$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf59dab7-cd9f-3dc0-85d9-26b5cc9b4882.roa File: bf59dab7-cd9f-3dc0-85d9-26b5cc9b4882.roa (raw, json) Hash identifier: QAwSy3a8kfsUixwOcp2JM3ch8l7J+gH9Qet1OWw8ij8= Subject key identifier: 0B:6C:3B:E0:4A:A9:18:AD:E0:41:A1:73:10:5C:15:A9:7D:49:15:F2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A10354AEE7A933B67339FDF00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf59dab7-cd9f-3dc0-85d9-26b5cc9b4882.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 9009 IP address blocks: 172.94.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:4a:ee:7a:93:3b:67:33:9f:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=68343a02-f654-4c41-933b-50f9f1675bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:aa:0e:49:5c:ed:3c:15:e5:be:48:45:7f:f8: e0:98:07:53:85:28:5c:66:3d:fa:11:f2:17:f9:17: 0b:78:49:d6:53:d0:50:45:97:ed:08:94:4c:b9:0f: 65:20:00:93:e2:88:de:22:48:2a:25:da:dc:aa:c0: 99:ef:a5:93:bc:e3:be:c5:cf:e6:0b:45:03:6f:aa: 91:09:f1:e3:32:4b:ca:46:23:ca:d6:91:ac:41:bf: 4f:54:33:34:c2:fa:c4:d0:2d:01:79:24:f2:03:fe: 25:17:33:9e:a9:e0:7c:5d:a0:e5:60:05:c8:7b:3f: 88:dc:de:ed:42:3a:eb:a4:b3:a0:20:ab:7e:dc:af: 29:4e:da:e3:31:69:07:e1:b0:03:48:7f:65:1f:b3: 2c:44:76:06:f9:87:73:1c:b6:09:9f:d0:98:45:c2: ef:06:a9:6a:f0:eb:c7:c1:3a:78:b2:9b:fc:c2:d2: 0a:7e:72:5e:be:7d:b3:b8:c5:0b:7e:5c:20:aa:b8: c4:58:e3:43:24:cd:4a:cd:58:93:e4:b2:a1:da:be: c0:90:b3:06:27:f8:c1:a1:e0:4e:53:07:2d:0c:b2: 02:7d:40:89:39:82:e1:c5:94:bd:01:4a:5d:4c:7a: aa:c7:e7:62:11:4b:fc:71:60:58:e4:9a:84:f9:56: 34:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6C:3B:E0:4A:A9:18:AD:E0:41:A1:73:10:5C:15:A9:7D:49:15:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf59dab7-cd9f-3dc0-85d9-26b5cc9b4882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:8a:7c:c0:5c:19:31:b9:5a:f7:a8:c3:a9:48:34:34:ea:80: 58:06:6d:20:fa:93:8b:e4:1c:31:8f:95:e9:42:36:09:5f:22: 11:2d:b1:05:af:32:42:8a:8c:40:85:6e:4e:fe:48:2b:7e:00: 6b:07:2f:47:b7:69:3d:46:1c:f2:c4:4d:37:c3:69:0f:ca:a2: 7b:79:56:b1:1b:cb:3c:e1:37:a3:af:bd:cf:b8:75:98:14:7c: 1c:1e:f2:28:2c:c2:f1:fc:48:2a:81:c2:7e:66:4d:8d:08:e4: 48:87:9c:ad:bd:71:b1:d2:08:21:e6:1d:47:53:dd:a2:1b:10: 63:4a:cf:af:50:fd:dd:e3:2c:d3:10:f7:80:d2:30:ac:bf:60: f5:00:a4:8b:50:e8:75:8e:b7:df:2f:e4:2c:7c:da:8e:ce:d8: 5b:20:10:6a:ac:72:b6:43:03:d5:96:dd:ab:2e:b2:1f:e5:4f: 1a:c7:bb:10:ae:21:de:37:57:22:f3:0d:f3:f0:35:f9:cc:2a: be:44:38:68:fe:e5:66:b7:49:5b:39:44:43:57:7c:92:15:cf: ee:f6:20:90:89:90:f6:69:88:d7:f7:2f:7b:8a:b9:75:82:4a: 23:2f:bc:68:7e:8b:e9:00:f8:4d:92:fa:bd:f0:e2:59:f1:69: 3b:1a:44:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUruepM7ZzOf3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk NjgzNDNhMDItZjY1NC00YzQxLTkzM2ItNTBmOWYxNjc1YmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKoOSVztPBXlvkhFf/jgmAdThShcZj36EfIX +RcLeEnWU9BQRZftCJRMuQ9lIACT4ojeIkgqJdrcqsCZ76WTvOO+xc/mC0UDb6qR CfHjMkvKRiPK1pGsQb9PVDM0wvrE0C0BeSTyA/4lFzOeqeB8XaDlYAXIez+I3N7t QjrrpLOgIKt+3K8pTtrjMWkH4bADSH9lH7MsRHYG+YdzHLYJn9CYRcLvBqlq8OvH wTp4spv8wtIKfnJevn2zuMULflwgqrjEWONDJM1KzViT5LKh2r7AkLMGJ/jBoeBO UwctDLICfUCJOYLhxZS9AUpdTHqqx+diEUv8cWBY5JqE+VY0xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtsO+BKqRit4EGhcxBcFal9SRXyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmY1OWRhYjctY2Q5Zi0z ZGMwLTg1ZDktMjZiNWNjOWI0ODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKKfMBcGTG5Wveow6lINDTqgFgGbSD6k4vkHDGPlelCNglfIhEtsQWv MkKKjECFbk7+SCt+AGsHL0e3aT1GHPLETTfDaQ/Kont5VrEbyzzhN6Ovvc+4dZgU fBwe8igswvH8SCqBwn5mTY0I5EiHnK29cbHSCCHmHUdT3aIbEGNKz69Q/d3jLNMQ 94DSMKy/YPUApItQ6HWOt98v5Cx82o7O2FsgEGqscrZDA9WW3asush/lTxrHuxCu Id43VyLzDfPwNfnMKr5EOGj+5Wa3SVs5RENXfJIVz+72IJCJkPZpiNf3L3uKuXWC SiMvvGh+i+kA+E2S+r3w4lnxaTsaRGU= -----END CERTIFICATE-----Generated at Tue Jun 3 10:14:36 2025 by rpki-client