$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1b299a5d-e2b2-3ad0-bf84-ac8f651c12f2.roa File: 1b299a5d-e2b2-3ad0-bf84-ac8f651c12f2.roa (raw, json) Hash identifier: w7k8XZEOZmJHZSGvwV2O3UpcsmOnKpoSJoQNt5Jy8fY= Subject key identifier: 34:A8:62:5F:2F:D4:F9:0E:95:13:17:28:65:25:3F:6D:48:E9:5D:DD Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A3B65BF23D0F056FB75BF0B80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1b299a5d-e2b2-3ad0-bf84-ac8f651c12f2.roa Signing time: Wed 18 Jun 2025 12:18:28 +0000 ROA not before: Wed 18 Jun 2025 12:18:28 +0000 ROA not after: Tue 16 Sep 2025 12:18:28 +0000 asID: 29802 IP address blocks: 172.94.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:65:bf:23:d0:f0:56:fb:75:bf:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 18 12:18:28 2025 GMT Not After : Sep 16 12:18:28 2025 GMT Subject: CN=551510a9-8d7f-4162-9439-87cf63e1aaea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:a4:c4:2d:f1:c0:24:43:0c:90:1b:0d:00: ed:46:6a:a1:de:05:f8:5e:61:fb:89:9a:03:17:ba: cc:c4:8d:2c:67:3c:f1:1c:46:57:48:10:db:d3:5a: 75:98:47:09:cc:7c:1c:d6:7f:8b:4d:42:c0:82:3a: 1e:c7:27:ac:77:f1:b1:48:1b:5a:77:9f:a3:c1:44: 16:8e:ab:ac:bb:70:33:03:ac:f8:07:2b:dc:bf:2d: d6:82:fd:47:8f:09:9b:55:b4:3a:c7:96:c5:90:b7: 72:e8:fa:25:c9:d5:7d:11:ce:c3:3f:ef:c5:a0:2e: 08:f3:dd:0b:98:4f:65:44:8d:d6:17:a2:1f:77:04: 0d:ed:ad:ad:b9:0d:02:0b:4e:ac:98:78:5a:70:4d: 6f:98:2d:56:e1:e5:bb:6a:75:04:fb:ce:f4:1a:6a: 02:bd:64:0c:eb:31:ce:1a:33:60:98:69:cb:96:f9: 83:a9:f7:11:53:37:0c:54:9e:4b:fe:ad:d7:9a:38: e9:73:ec:b6:b4:b4:f8:b7:36:62:75:9c:17:46:4b: b3:57:47:11:4c:7a:a8:00:e3:d4:ce:1c:23:e9:21: 9f:44:ed:ac:91:74:c6:04:6f:67:e8:2e:13:00:3d: 60:f4:ca:4d:7c:bf:79:ce:f3:e6:d5:79:6d:75:c2: f5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A8:62:5F:2F:D4:F9:0E:95:13:17:28:65:25:3F:6D:48:E9:5D:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1b299a5d-e2b2-3ad0-bf84-ac8f651c12f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:27:91:91:6a:1a:fc:e5:10:15:d3:bf:4c:26:05:8e:fd:88: a9:84:38:66:23:e1:9e:97:1a:68:2b:b4:e5:b5:f3:a2:04:45: 55:1b:58:9e:52:40:5a:ee:7f:68:6f:9a:cc:7b:3e:96:9f:4d: e8:b3:5d:4b:d7:31:3b:5c:a9:40:8b:ef:0a:31:74:0b:d8:2b: b4:b9:b0:82:9d:4a:4b:2b:bc:e4:5d:0a:fd:a3:84:09:67:d3: d2:89:36:37:52:13:12:ac:3f:d9:40:ed:ee:d8:50:7a:a9:44: db:20:21:73:4f:6e:d4:e6:56:f3:89:ec:2e:23:a2:76:c1:53: 90:67:f0:04:de:32:00:8c:e7:c5:89:c7:d7:43:ce:d4:c2:57: 40:64:86:ee:f4:60:93:31:5a:af:42:99:f6:d4:39:d6:41:a2: 33:d4:f6:88:1c:00:d0:3a:6a:67:9b:f2:94:ff:11:53:7c:f4: ac:37:e5:58:34:00:c4:a6:f3:cc:b0:c5:ea:dd:c4:4d:ce:8d: 3c:20:63:9e:af:53:66:82:39:4d:5c:ad:07:01:39:41:e2:0d: 35:52:99:00:d3:a9:27:11:4d:72:b6:67:51:c0:ab:7c:a3:c6: 4a:bb:8d:d6:c2:57:ed:11:30:95:61:8d:37:7e:2f:ee:f7:2c: 90:f5:a6:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7Zb8j0PBW+3W/C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxODEyMTgyOFoXDTI1MDkxNjEyMTgyOFowLzEtMCsGA1UEAxMk NTUxNTEwYTktOGQ3Zi00MTYyLTk0MzktODdjZjYzZTFhYWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUKkxC3xwCRDDJAbDQDtRmqh3gX4XmH7iZoD F7rMxI0sZzzxHEZXSBDb01p1mEcJzHwc1n+LTULAgjoexyesd/GxSBtad5+jwUQW jqusu3AzA6z4Byvcvy3Wgv1HjwmbVbQ6x5bFkLdy6PolydV9Ec7DP+/FoC4I890L mE9lRI3WF6IfdwQN7a2tuQ0CC06smHhacE1vmC1W4eW7anUE+870GmoCvWQM6zHO GjNgmGnLlvmDqfcRUzcMVJ5L/q3Xmjjpc+y2tLT4tzZidZwXRkuzV0cRTHqoAOPU zhwj6SGfRO2skXTGBG9n6C4TAD1g9MpNfL95zvPm1XltdcL1fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSoYl8v1PkOlRMXKGUlP21I6V3dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWIyOTlhNWQtZTJiMi0z YWQwLWJmODQtYWM4ZjY1MWMxMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsnkZFqGvzlEBXTv0wmBY79iKmEOGYj4Z6XGmgrtOW186IERVUbWJ5S QFruf2hvmsx7PpafTeizXUvXMTtcqUCL7woxdAvYK7S5sIKdSksrvORdCv2jhAln 09KJNjdSExKsP9lA7e7YUHqpRNsgIXNPbtTmVvOJ7C4jonbBU5Bn8ATeMgCM58WJ x9dDztTCV0Bkhu70YJMxWq9CmfbUOdZBojPU9ogcANA6ameb8pT/EVN89Kw35Vg0 AMSm88ywxerdxE3OjTwgY56vU2aCOU1crQcBOUHiDTVSmQDTqScRTXK2Z1HAq3yj xkq7jdbCV+0RMJVhjTd+L+73LJD1po8= -----END CERTIFICATE-----Generated at Sun Jun 29 14:42:38 2025 by rpki-client