$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/22845b30-572c-348e-9f79-8615080a5a69.roa File: 22845b30-572c-348e-9f79-8615080a5a69.roa (raw, json) Hash identifier: 0Pdfrp1Uyuqb4opl5X2wjm+uMXXPdYc+lxf/1G0GHOc= Subject key identifier: 64:46:AF:0E:FE:C6:5B:4C:29:92:61:AF:8B:4B:24:73:74:CC:DF:5B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849B2AF6370657D0BCF8CB9B000 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/22845b30-572c-348e-9f79-8615080a5a69.roa Signing time: Wed 30 Apr 2025 13:01:02 +0000 ROA not before: Wed 30 Apr 2025 13:01:02 +0000 ROA not after: Tue 29 Jul 2025 13:01:02 +0000 asID: 53356 IP address blocks: 172.94.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:af:63:70:65:7d:0b:cf:8c:b9:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 30 13:01:02 2025 GMT Not After : Jul 29 13:01:02 2025 GMT Subject: CN=628c94d0-0692-4c5d-b890-d1c690aa663f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d5:bb:05:53:ac:54:4a:59:25:c3:3b:db:23: 7b:c2:86:df:8e:00:a7:ae:32:78:65:91:58:0e:62: 61:ee:08:b7:5e:b2:cb:3b:76:b0:6a:58:f2:00:fa: 06:ba:ff:72:69:1b:dc:5a:fa:d9:97:ae:83:d0:f9: dc:f6:e9:26:89:21:eb:1c:01:45:5a:47:4d:b4:ec: e1:97:1d:a6:ec:c7:d3:62:21:04:be:a2:a6:c5:f4: 6f:5f:2f:3f:90:f9:ff:87:e2:0a:2c:f5:9f:34:9a: 47:46:d4:10:39:ed:39:92:19:41:51:39:7e:ad:9b: 10:18:32:76:11:49:bb:d9:5c:a7:21:a4:f4:2e:87: ca:85:4b:f3:cc:a9:f1:5d:59:43:5d:12:2f:e5:41: e6:64:00:b5:60:af:dd:ac:9b:fe:8e:6f:60:3c:30: 94:21:29:39:1f:aa:fc:7c:d6:53:9a:66:2b:e1:b4: ab:6f:52:28:e9:bb:47:5b:29:97:c8:0f:61:bd:dd: fd:af:da:17:77:d0:8a:fb:cd:08:37:07:c0:e9:35: 44:19:08:6d:8b:17:f0:79:8d:d2:bf:88:dc:25:d3: 61:04:da:ab:7f:c2:44:14:3e:f4:b3:f4:ad:cf:b2: 14:49:f7:0c:1a:2c:10:ee:58:8c:15:e3:07:dc:bf: d3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:46:AF:0E:FE:C6:5B:4C:29:92:61:AF:8B:4B:24:73:74:CC:DF:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/22845b30-572c-348e-9f79-8615080a5a69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d2:48:61:32:dd:80:cd:1f:e8:d5:ee:6f:85:94:a0:8e:e3: de:cd:8d:b4:99:77:75:c4:4c:63:08:ed:ee:07:3c:d1:2b:62: c0:83:65:c9:d1:ed:50:a8:bb:47:d1:29:f9:8c:4f:df:13:5d: 25:1d:72:7b:4d:b3:bb:4c:93:05:90:55:13:9d:4f:0d:15:f3: 33:65:cf:65:14:4a:c0:8f:9c:4e:e0:3a:ef:e3:d0:32:56:1e: 4d:2e:ba:80:e7:11:e4:cb:1f:30:95:5e:2c:be:50:94:57:e2: 20:a8:fe:57:72:08:aa:c8:8d:ff:4a:9b:b9:68:86:ee:30:d7: 68:b7:d9:28:51:7f:c7:68:3a:61:af:71:0f:8c:71:f6:24:56: fe:51:79:5b:b9:42:ca:1e:49:73:9b:6b:5a:e2:99:5c:e1:32: ca:d4:c8:ed:af:d2:ca:a9:59:be:92:a2:35:fb:ea:54:9f:f5: 0a:f6:aa:41:8c:18:fd:55:25:fb:f0:66:f5:63:dc:d8:a9:0a: a6:ae:b2:d7:e1:4f:58:3a:6a:02:22:67:bc:0e:25:35:9b:47: 15:b7:50:8d:57:37:aa:31:36:66:ac:94:c7:20:30:87:cb:1d: f3:2c:40:e1:4a:46:4f:8f:ba:88:8b:c6:ed:1e:32:b7:d4:2a: c3:1a:35:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyr2NwZX0Lz4y5sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk NjI4Yzk0ZDAtMDY5Mi00YzVkLWI4OTAtZDFjNjkwYWE2NjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttW7BVOsVEpZJcM72yN7wobfjgCnrjJ4ZZFY DmJh7gi3XrLLO3awaljyAPoGuv9yaRvcWvrZl66D0Pnc9ukmiSHrHAFFWkdNtOzh lx2m7MfTYiEEvqKmxfRvXy8/kPn/h+IKLPWfNJpHRtQQOe05khlBUTl+rZsQGDJ2 EUm72VynIaT0LofKhUvzzKnxXVlDXRIv5UHmZAC1YK/drJv+jm9gPDCUISk5H6r8 fNZTmmYr4bSrb1Io6btHWymXyA9hvd39r9oXd9CK+80INwfA6TVEGQhtixfweY3S v4jcJdNhBNqrf8JEFD70s/Stz7IUSfcMGiwQ7liMFeMH3L/TYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRGrw7+xltMKZJhr4tLJHN0zN9bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjI4NDViMzAtNTcyYy0z NDhlLTlmNzktODYxNTA4MGE1YTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/SSGEy3YDNH+jV7m+FlKCO497NjbSZd3XETGMI7e4HPNErYsCDZcnR 7VCou0fRKfmMT98TXSUdcntNs7tMkwWQVROdTw0V8zNlz2UUSsCPnE7gOu/j0DJW Hk0uuoDnEeTLHzCVXiy+UJRX4iCo/ldyCKrIjf9Km7lohu4w12i32ShRf8doOmGv cQ+McfYkVv5ReVu5QsoeSXOba1rimVzhMsrUyO2v0sqpWb6SojX76lSf9Qr2qkGM GP1VJfvwZvVj3NipCqaustfhT1g6agIiZ7wOJTWbRxW3UI1XN6oxNmaslMcgMIfL HfMsQOFKRk+PuoiLxu0eMrfUKsMaNfM= -----END CERTIFICATE-----Generated at Sun May 11 04:25:36 2025 by rpki-client