$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/31a0207a-82a6-3438-9bc3-e72f2e859489.roa File: 31a0207a-82a6-3438-9bc3-e72f2e859489.roa (raw, json) Hash identifier: /jysOJhwg5lXIqy5fTfDhvQ1aiatGjx+lNaQoawt6ms= Subject key identifier: 00:6A:8F:EC:4E:E9:11:7F:95:E8:CA:76:C7:ED:9D:D0:11:0F:69:E8 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849C5AF40B508AF01E9773FE400 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/31a0207a-82a6-3438-9bc3-e72f2e859489.roa Signing time: Wed 07 May 2025 08:21:11 +0000 ROA not before: Wed 07 May 2025 08:21:11 +0000 ROA not after: Tue 05 Aug 2025 08:21:11 +0000 asID: 55154 IP address blocks: 172.94.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c5:af:40:b5:08:af:01:e9:77:3f:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 7 08:21:11 2025 GMT Not After : Aug 5 08:21:11 2025 GMT Subject: CN=0f2d8e00-d07f-440c-84ce-3fa4893fc5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7a:df:d0:28:08:6e:c2:5d:5c:c4:ec:6b:1e: db:98:60:3d:b4:81:21:82:b5:d9:34:dc:e3:cd:02: 60:60:65:13:d3:04:15:5a:82:02:be:b4:fa:bb:a1: 2b:b4:3b:ee:8d:44:c9:15:c1:4b:96:5c:15:d5:23: 2a:80:8a:81:d2:8f:c4:40:22:2e:75:ff:8d:cf:97: 9d:ce:bd:22:f6:74:60:ea:f4:c0:4b:63:31:73:7e: c4:fd:46:f0:f6:bb:4c:db:7d:99:48:8c:a3:70:62: 1f:97:2d:4b:a5:20:ae:27:36:ab:c5:61:c5:43:74: 57:07:66:2b:13:58:17:c9:3b:98:b4:57:08:34:63: 29:f0:d2:81:af:59:13:5f:3d:22:3b:7f:84:c6:e3: b8:d6:6f:55:17:1e:15:66:f2:58:fa:76:5c:15:d6: e8:5f:6d:e0:a9:0c:74:75:31:23:16:f5:52:9f:d2: 16:ab:d2:9b:83:29:0d:0c:72:91:41:8e:b7:7d:02: 6a:e2:4e:3b:14:df:e3:4a:82:d8:2b:11:46:9d:ec: 6f:aa:99:fd:fd:ab:7e:4e:d9:24:d9:37:4f:22:7a: 64:18:b3:02:58:83:64:a5:42:64:f1:df:30:34:0e: b5:70:23:26:bc:40:53:16:6e:e2:61:e3:d8:c9:28: 45:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6A:8F:EC:4E:E9:11:7F:95:E8:CA:76:C7:ED:9D:D0:11:0F:69:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/31a0207a-82a6-3438-9bc3-e72f2e859489.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a0:06:4b:9b:d1:ab:46:09:47:94:b2:7e:87:7e:3c:c7:b4: 63:ca:1a:58:16:71:60:d5:71:38:ba:30:4c:98:73:67:b5:99: 50:8a:46:75:bd:9b:b3:ed:32:e2:61:61:c7:3f:4f:f2:45:db: 9f:8b:d2:c3:e0:e3:ad:41:fd:05:bb:c5:a6:1c:f5:bf:3c:02: 77:81:a4:39:b4:69:aa:af:93:90:a1:38:89:b4:15:a3:5c:d5: 91:d4:d8:61:25:f0:89:ee:a1:ec:be:af:94:c9:f1:2a:b9:78: 56:54:e7:b7:d1:74:54:51:50:f4:d4:e1:1d:6b:ee:3a:eb:ee: f7:49:b5:7a:9b:1b:ce:15:19:54:72:06:a2:cd:12:b5:91:9c: f2:b5:56:36:12:c3:17:1c:ef:bf:7e:5e:ab:c6:bc:a1:dd:47: ed:9d:91:3d:18:c7:62:f8:50:22:d4:59:f7:29:79:96:c2:2d: 8f:bb:af:99:d7:7c:f9:45:17:c2:e1:2a:a1:e9:2e:d0:79:be: ca:8a:2d:9a:6b:75:55:f3:ab:df:69:ee:ef:8f:92:8f:ac:ef: b8:02:3e:04:37:a9:b3:cc:ec:0e:d1:e1:ad:a6:21:a4:b9:6c: 4a:66:9b:a7:15:c2:cc:c6:e6:8c:f4:24:f9:c2:78:47:f9:c0: 25:33:04:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnFr0C1CK8B6Xc/5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUwNzA4MjExMVoXDTI1MDgwNTA4MjExMVowLzEtMCsGA1UEAxMk MGYyZDhlMDAtZDA3Zi00NDBjLTg0Y2UtM2ZhNDg5M2ZjNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHrf0CgIbsJdXMTsax7bmGA9tIEhgrXZNNzj zQJgYGUT0wQVWoICvrT6u6ErtDvujUTJFcFLllwV1SMqgIqB0o/EQCIudf+Nz5ed zr0i9nRg6vTAS2Mxc37E/Ubw9rtM232ZSIyjcGIfly1LpSCuJzarxWHFQ3RXB2Yr E1gXyTuYtFcINGMp8NKBr1kTXz0iO3+ExuO41m9VFx4VZvJY+nZcFdboX23gqQx0 dTEjFvVSn9IWq9KbgykNDHKRQY63fQJq4k47FN/jSoLYKxFGnexvqpn9/at+Ttkk 2TdPInpkGLMCWINkpUJk8d8wNA61cCMmvEBTFm7iYePYyShFxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABqj+xO6RF/lejKdsftndARD2noMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzFhMDIwN2EtODJhNi0z NDM4LTliYzMtZTcyZjJlODU5NDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCgBkub0atGCUeUsn6HfjzHtGPKGlgWcWDVcTi6MEyYc2e1mVCKRnW9 m7PtMuJhYcc/T/JF25+L0sPg461B/QW7xaYc9b88AneBpDm0aaqvk5ChOIm0FaNc 1ZHU2GEl8Inuoey+r5TJ8Sq5eFZU57fRdFRRUPTU4R1r7jrr7vdJtXqbG84VGVRy BqLNErWRnPK1VjYSwxcc779+XqvGvKHdR+2dkT0Yx2L4UCLUWfcpeZbCLY+7r5nX fPlFF8LhKqHpLtB5vsqKLZprdVXzq99p7u+Pko+s77gCPgQ3qbPM7A7R4a2mIaS5 bEpmm6cVwszG5oz0JPnCeEf5wCUzBGo= -----END CERTIFICATE-----Generated at Sat May 10 13:53:56 2025 by rpki-client