$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/acf3baa7-dbc1-3afc-af90-183681c6f600.roa File: acf3baa7-dbc1-3afc-af90-183681c6f600.roa (raw, json) Hash identifier: u2YDATuk1hZCIBofiE/3SSA27qkw4RnOEqPsQV3sKpI= Subject key identifier: 5A:10:5A:54:4B:C2:1D:E5:D0:15:15:13:7A:B5:0D:41:9A:D9:53:FA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849C904EF5CBCCC64CC137B2C00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/acf3baa7-dbc1-3afc-af90-183681c6f600.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 9009 IP address blocks: 172.94.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:ef:5c:bc:cc:64:cc:13:7b:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=4e45b904-c451-471e-8ba3-6a755be80cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:25:09:84:3e:23:1e:93:1d:8d:7b:7d:7b:e3: 33:69:f5:52:76:d2:92:42:5b:97:dd:5f:68:91:a9: 5f:05:68:39:b2:bb:d7:9a:e2:66:ce:b2:d0:f3:5d: f5:67:c5:e8:0e:bb:fe:11:4e:06:51:dd:04:0f:31: ab:de:08:ab:f9:8b:4e:11:10:29:98:6c:ef:de:ff: fe:5a:0b:1b:79:e1:f6:d5:15:8d:51:ad:86:58:ee: 47:87:1f:a8:ca:7a:46:3e:cd:4a:bb:8d:e6:21:f2: 4a:c2:5a:bd:9e:e4:db:c0:1b:b8:f1:23:9a:b7:2f: ce:0f:0f:7e:9c:8e:ee:07:db:b4:e9:3a:d9:03:de: 88:74:e5:72:29:c0:86:40:c2:73:63:3a:0a:67:0d: b0:83:89:a0:47:fb:9e:a5:c5:4b:c1:87:ef:42:d2: 8a:2f:83:54:65:05:20:eb:93:5f:ea:b1:b2:bc:f5: 0d:45:9d:d7:fa:ee:53:22:ec:14:10:f9:dd:e1:d7: c1:ad:76:5c:14:53:ee:22:84:43:2c:8e:ce:68:d9: bc:1d:a1:f5:b6:ed:e7:b9:8f:6f:99:4e:34:36:b9: cc:22:e4:ab:4e:b3:81:d0:f9:81:c9:4b:93:d3:1f: e6:a9:26:80:d4:34:da:a3:10:9d:49:00:19:92:cb: e8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:10:5A:54:4B:C2:1D:E5:D0:15:15:13:7A:B5:0D:41:9A:D9:53:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/acf3baa7-dbc1-3afc-af90-183681c6f600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:2b:7c:35:54:26:c6:df:fa:76:12:03:b4:70:3e:99:42:20: ec:e2:86:ad:1d:b4:ba:b8:7e:44:d2:ac:cf:59:e9:8a:cf:ee: 68:bd:38:7e:fa:e6:c3:ba:1b:ec:0a:32:0a:f1:16:da:c6:a3: 04:f3:b2:dc:ca:31:e5:66:ce:36:83:47:a5:5f:f8:3d:65:f2: 9a:84:3c:fc:a6:56:85:af:7d:e3:20:77:9d:8e:a6:a3:e3:54: 1a:35:5b:c9:cc:2b:35:f4:85:8f:4e:38:1e:1c:19:3a:be:2e: bf:d6:11:1a:45:0a:a7:a0:77:a7:80:3c:29:75:a2:85:81:41: ff:7c:79:24:47:ac:75:28:e7:c0:40:33:26:27:9a:f7:50:7c: 27:0e:a9:28:09:77:69:9d:6a:ee:83:e1:9a:cf:6c:17:8a:08: 6b:b4:81:da:42:9d:f4:a4:b2:a2:02:50:52:3b:77:bd:07:f2: c3:39:49:a0:60:c8:92:16:0f:e9:12:17:81:ce:67:de:3e:d8: 11:40:3b:fb:fa:e9:ad:e2:50:cc:14:5d:20:e7:68:c1:3d:c1: 06:98:0b:26:67:4f:6c:57:f1:02:64:f9:e6:42:03:59:b4:64: 59:17:5b:2a:b0:9a:b6:9c:3d:5f:4e:ff:a9:9c:9a:9f:40:da: 5c:ee:ab:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBO9cvMxkzBN7LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk NGU0NWI5MDQtYzQ1MS00NzFlLThiYTMtNmE3NTViZTgwY2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCUJhD4jHpMdjXt9e+MzafVSdtKSQluX3V9o kalfBWg5srvXmuJmzrLQ8131Z8XoDrv+EU4GUd0EDzGr3gir+YtOERApmGzv3v/+ WgsbeeH21RWNUa2GWO5Hhx+oynpGPs1Ku43mIfJKwlq9nuTbwBu48SOaty/ODw9+ nI7uB9u06TrZA96IdOVyKcCGQMJzYzoKZw2wg4mgR/uepcVLwYfvQtKKL4NUZQUg 65Nf6rGyvPUNRZ3X+u5TIuwUEPnd4dfBrXZcFFPuIoRDLI7OaNm8HaH1tu3nuY9v mU40NrnMIuSrTrOB0PmByUuT0x/mqSaA1DTaoxCdSQAZksvoZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoQWlRLwh3l0BUVE3q1DUGa2VP6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWNmM2JhYTctZGJjMS0z YWZjLWFmOTAtMTgzNjgxYzZmNjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMrfDVUJsbf+nYSA7RwPplCIOzihq0dtLq4fkTSrM9Z6YrP7mi9OH76 5sO6G+wKMgrxFtrGowTzstzKMeVmzjaDR6Vf+D1l8pqEPPymVoWvfeMgd52OpqPj VBo1W8nMKzX0hY9OOB4cGTq+Lr/WERpFCqegd6eAPCl1ooWBQf98eSRHrHUo58BA MyYnmvdQfCcOqSgJd2mdau6D4ZrPbBeKCGu0gdpCnfSksqICUFI7d70H8sM5SaBg yJIWD+kSF4HOZ94+2BFAO/v66a3iUMwUXSDnaME9wQaYCyZnT2xX8QJk+eZCA1m0 ZFkXWyqwmracPV9O/6mcmp9A2lzuq8o= -----END CERTIFICATE-----Generated at Tue Jun 3 10:11:42 2025 by rpki-client