$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa File: a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa (raw, json) Hash identifier: +FYjUk3+LFP/vZ3OcN/34vpQsfs1LYSH/mjnWhGGQb0= Subject key identifier: 36:E7:C4:56:94:BE:59:6B:B9:02:CE:07:70:D5:50:07:A9:E6:89:71 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849FE0FFB583DF23B702F1A3F00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa Signing time: Tue 27 May 2025 13:01:05 +0000 ROA not before: Tue 27 May 2025 13:01:05 +0000 ROA not after: Mon 25 Aug 2025 13:01:05 +0000 asID: 40676 IP address blocks: 172.94.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:0f:fb:58:3d:f2:3b:70:2f:1a:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 27 13:01:05 2025 GMT Not After : Aug 25 13:01:05 2025 GMT Subject: CN=ebf465ea-36ea-4d11-81cd-3ce6525a1cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9e:81:9a:53:ce:2b:8a:2c:ca:89:80:70:bb: 81:c1:65:8b:b2:0b:c4:67:07:34:e7:b6:56:b1:a1: 33:83:ef:98:ca:ec:cc:9d:8b:36:bd:87:66:89:d3: 28:eb:b2:2c:61:60:b0:08:ea:8a:41:b3:04:24:a5: 7d:a3:0f:3c:31:70:7b:0e:d1:87:30:e9:93:35:91: ec:a4:b3:d6:23:9c:12:e7:64:77:64:4c:c5:4c:08: 65:e2:85:f3:d4:8d:45:73:21:0f:04:c6:c3:e1:6d: 33:28:99:63:ba:f8:ac:6f:20:52:94:17:c0:0b:62: 2c:0a:e5:1f:de:dd:4d:59:42:07:8b:d2:26:41:9f: cf:0e:f1:53:b7:eb:e1:b6:ea:f1:a9:41:76:7c:3b: c5:e4:fe:28:2d:df:20:93:57:a5:32:cd:ab:7c:6b: b3:b0:07:1e:b0:78:32:c1:0d:3a:45:40:1f:de:11: a6:99:fa:a2:d7:2c:a3:96:4b:84:b6:68:ee:7d:f9: 08:31:02:0f:6e:0f:1b:b6:a9:c9:5f:d9:c6:6f:a8: 09:9c:85:76:ca:e5:b8:4c:b8:ea:3b:72:18:95:5a: 34:7a:17:1b:c0:39:18:6a:ad:ac:31:00:ac:20:8b: c3:8b:6d:b8:cf:41:53:f8:e2:e6:cb:f2:ae:5a:79: df:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E7:C4:56:94:BE:59:6B:B9:02:CE:07:70:D5:50:07:A9:E6:89:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:be:20:f4:a2:5a:e9:e3:61:4e:72:f2:c0:b7:0e:31:46:cc: a2:e3:11:9e:53:b7:12:03:77:59:48:c7:d8:20:fc:61:1d:69: f5:8d:4e:15:bc:c4:69:55:50:4a:aa:5e:19:dc:6f:04:8a:db: 16:bf:1e:99:4c:d6:5a:50:d7:6f:5b:79:4f:3a:8b:37:43:4a: 1a:3f:11:8f:5b:eb:43:8e:14:00:86:c6:ec:f6:51:64:3d:e8: 5f:8a:99:e4:79:17:fa:0c:ba:ab:f3:98:b6:59:87:d5:9a:3e: 00:29:4f:e5:d0:fe:04:a2:14:0a:13:d9:67:d7:8a:21:8e:d3: af:de:9d:44:70:79:09:0e:bd:38:7e:bc:36:84:ac:9e:91:6c: 24:4a:82:31:9e:f6:38:b1:a8:24:1a:46:e2:1e:4f:19:2f:a4: 7b:d2:69:0a:1c:65:da:ed:91:79:6e:7f:7c:48:7a:d4:18:74: 1b:80:09:96:0c:d8:75:d0:bd:e6:53:69:93:d0:32:49:19:1b: 53:07:01:e0:f8:54:10:c5:6f:81:be:93:dc:9f:fa:30:5a:37: 6b:7f:77:91:37:1c:88:0e:43:97:ab:78:6c:f2:be:6c:04:50: f6:b2:01:8a:6b:25:08:1a:72:18:45:bc:09:fd:d5:30:e1:75: d8:63:db:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D/tYPfI7cC8aPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk ZWJmNDY1ZWEtMzZlYS00ZDExLTgxY2QtM2NlNjUyNWExY2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh56BmlPOK4osyomAcLuBwWWLsgvEZwc057ZW saEzg++YyuzMnYs2vYdmidMo67IsYWCwCOqKQbMEJKV9ow88MXB7DtGHMOmTNZHs pLPWI5wS52R3ZEzFTAhl4oXz1I1FcyEPBMbD4W0zKJljuvisbyBSlBfAC2IsCuUf 3t1NWUIHi9ImQZ/PDvFTt+vhturxqUF2fDvF5P4oLd8gk1elMs2rfGuzsAcesHgy wQ06RUAf3hGmmfqi1yyjlkuEtmjuffkIMQIPbg8btqnJX9nGb6gJnIV2yuW4TLjq O3IYlVo0ehcbwDkYaq2sMQCsIIvDi224z0FT+OLmy/KuWnnfgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbnxFaUvllruQLOB3DVUAep5olxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTg3ZWEzZDQtOGVmMi0z Y2VkLTlkYzgtYWEyM2QyNjZiMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2+IPSiWunjYU5y8sC3DjFGzKLjEZ5TtxIDd1lIx9gg/GEdafWNThW8 xGlVUEqqXhncbwSK2xa/HplM1lpQ129beU86izdDSho/EY9b60OOFACGxuz2UWQ9 6F+KmeR5F/oMuqvzmLZZh9WaPgApT+XQ/gSiFAoT2WfXiiGO06/enURweQkOvTh+ vDaErJ6RbCRKgjGe9jixqCQaRuIeTxkvpHvSaQocZdrtkXluf3xIetQYdBuACZYM 2HXQveZTaZPQMkkZG1MHAeD4VBDFb4G+k9yf+jBaN2t/d5E3HIgOQ5ereGzyvmwE UPayAYprJQgachhFvAn91TDhddhj27Q= -----END CERTIFICATE-----Generated at Sat Jun 7 11:47:20 2025 by rpki-client