$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b3f244e3-32bf-3660-9dcf-ac2efb480d61.roa File: b3f244e3-32bf-3660-9dcf-ac2efb480d61.roa (raw, json) Hash identifier: ZLLjphq764dTJ5Fdmc0/ddhQ1+U0z2jF2n0jFvOK6C8= Subject key identifier: 98:61:7F:EC:64:B2:A5:42:B8:45:EE:4F:A1:45:8E:EC:F0:BE:51:62 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A093AA33956E2BCFADBD0B380 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b3f244e3-32bf-3660-9dcf-ac2efb480d61.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 9009 IP address blocks: 172.94.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:a3:39:56:e2:bc:fa:db:d0:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=097538ab-8824-487a-90e3-9520364a014a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:42:e5:23:93:9d:0e:06:ca:b4:05:8e:d0:b8: bb:2f:77:7d:58:5b:de:4e:62:21:c8:08:bf:d6:f6: 7e:ac:5d:ee:52:16:c5:7b:f3:ec:b2:3b:4d:f6:07: 52:70:56:28:75:d7:f1:41:29:c8:d6:c8:94:fe:6f: 6b:fc:fc:a8:6b:d4:71:a6:f3:be:f4:db:7a:2f:50: ce:90:1f:1e:1a:dc:b2:35:6a:eb:70:a3:3d:ba:48: f2:d5:f8:2d:83:2a:d0:c6:cf:35:e4:a4:d0:10:34: cd:83:e4:7a:b1:f9:83:9c:da:34:cc:b3:56:f1:26: 40:19:bc:8b:5e:09:44:49:2d:eb:75:2f:99:b5:d0: d5:1a:8f:52:67:eb:40:13:7c:ee:ec:c1:3a:a9:37: 24:28:af:e0:fc:15:b4:43:83:f5:f5:59:4a:ce:ef: e2:fd:c4:23:75:5e:4e:6b:69:d1:a3:a2:20:55:0f: 8c:0b:c7:63:84:64:1f:72:42:ba:4c:8a:e1:eb:90: c6:f9:2e:f5:37:f4:fc:16:fc:1a:1a:16:31:f7:f0: 6b:72:41:b0:6c:a0:45:c8:5f:39:a7:04:ed:41:24: f6:56:70:bd:a4:47:f9:55:0c:ec:b4:cb:a8:37:a4: aa:8e:dc:20:4e:6c:a0:a0:1e:b0:0e:1e:0f:51:dc: 5e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:61:7F:EC:64:B2:A5:42:B8:45:EE:4F:A1:45:8E:EC:F0:BE:51:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b3f244e3-32bf-3660-9dcf-ac2efb480d61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:98:d0:3c:ba:3f:8c:dd:3a:a2:a1:68:79:b6:c3:0c:94:0c: 84:2a:f7:70:48:d5:90:32:fd:57:ce:61:b9:c2:f3:46:66:46: 33:e7:56:cc:72:f5:88:17:75:a8:89:82:a7:db:57:72:12:42: ae:2b:99:63:3b:8a:d5:ab:0f:9c:31:1f:fa:de:8e:7c:8c:6b: a4:98:6b:c2:40:71:d7:92:29:83:8e:6b:47:ac:b1:65:e0:a9: e6:2d:5a:ff:5b:88:9c:08:14:f4:11:a7:fb:d1:a8:f6:9e:ed: d4:ea:81:43:21:d3:fe:35:e3:33:f4:e7:53:5a:5d:2b:2b:58: c2:13:3f:41:68:14:0e:42:0f:d5:ac:e4:29:20:50:7c:1b:9d: ed:a9:89:c2:ca:f3:4b:a5:92:bf:43:e0:db:a5:fc:9b:e7:45: 26:55:78:53:9e:78:35:8b:2e:5f:42:45:aa:8b:6e:39:f1:d4: ba:cc:ae:40:6e:bf:69:d9:5a:59:87:b7:6d:7c:7a:83:c0:57: 76:4c:1c:4b:14:16:3e:00:97:3d:aa:3f:c9:7d:90:9b:5a:81: 64:e4:88:26:08:ec:5d:87:fd:c8:6e:5c:1a:81:4b:e9:41:52: 95:b9:ba:59:52:b7:d0:4f:af:31:44:f1:8c:37:7a:c5:74:6c: 9e:6b:fb:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOqM5VuK8+tvQs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk MDk3NTM4YWItODgyNC00ODdhLTkwZTMtOTUyMDM2NGEwMTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoELlI5OdDgbKtAWO0Li7L3d9WFveTmIhyAi/ 1vZ+rF3uUhbFe/PssjtN9gdScFYoddfxQSnI1siU/m9r/Pyoa9RxpvO+9Nt6L1DO kB8eGtyyNWrrcKM9ukjy1fgtgyrQxs815KTQEDTNg+R6sfmDnNo0zLNW8SZAGbyL XglESS3rdS+ZtdDVGo9SZ+tAE3zu7ME6qTckKK/g/BW0Q4P19VlKzu/i/cQjdV5O a2nRo6IgVQ+MC8djhGQfckK6TIrh65DG+S71N/T8FvwaGhYx9/BrckGwbKBFyF85 pwTtQST2VnC9pEf5VQzstMuoN6SqjtwgTmygoB6wDh4PUdxe3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhhf+xksqVCuEXuT6FFjuzwvlFiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjNmMjQ0ZTMtMzJiZi0z NjYwLTlkY2YtYWMyZWZiNDgwZDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiY0Dy6P4zdOqKhaHm2wwyUDIQq93BI1ZAy/VfOYbnC80ZmRjPnVsxy 9YgXdaiJgqfbV3ISQq4rmWM7itWrD5wxH/rejnyMa6SYa8JAcdeSKYOOa0essWXg qeYtWv9biJwIFPQRp/vRqPae7dTqgUMh0/414zP051NaXSsrWMITP0FoFA5CD9Ws 5CkgUHwbne2picLK80ulkr9D4Nul/JvnRSZVeFOeeDWLLl9CRaqLbjnx1LrMrkBu v2nZWlmHt218eoPAV3ZMHEsUFj4Alz2qP8l9kJtagWTkiCYI7F2H/chuXBqBS+lB UpW5ullSt9BPrzFE8Yw3esV0bJ5r+3c= -----END CERTIFICATE-----Generated at Tue Jun 3 10:22:15 2025 by rpki-client