48:0a:19: 48:bb:a2:50:d6:c0:24:e5:0a:82:35:3d:13:0b:f1: 70:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:64:F8:42:B7:68:65:60:C1:3E:83:9B:A5:45:6B:A2:18:2A:AA:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8b33f9e9-15bc-35a3-8c65-df2802e53ba6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:74:58:52:01:cc:8d:95:97:5c:35:6a:5b:06:a5:8d:e2:8a: cb:54:66:fe:16:17:82:80:11:d0:06:f0:ea:b9:ba:25:ce:0e: b8:87:2b:f7:36:ca:a4:08:5d:63:3d:cd:05:42:1d:57:20:01: a3:d2:0f:64:6b:57:b4:86:a3:95:c9:e2:8d:2d:88:a7:6c:25: ca:06:62:67:51:1f:42:64:29:84:1f:d5:1c:94:a6:e6:69:ac: a3:ed:53:08:69:4d:91:bf:d5:bf:d6:32:9d:44:a4:67:1b:ac: e7:0e:d3:59:32:15:a5:ec:83:04:0d:40:51:fb:a5:b2:82:ac: a7:52:ee:70:09:cf:e0:ce:15:14:9d:5b:5f:be:2a:a9:40:de: 28:95:f5:6d:ed:2d:ca:fb:ca:b3:a5:fd:5e:f6:cc:22:d6:b5: ff:6d:03:35:b6:f3:1e:94:ad:7e:44:10:5a:df:b4:62:61:fa: 0d:45:af:85:8c:ba:03:2d:f5:c1:61:ad:67:90:ee:7e:89:93: 6d:56:ef:d8:94:f5:4b:2d:c7:0e:9e:fe:1e:74:5a:ce:38:4c: b3:d0:fd:df:13:72:90:33:41:42:46:1f:2e:74:62:a2:a1:43: 78:92:3b:f7:ac:65:c1:dd:9a:41:e6:2c:8e:cd:54:b5:f8:3d: a4:9f:2d:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUURXJi9OUoNNGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk MGU3YTY2MDUtMTRlMS00MjY0LWEzZDAtZTdkMDU4ZDZhYjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGWvLl2BUkFwRBviqXWLs13Hcs6sy8yQeo9V uKI54N/nmgJc9YtIaD1ruVfPhXXC6IoP+q5Llgr2xJaf8rBqMZYFvbu9HHZrOl90 e1faOT21UL1XQe2u0QqziBLV6R/fXneYK+spfWO1dgMu0uS5ICduqPrGIGdyk6st qWGw036Z8o9TuK7G4K+9nDM1LxZSauZevZ1L1Be6bndZsPlAbHJHWAvdrs2yqIDW xtwoaHn0WGBya58apwPvAtVu0RAAjp5ZG3ixZfHTpL91GZcmzYmkrOJVZAOCR5r6 YBEtlZgxcmQoul+MYHfuAItIChlIu6JQ1sAk5QqCNT0TC/FwhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9k+EK3aGVgwT6Dm6VFa6IYKqopMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOGIzM2Y5ZTktMTViYy0z NWEzLThjNjUtZGYyODAyZTUzYmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABN0WFIBzI2Vl1w1alsGpY3iistUZv4WF4KAEdAG8Oq5uiXODriHK/c2 yqQIXWM9zQVCHVcgAaPSD2RrV7SGo5XJ4o0tiKdsJcoGYmdRH0JkKYQf1RyUpuZp rKPtUwhpTZG/1b/WMp1EpGcbrOcO01kyFaXsgwQNQFH7pbKCrKdS7nAJz+DOFRSd W1++KqlA3iiV9W3tLcr7yrOl/V72zCLWtf9tAzW28x6UrX5EEFrftGJh+g1Fr4WM ugMt9cFhrWeQ7n6Jk21W79iU9Ustxw6e/h50Ws44TLPQ/d8TcpAzQUJGHy50YqKh Q3iSO/esZcHdmkHmLI7NVLX4PaSfLTQ= -----END CERTIFICATE-----Generated at Sun Jun 8 06:20:04 2025 by rpki-client