$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa File: a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa (raw, json) Hash identifier: 08gYYmH8wgSzO9DMCZtjqeVsNbFdtbOZvJtO029e+9M= Subject key identifier: 95:83:20:5A:92:9B:6C:E4:D2:F1:30:43:E0:F8:80:1D:5C:5F:19:07 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849DF5A72081FBDE84C86CDB0E0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 9009 IP address blocks: 172.94.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:72:08:1f:bd:e8:4c:86:cd:b0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=31a34c59-230c-4d31-9015-fdade4c438d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:99:a7:ee:e8:59:ea:69:7c:61:08:5d:17:2f: 8e:43:7a:66:fe:01:20:f7:02:b7:fe:3e:c4:6b:6d: b7:83:86:a6:50:3d:3b:a6:61:4e:38:fb:6a:22:76: c0:4f:86:4b:9d:94:be:7f:42:7f:77:77:e5:72:32: b2:fc:25:49:7d:d8:d1:2f:75:72:4f:13:e4:16:bd: 89:a8:4b:b1:9b:1d:0f:a3:2f:38:c6:5a:b5:0e:b1: 16:07:dc:2e:e9:f9:71:e6:4e:ce:a1:4b:34:be:25: 8f:06:01:3f:18:f4:7d:4f:30:8b:51:6b:62:72:9e: 89:fd:73:38:44:cc:60:dd:e3:e6:e4:d2:e1:ea:14: 06:3a:c5:48:b9:e7:d2:ea:08:3d:3e:82:4e:dc:5c: 38:83:95:ad:2f:9e:c0:08:c4:45:f8:10:18:b5:d3: e5:82:49:e0:37:82:04:dd:a6:6a:c1:17:e3:4e:5d: 3f:bb:57:f4:ca:f5:f7:c0:b8:8e:14:ef:e0:ab:c1: f0:7f:2e:20:39:04:68:b1:f8:9b:95:c3:77:cb:d8: 7c:37:50:71:8d:3c:07:c0:52:c0:3b:a0:d3:90:0b: d0:6c:35:38:0d:b6:48:bc:7d:08:4b:88:b8:74:78: 15:f0:96:7c:09:0f:af:1d:a6:b9:fb:ce:14:cf:f9: a2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:83:20:5A:92:9B:6C:E4:D2:F1:30:43:E0:F8:80:1D:5C:5F:19:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a4d97fd8-8b61-3d27-80ed-b2e89e48def5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:8a:9f:ef:0c:13:3a:5a:b3:a1:bb:a7:c6:83:99:6f:07:7d: ee:dc:fc:44:fa:a1:75:b2:75:de:b3:60:65:60:1f:6c:e5:61: 08:16:0a:18:58:23:ee:bc:8d:e8:fd:66:c1:c0:ef:1d:52:f4: f3:5c:db:73:d1:42:a4:d0:ff:2c:ba:f6:f4:e2:17:f1:9c:d3: fa:9b:27:f4:dd:0e:ea:f3:8b:38:1a:4c:a1:1a:7f:37:88:62: 41:90:41:b6:8a:61:4d:d9:69:80:eb:da:96:36:e2:5b:a4:48: b0:4a:22:31:6a:c5:17:d8:f9:62:3b:9b:53:14:cb:bd:22:99: 97:7a:51:5e:b2:62:53:9a:f8:f3:ec:4f:49:39:4c:27:86:33: 81:fc:eb:07:be:12:34:04:31:ef:f7:03:43:42:9a:98:26:b4: b9:0c:de:86:07:1b:27:5b:e1:cf:2c:4b:4c:d1:57:c2:88:86: 7b:ff:4f:30:b4:4b:f1:b2:ea:cb:1c:34:a5:63:6e:a2:7c:be: 02:19:a4:16:80:65:66:a0:bd:68:ff:0f:9a:6a:29:96:d2:6c: b2:e5:12:62:d5:4a:aa:35:4a:a1:8d:85:9b:42:5f:27:4d:88: 9c:b9:2e:e4:0e:d4:0d:ab:c4:10:3d:d3:3a:82:ad:15:ed:ea: 68:19:2b:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWnIIH73oTIbNsOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MzFhMzRjNTktMjMwYy00ZDMxLTkwMTUtZmRhZGU0YzQzOGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZmn7uhZ6ml8YQhdFy+OQ3pm/gEg9wK3/j7E a223g4amUD07pmFOOPtqInbAT4ZLnZS+f0J/d3flcjKy/CVJfdjRL3VyTxPkFr2J qEuxmx0Poy84xlq1DrEWB9wu6flx5k7OoUs0viWPBgE/GPR9TzCLUWticp6J/XM4 RMxg3ePm5NLh6hQGOsVIuefS6gg9PoJO3Fw4g5WtL57ACMRF+BAYtdPlgkngN4IE 3aZqwRfjTl0/u1f0yvX3wLiOFO/gq8Hwfy4gOQRosfiblcN3y9h8N1BxjTwHwFLA O6DTkAvQbDU4DbZIvH0IS4i4dHgV8JZ8CQ+vHaa5+84Uz/mieQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWDIFqSm2zk0vEwQ+D4gB1cXxkHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTRkOTdmZDgtOGI2MS0z ZDI3LTgwZWQtYjJlODllNDhkZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6Kn+8MEzpas6G7p8aDmW8Hfe7c/ET6oXWydd6zYGVgH2zlYQgWChhY I+68jej9ZsHA7x1S9PNc23PRQqTQ/yy69vTiF/Gc0/qbJ/TdDurzizgaTKEafzeI YkGQQbaKYU3ZaYDr2pY24lukSLBKIjFqxRfY+WI7m1MUy70imZd6UV6yYlOa+PPs T0k5TCeGM4H86we+EjQEMe/3A0NCmpgmtLkM3oYHGydb4c8sS0zRV8KIhnv/TzC0 S/Gy6sscNKVjbqJ8vgIZpBaAZWagvWj/D5pqKZbSbLLlEmLVSqo1SqGNhZtCXydN iJy5LuQO1A2rxBA90zqCrRXt6mgZKzQ= -----END CERTIFICATE-----Generated at Tue Jun 3 10:13:09 2025 by rpki-client