$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cfdca6e7-fa4f-31ca-ba86-dc6a17535592.roa File: cfdca6e7-fa4f-31ca-ba86-dc6a17535592.roa (raw, json) Hash identifier: PqQl2kkMa48wod3vCY6UET+vofHrQLIjQo72e7ku+qI= Subject key identifier: EF:66:89:EF:A2:E0:41:3E:06:7F:A5:F1:6C:07:3E:AD:79:C6:6E:F9 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849DC8FC6F0D2190B1086C3F600 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cfdca6e7-fa4f-31ca-ba86-dc6a17535592.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 9009 IP address blocks: 172.94.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c6:f0:d2:19:0b:10:86:c3:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=fdc2d731-991a-4fb2-8597-fd1556b26957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9d:8c:b9:0d:5a:2f:35:c2:d0:f0:eb:90:97: 5d:68:17:f5:93:f8:24:b3:29:2f:73:f3:63:e7:c7: df:c6:0b:e6:72:91:9f:98:26:c4:f2:6e:e4:8e:b6: 5a:d4:10:a5:8d:95:5d:bc:e6:55:f5:72:6e:0c:ff: 4f:4e:07:e5:c4:18:59:6d:4b:8f:15:91:ae:48:a9: 25:a7:ac:16:89:fe:89:f9:ad:71:ac:44:4c:0b:ce: 69:80:2c:d1:05:0e:fd:52:92:3b:df:83:40:9d:63: e2:fd:31:bd:58:0d:6a:5e:0d:8f:26:b9:9f:07:dd: 8c:2f:37:10:22:2d:d0:67:99:b7:65:a4:89:c5:ac: af:65:47:9f:4d:d5:f1:9c:87:13:14:07:2f:5f:f4: 9c:ac:05:d7:74:96:92:bc:ba:fd:4b:0b:34:4b:16: b6:92:c5:dd:60:77:bb:49:32:4a:95:de:ce:4a:72: 27:e4:52:ce:b6:62:85:88:1e:aa:3f:3c:e5:d4:30: dc:74:f3:59:b5:27:f2:94:b1:ba:8a:98:bd:3f:af: 71:98:d1:83:69:75:ee:cb:85:a2:2f:c4:60:c9:39: 40:ff:b6:25:60:3a:d3:15:cf:77:f7:1a:4e:17:c3: b8:63:6e:a3:c8:40:2e:91:53:e9:a0:a9:10:28:a4: 75:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:66:89:EF:A2:E0:41:3E:06:7F:A5:F1:6C:07:3E:AD:79:C6:6E:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cfdca6e7-fa4f-31ca-ba86-dc6a17535592.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:39:f6:02:bc:d1:a6:91:2d:8f:a6:c0:94:c5:87:1a:52:c8: e3:24:3c:eb:02:6e:3e:b7:09:db:48:7e:bf:79:3d:fb:12:43: 02:b6:de:5a:7c:9a:1b:b8:1d:fb:a8:14:96:6b:12:b9:74:73: 2a:fa:70:10:c6:a3:52:7b:24:50:23:a7:f8:74:78:52:28:2f: 9f:bc:49:9c:66:ad:72:84:d9:8b:65:d2:d9:d5:6d:9c:6b:7f: 9c:47:c2:bc:f2:32:5d:19:76:d9:27:8c:9e:1e:9c:ce:f2:69: fb:4c:5c:db:79:a8:6e:fd:52:54:7f:4a:43:69:c5:d9:31:66: 74:77:46:9d:a2:a2:38:db:19:52:b1:28:72:9d:7e:47:eb:35: d7:00:88:ec:02:e7:b2:17:84:5a:c4:94:72:d0:c7:e5:56:0a: b2:5e:d1:25:cd:62:bb:52:eb:06:ee:35:48:46:d1:75:63:96: b0:83:37:31:53:c2:77:41:65:15:16:35:19:70:ec:7a:1e:77: 61:0b:ff:0e:68:ea:aa:2c:57:45:90:91:01:e6:2b:b8:4d:3e: d0:a1:8f:78:cb:46:f2:f7:e6:84:a8:83:39:7e:41:ea:05:47: e0:f3:da:5e:58:9e:0c:12:ac:f6:7f:1f:06:65:26:ec:93:4b: 8e:d9:e3:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8bw0hkLEIbD9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk ZmRjMmQ3MzEtOTkxYS00ZmIyLTg1OTctZmQxNTU2YjI2OTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm52MuQ1aLzXC0PDrkJddaBf1k/gksykvc/Nj 58ffxgvmcpGfmCbE8m7kjrZa1BCljZVdvOZV9XJuDP9PTgflxBhZbUuPFZGuSKkl p6wWif6J+a1xrERMC85pgCzRBQ79UpI734NAnWPi/TG9WA1qXg2PJrmfB92MLzcQ Ii3QZ5m3ZaSJxayvZUefTdXxnIcTFAcvX/ScrAXXdJaSvLr9Sws0Sxa2ksXdYHe7 STJKld7OSnIn5FLOtmKFiB6qPzzl1DDcdPNZtSfylLG6ipi9P69xmNGDaXXuy4Wi L8RgyTlA/7YlYDrTFc939xpOF8O4Y26jyEAukVPpoKkQKKR1WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9mie+i4EE+Bn+l8WwHPq15xm75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvY2ZkY2E2ZTctZmE0Zi0z MWNhLWJhODYtZGM2YTE3NTM1NTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg59gK80aaRLY+mwJTFhxpSyOMkPOsCbj63CdtIfr95PfsSQwK23lp8 mhu4HfuoFJZrErl0cyr6cBDGo1J7JFAjp/h0eFIoL5+8SZxmrXKE2Ytl0tnVbZxr f5xHwrzyMl0ZdtknjJ4enM7yaftMXNt5qG79UlR/SkNpxdkxZnR3Rp2iojjbGVKx KHKdfkfrNdcAiOwC57IXhFrElHLQx+VWCrJe0SXNYrtS6wbuNUhG0XVjlrCDNzFT wndBZRUWNRlw7Hoed2EL/w5o6qosV0WQkQHmK7hNPtChj3jLRvL35oSogzl+QeoF R+Dz2l5YngwSrPZ/HwZlJuyTS47Z46I= -----END CERTIFICATE-----Generated at Tue Jun 3 10:22:16 2025 by rpki-client