$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa File: 32a23c32-30aa-3814-87e4-f5250a5cd155.roa (raw, json) Hash identifier: N+GnmDMIunwz6wnEmFuXUKLeqni5Pn+1hmT72VEY3Xw= Subject key identifier: 25:92:03:85:CE:09:06:20:BF:6D:E3:1D:01:25:E3:B3:33:43:4A:8C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A3B7AEF8F604C2EAEEFC8F280 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 9009 IP address blocks: 172.94.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:ef:8f:60:4c:2e:ae:ef:c8:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=705df1a3-5f36-44e0-9c06-624d26f743be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ed:31:65:26:5c:86:0d:24:3a:fc:98:a5:5a: 55:c3:3d:37:0a:dc:3e:4a:ce:cf:a9:42:d8:01:a7: d2:a4:54:c1:af:6e:a0:2a:86:5d:8f:2c:17:8d:6f: b5:ec:77:57:66:74:d8:7e:df:19:02:85:df:5e:49: 4d:be:fa:2b:85:8a:37:2e:72:25:fc:07:27:6e:bb: e2:2e:83:c8:f6:5f:1f:4f:9c:5f:ba:74:b8:a8:06: 4b:07:ef:41:2f:1e:d2:71:8e:71:ac:76:52:dd:50: 5a:8c:06:4c:77:56:ed:81:f5:58:c3:90:20:15:fe: 54:26:d2:f7:92:bb:5b:99:f8:be:66:a4:71:91:20: e3:e7:69:de:b3:34:84:43:91:92:71:26:7e:5c:a1: e2:6e:75:08:48:af:35:97:2c:36:1a:f8:5e:1b:b8: d9:c5:8b:66:24:82:f8:98:32:06:60:ed:c6:46:00: 13:9c:6e:03:36:a4:14:4b:7d:da:7d:a2:75:65:c0: 39:49:05:3a:2f:96:67:d2:f3:1d:bc:25:91:7e:62: cf:75:58:09:7b:19:3f:3a:3a:6b:b4:b2:4b:0d:c9: 64:3b:43:8a:ab:e0:3a:c6:45:fc:cf:02:ea:05:c5: ee:48:30:a4:c0:30:aa:ce:14:70:4d:e4:3b:b9:5a: c6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:92:03:85:CE:09:06:20:BF:6D:E3:1D:01:25:E3:B3:33:43:4A:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b0:b0:35:c0:bf:54:71:99:49:76:71:32:92:3a:52:d4:47: cc:e1:34:8f:26:12:1f:39:0e:4e:34:c2:72:8c:43:fc:43:ba: 58:99:4c:ee:b4:aa:62:3c:e4:d6:16:cf:80:9b:a7:b1:48:f3: 43:bb:de:9a:8e:17:d5:04:ee:a4:6d:a6:69:2e:9b:ba:32:92: 09:f1:92:ac:de:be:fe:d5:3a:0e:0f:fe:8b:25:e4:45:9a:c6: 52:93:85:b0:78:e3:7a:7c:f3:b1:34:cc:b9:00:a4:3b:48:b0: a3:8d:ca:df:09:fd:62:fb:2f:93:4f:44:32:74:b6:0d:51:0c: 62:79:07:27:6a:d0:ea:9c:bc:76:9e:1c:6c:9b:5b:a9:44:80: ea:f1:6a:67:25:f4:24:4f:e4:40:b5:04:57:18:10:1f:90:37: e2:46:10:53:6f:fd:38:fd:f8:57:5f:f3:fd:cc:ee:df:0e:e5: 0c:89:09:55:89:f5:8c:8d:ac:ab:9e:c8:66:ea:c3:9c:be:57: 37:6a:72:b6:7b:f2:41:68:5a:5d:c5:35:e9:f9:75:39:fd:7c: d6:eb:2f:ee:2e:10:ba:0c:f5:de:81:62:fd:6c:5f:33:b7:5f: e1:cc:30:e5:bc:29:27:f1:08:2f:2c:23:bb:ca:94:a7:27:86: 2c:46:55:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7eu+PYEwuru/I8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NzA1ZGYxYTMtNWYzNi00NGUwLTljMDYtNjI0ZDI2Zjc0M2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle0xZSZchg0kOvyYpVpVwz03Ctw+Ss7PqULY AafSpFTBr26gKoZdjywXjW+17HdXZnTYft8ZAoXfXklNvvorhYo3LnIl/Acnbrvi LoPI9l8fT5xfunS4qAZLB+9BLx7ScY5xrHZS3VBajAZMd1btgfVYw5AgFf5UJtL3 krtbmfi+ZqRxkSDj52neszSEQ5GScSZ+XKHibnUISK81lyw2GvheG7jZxYtmJIL4 mDIGYO3GRgATnG4DNqQUS33afaJ1ZcA5SQU6L5Zn0vMdvCWRfmLPdVgJexk/Ojpr tLJLDclkO0OKq+A6xkX8zwLqBcXuSDCkwDCqzhRwTeQ7uVrGRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWSA4XOCQYgv23jHQEl47MzQ0qMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzJhMjNjMzItMzBhYS0z ODE0LTg3ZTQtZjUyNTBhNWNkMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKwsDXAv1RxmUl2cTKSOlLUR8zhNI8mEh85Dk40wnKMQ/xDuliZTO60 qmI85NYWz4Cbp7FI80O73pqOF9UE7qRtpmkum7oykgnxkqzevv7VOg4P/osl5EWa xlKThbB443p887E0zLkApDtIsKONyt8J/WL7L5NPRDJ0tg1RDGJ5Bydq0OqcvHae HGybW6lEgOrxamcl9CRP5EC1BFcYEB+QN+JGEFNv/Tj9+Fdf8/3M7t8O5QyJCVWJ 9YyNrKueyGbqw5y+VzdqcrZ78kFoWl3FNen5dTn9fNbrL+4uELoM9d6BYv1sXzO3 X+HMMOW8KSfxCC8sI7vKlKcnhixGVf0= -----END CERTIFICATE-----Generated at Tue Jul 1 18:09:09 2025 by rpki-client