$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f609be04-d16a-3ea1-b01b-4ae2c692a6f3.roa File: f609be04-d16a-3ea1-b01b-4ae2c692a6f3.roa (raw, json) Hash identifier: o67WwtSJYcGy9XHHxR9a1OyTwYCTFxNjBRFjiXLMSVY= Subject key identifier: 8D:D6:3C:01:F4:0F:F4:37:96:EB:57:98:D8:80:A5:76:A4:13:93:09 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858495EEEEF56BD2AF83E2AE27C00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f609be04-d16a-3ea1-b01b-4ae2c692a6f3.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 9009 IP address blocks: 172.94.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:ef:56:bd:2a:f8:3e:2a:e2:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=68eccd6d-182c-41b1-8e85-f5f0fd3c71e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c5:f0:d8:c2:f9:57:74:f4:e1:e0:d3:71:aa: 6f:83:0b:ff:63:a0:0d:69:55:b3:58:98:10:41:d3: e2:8c:b2:0b:85:f5:23:ab:dd:7b:c2:27:b5:64:67: 26:51:11:8f:e8:ce:05:e7:96:b2:cb:03:ef:e9:f0: 68:fa:0e:d1:65:63:b3:43:b0:40:18:de:4f:8c:5e: 82:d3:b0:c4:8e:e6:a7:8e:23:78:4b:0d:01:53:ef: 69:e9:f7:30:e6:b6:e4:88:ef:3a:d5:69:19:ea:51: 46:bb:d5:f4:15:22:e2:ec:76:9b:d2:f8:2b:cd:c0: 88:ac:e4:4c:6d:6e:f9:86:99:c0:99:75:f1:d3:26: 70:30:64:31:3a:d7:29:51:4a:53:a8:c7:05:fd:96: 9d:ab:8c:b8:e8:38:9a:44:d6:09:40:49:e1:09:65: 55:33:08:98:90:af:f1:17:f2:28:58:57:6a:c3:83: 89:2d:e8:4e:b8:ad:5d:9b:00:66:8c:36:da:9f:f3: 0b:94:4e:67:f2:28:78:f8:5d:2b:bc:8b:20:5e:ab: f7:d3:9c:e9:64:c2:44:e1:22:06:43:96:06:58:38: 66:32:cb:c9:8b:5c:e6:fc:e5:33:2c:d6:26:8f:fe: ea:7b:5c:8f:66:a6:6e:b1:e6:fb:ed:7b:b4:6e:c1: 17:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D6:3C:01:F4:0F:F4:37:96:EB:57:98:D8:80:A5:76:A4:13:93:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f609be04-d16a-3ea1-b01b-4ae2c692a6f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d9:41:20:a4:c7:97:cb:68:fb:27:6d:e5:8d:a3:fb:85:6b: 1e:11:b7:6e:c7:89:f3:f2:e1:d7:ef:16:8e:8b:28:47:1d:bc: d9:59:6d:68:98:af:4c:22:5b:0e:fe:b1:c8:51:db:43:c7:7e: 54:e3:b8:65:5e:c4:ab:a7:fe:20:1d:5d:5e:6c:f7:d5:f5:52: 18:fa:45:8e:8e:c0:91:b5:78:f5:d6:bc:cf:17:56:02:c6:3d: 5d:4f:f5:02:83:c6:c5:da:21:bf:36:10:d2:0b:f0:d2:84:0c: ca:33:66:5c:9e:1d:6c:49:8e:90:41:e5:11:43:5e:70:35:9e: 11:67:9d:89:79:7a:f5:88:ec:7d:50:19:a1:b7:61:77:33:66: 80:61:7e:06:fe:91:ad:48:cd:cd:39:e1:34:4a:df:c9:21:e9: 7a:d7:13:ff:9d:85:f3:25:e3:56:c3:96:df:a1:dc:97:23:9a: 46:c6:48:23:a8:25:6c:a4:7e:2e:2a:4f:14:c5:da:b3:a0:41: 3a:6c:48:32:ef:4e:02:8c:a5:86:ba:0d:c8:ac:e6:fc:b7:89: bf:af:f6:78:38:a9:25:b9:1f:ab:65:f5:67:2e:a1:c9:88:0f: a3:bc:77:5b:1c:b2:95:d3:ac:d4:75:11:21:3c:b4:4b:02:63: 5f:66:4e:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7u9WvSr4PirifAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk NjhlY2NkNmQtMTgyYy00MWIxLThlODUtZjVmMGZkM2M3MWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsXw2ML5V3T04eDTcapvgwv/Y6ANaVWzWJgQ QdPijLILhfUjq917wie1ZGcmURGP6M4F55ayywPv6fBo+g7RZWOzQ7BAGN5PjF6C 07DEjuanjiN4Sw0BU+9p6fcw5rbkiO861WkZ6lFGu9X0FSLi7Hab0vgrzcCIrORM bW75hpnAmXXx0yZwMGQxOtcpUUpTqMcF/Zadq4y46DiaRNYJQEnhCWVVMwiYkK/x F/IoWFdqw4OJLehOuK1dmwBmjDban/MLlE5n8ih4+F0rvIsgXqv305zpZMJE4SIG Q5YGWDhmMsvJi1zm/OUzLNYmj/7qe1yPZqZuseb77Xu0bsEXrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3WPAH0D/Q3lutXmNiApXakE5MJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjYwOWJlMDQtZDE2YS0z ZWExLWIwMWItNGFlMmM2OTJhNmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrZQSCkx5fLaPsnbeWNo/uFax4Rt27HifPy4dfvFo6LKEcdvNlZbWiY r0wiWw7+schR20PHflTjuGVexKun/iAdXV5s99X1Uhj6RY6OwJG1ePXWvM8XVgLG PV1P9QKDxsXaIb82ENIL8NKEDMozZlyeHWxJjpBB5RFDXnA1nhFnnYl5evWI7H1Q GaG3YXczZoBhfgb+ka1Izc054TRK38kh6XrXE/+dhfMl41bDlt+h3JcjmkbGSCOo JWykfi4qTxTF2rOgQTpsSDLvTgKMpYa6Dcis5vy3ib+v9ng4qSW5H6tl9WcuocmI D6O8d1scspXTrNR1ESE8tEsCY19mTkI= -----END CERTIFICATE-----Generated at Fri Apr 11 23:50:10 2025 by rpki-client