$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e6ff693-73d2-3f96-8db3-7727cb7e12d8.roa File: 1e6ff693-73d2-3f96-8db3-7727cb7e12d8.roa (raw, json) Hash identifier: tkSNwSLso3qHOFWZ/YWngvlIC+c6XK14Iq7natvgkH0= Subject key identifier: CA:AA:BC:3F:0F:4B:B6:7A:70:9D:C6:B5:C5:86:8B:CD:A3:3B:5D:38 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A23C0172A7CE2E1C7355F5AC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e6ff693-73d2-3f96-8db3-7727cb7e12d8.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 9009 IP address blocks: 172.94.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:17:2a:7c:e2:e1:c7:35:5f:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=4b8d3e5b-4e91-499b-9ee6-202f1ce67763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bb:d5:1e:b6:b3:3f:41:7e:c1:d3:68:c0:22: 69:8a:38:2c:0a:f6:5d:c5:b0:9a:d8:88:dd:4c:96: e2:d7:a0:6a:34:55:82:30:a6:75:c7:96:28:1c:15: a5:b0:f3:d3:9a:54:97:91:00:ce:0c:e0:1d:18:22: 15:e4:83:4d:c4:26:80:37:82:ec:b5:06:d2:fe:a6: b5:f3:84:f8:93:62:56:d6:9c:38:39:ba:8a:be:6e: 87:b4:36:fa:3c:eb:47:02:8c:38:ae:0a:60:8d:7e: b2:74:90:0e:b2:ac:e2:e1:e7:11:a6:a6:8a:0a:15: 87:a6:82:0b:77:fb:5c:5d:84:79:c0:84:4f:64:d0: 5d:be:9a:64:46:8f:12:86:cc:0c:59:11:ec:27:22: 79:26:4e:f3:25:ca:30:80:68:ff:b4:2e:69:99:e5: 6b:8b:3c:53:aa:1b:21:df:6d:20:0a:ce:25:eb:71: c9:ed:55:6e:99:91:1e:ab:36:a5:b7:4f:d0:a4:77: 4f:24:ea:5c:c4:eb:4d:2d:f6:b0:28:42:d4:29:33: 4b:2c:04:91:bb:b9:52:d6:32:65:43:99:cd:e5:f8: ba:36:04:94:4f:e1:8b:72:f7:22:2d:02:9d:27:d5: fc:0c:a7:ef:51:c4:a2:06:3b:c0:28:55:68:87:8b: c3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AA:BC:3F:0F:4B:B6:7A:70:9D:C6:B5:C5:86:8B:CD:A3:3B:5D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e6ff693-73d2-3f96-8db3-7727cb7e12d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c9:10:32:c5:ac:40:85:40:ee:fb:fc:46:37:6d:f0:cd:3c: 3a:c2:02:45:26:f4:87:f0:09:38:52:80:3c:1a:7b:a0:16:33: 49:85:64:12:ec:d0:e0:de:75:47:a8:eb:24:2e:5a:36:06:36: f0:d0:72:3f:ac:6d:19:b6:20:84:68:5d:71:3d:25:d5:3b:5e: 9a:7c:31:65:7b:98:67:7c:1b:84:6b:85:f5:3d:a9:ea:09:93: 3c:8e:cb:ce:5f:e1:7f:ad:1d:16:fb:6b:5d:9e:ed:48:98:0b: d1:24:09:3d:99:9f:ac:75:45:b9:6f:2d:be:4a:98:5a:12:38: be:f3:ca:f0:23:40:50:c6:42:2b:87:b8:c9:82:c8:75:32:4b: cd:11:a3:f7:52:8e:e0:18:77:90:47:36:e9:75:2d:43:65:f4: 0b:d6:04:97:be:ec:02:53:eb:7a:15:4e:5f:68:fa:cd:d6:c7: 83:ea:8a:d5:ec:ec:80:2e:a7:34:a0:fa:af:ff:fb:37:d3:1c: 1b:54:56:62:2c:27:e0:40:8e:0f:11:bb:24:34:07:57:1b:ba: 34:db:cd:03:21:36:25:51:36:e5:c2:70:3a:0b:9c:41:b6:26: 3c:fe:59:38:81:28:f1:60:e1:2a:04:79:81:88:cd:0d:88:30: a9:7c:cb:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwBcqfOLhxzVfWsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk NGI4ZDNlNWItNGU5MS00OTliLTllZTYtMjAyZjFjZTY3NzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7vVHrazP0F+wdNowCJpijgsCvZdxbCa2Ijd TJbi16BqNFWCMKZ1x5YoHBWlsPPTmlSXkQDODOAdGCIV5INNxCaAN4LstQbS/qa1 84T4k2JW1pw4ObqKvm6HtDb6POtHAow4rgpgjX6ydJAOsqzi4ecRpqaKChWHpoIL d/tcXYR5wIRPZNBdvppkRo8ShswMWRHsJyJ5Jk7zJcowgGj/tC5pmeVrizxTqhsh 320gCs4l63HJ7VVumZEeqzalt0/QpHdPJOpcxOtNLfawKELUKTNLLASRu7lS1jJl Q5nN5fi6NgSUT+GLcvciLQKdJ9X8DKfvUcSiBjvAKFVoh4vDowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqqvD8PS7Z6cJ3GtcWGi82jO104MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWU2ZmY2OTMtNzNkMi0z Zjk2LThkYjMtNzcyN2NiN2UxMmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjJEDLFrECFQO77/EY3bfDNPDrCAkUm9IfwCThSgDwae6AWM0mFZBLs 0ODedUeo6yQuWjYGNvDQcj+sbRm2IIRoXXE9JdU7Xpp8MWV7mGd8G4RrhfU9qeoJ kzyOy85f4X+tHRb7a12e7UiYC9EkCT2Zn6x1RblvLb5KmFoSOL7zyvAjQFDGQiuH uMmCyHUyS80Ro/dSjuAYd5BHNul1LUNl9AvWBJe+7AJT63oVTl9o+s3Wx4PqitXs 7IAupzSg+q//+zfTHBtUVmIsJ+BAjg8RuyQ0B1cbujTbzQMhNiVRNuXCcDoLnEG2 Jjz+WTiBKPFg4SoEeYGIzQ2IMKl8y5o= -----END CERTIFICATE-----Generated at Mon Jun 30 15:51:52 2025 by rpki-client