$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9575200-c843-3805-a2a1-6a268b2c9334.roa File: c9575200-c843-3805-a2a1-6a268b2c9334.roa (raw, json) Hash identifier: 2Z8DfHBErgGsg9LiqpPCkcSjjJc7mCn6OtMxbTvadUA= Subject key identifier: 5D:7F:93:02:F5:94:C4:1E:F7:4B:81:72:35:13:A7:D4:B6:E7:AF:4B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849FCAA7507BDC51808A87EFE00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9575200-c843-3805-a2a1-6a268b2c9334.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 9009 IP address blocks: 172.94.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:75:07:bd:c5:18:08:a8:7e:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=1dd3ad5f-dbc8-4568-bb78-7cccc8a7c9e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:39:69:45:58:f2:a9:2c:a0:99:33:c6:d0:8c: 19:08:cc:c5:37:56:9d:6c:a8:6d:ad:ad:f7:cb:bf: 1d:c6:4e:3e:c4:54:e7:99:23:53:6f:8d:01:be:ac: 0a:1b:d1:98:a6:ea:8b:91:71:22:bc:0f:78:b5:54: 15:0c:25:7a:91:3e:55:a4:9e:df:e0:b2:9a:f7:eb: 81:1a:75:90:d7:e3:87:88:7c:94:bc:39:ee:e9:cf: b7:13:23:0d:7f:37:05:89:7e:2e:d9:b2:fe:3d:00: 24:16:e1:5a:6e:92:6c:8b:5c:c1:1e:04:a8:b7:23: 1c:0f:bf:57:19:a8:b1:bf:1c:9a:b3:53:7b:fb:78: 1a:b4:37:f5:ed:fa:27:95:97:82:b2:2d:63:e5:6e: 0b:6a:a2:8b:c8:f8:51:ed:b7:0f:c9:70:92:95:ba: 3e:e4:d9:1b:06:bf:1e:0c:0a:3e:18:0d:d9:7e:c6: 29:b2:6b:f0:ac:0f:19:0f:28:f0:3e:e7:ed:d8:a7: 3a:0a:01:b0:fa:fb:d7:7b:3f:42:84:13:0a:fa:00: 74:02:59:6a:46:c3:93:d0:de:9a:e3:9b:62:80:77: 5a:d5:ae:83:a0:28:6d:5a:fb:8c:99:eb:f3:9f:94: 0a:33:fe:ba:cd:f5:e1:8f:45:95:87:39:15:a7:fa: bd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7F:93:02:F5:94:C4:1E:F7:4B:81:72:35:13:A7:D4:B6:E7:AF:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9575200-c843-3805-a2a1-6a268b2c9334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:64:f0:70:ed:f6:11:90:3b:2e:d0:ef:bb:7a:2a:e8:69:fc: 40:c5:80:2c:ad:4d:2e:cd:0b:4a:7f:ff:42:36:ba:44:f5:5e: e6:6e:0d:6f:e2:e0:13:69:3b:e8:e5:20:9f:6a:0e:eb:2e:dc: d0:a5:8f:01:6a:21:ce:43:c0:3b:5e:9f:d7:3a:0d:69:5e:e0: 93:39:67:8c:93:83:ac:56:74:63:39:9b:31:b9:8c:8d:c1:14: 25:e9:d8:b7:af:57:c3:a7:c6:e9:b4:05:3d:86:c3:8b:e1:1f: 2f:76:a0:cf:0e:72:11:4e:c8:62:e9:f4:b0:8f:71:a0:00:54: 0d:5b:66:be:d9:97:69:54:8b:26:d8:ee:49:e3:b0:a9:09:c7: b8:2b:bb:d2:2c:4c:d6:ba:7b:61:52:73:cb:2f:55:6c:a9:9f: 31:44:79:28:66:bc:cd:b7:59:d0:25:63:05:a6:52:54:8b:4d: a3:a0:38:44:b5:d3:45:e1:3f:71:e9:e9:82:24:a6:36:f6:97: e4:71:39:cb:e4:7e:ea:87:5e:a3:6d:71:6c:e5:bf:a3:c2:fe: 65:9c:b1:c0:99:7c:06:ba:78:76:c6:ef:99:d1:18:03:9f:5b: 32:7f:df:f7:90:49:dc:db:25:11:7f:f3:83:7d:9c:a5:e5:16: fe:ed:56:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qnUHvcUYCKh+/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk MWRkM2FkNWYtZGJjOC00NTY4LWJiNzgtN2NjY2M4YTdjOWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DlpRVjyqSygmTPG0IwZCMzFN1adbKhtra33 y78dxk4+xFTnmSNTb40BvqwKG9GYpuqLkXEivA94tVQVDCV6kT5VpJ7f4LKa9+uB GnWQ1+OHiHyUvDnu6c+3EyMNfzcFiX4u2bL+PQAkFuFabpJsi1zBHgSotyMcD79X Gaixvxyas1N7+3gatDf17fonlZeCsi1j5W4LaqKLyPhR7bcPyXCSlbo+5NkbBr8e DAo+GA3ZfsYpsmvwrA8ZDyjwPuft2Kc6CgGw+vvXez9ChBMK+gB0AllqRsOT0N6a 45tigHda1a6DoChtWvuMmevzn5QKM/66zfXhj0WVhzkVp/q9aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1/kwL1lMQe90uBcjUTp9S2569LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzk1NzUyMDAtYzg0My0z ODA1LWEyYTEtNmEyNjhiMmM5MzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhk8HDt9hGQOy7Q77t6Kuhp/EDFgCytTS7NC0p//0I2ukT1XuZuDW/i 4BNpO+jlIJ9qDusu3NCljwFqIc5DwDten9c6DWle4JM5Z4yTg6xWdGM5mzG5jI3B FCXp2LevV8Onxum0BT2Gw4vhHy92oM8OchFOyGLp9LCPcaAAVA1bZr7Zl2lUiybY 7knjsKkJx7gru9IsTNa6e2FSc8svVWypnzFEeShmvM23WdAlYwWmUlSLTaOgOES1 00XhP3Hp6YIkpjb2l+RxOcvkfuqHXqNtcWzlv6PC/mWcscCZfAa6eHbG75nRGAOf WzJ/3/eQSdzbJRF/84N9nKXlFv7tVic= -----END CERTIFICATE-----Generated at Tue Jun 3 10:20:25 2025 by rpki-client