$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4272e526-a4e4-327d-9ced-f6daadf4d31c.roa File: 4272e526-a4e4-327d-9ced-f6daadf4d31c.roa (raw, json) Hash identifier: QktvCXO156fTfeFwWMOEyCxxdkAEJwanIadWL2bpvCY= Subject key identifier: 8E:B4:A9:41:24:39:DF:D6:E5:F2:A5:0D:89:94:0F:FA:B4:70:E3:31 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A3B63EFEF82D53EDD848949C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4272e526-a4e4-327d-9ced-f6daadf4d31c.roa Signing time: Wed 18 Jun 2025 12:14:49 +0000 ROA not before: Wed 18 Jun 2025 12:14:49 +0000 ROA not after: Tue 16 Sep 2025 12:14:49 +0000 asID: 29802 IP address blocks: 172.94.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:63:ef:ef:82:d5:3e:dd:84:89:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 18 12:14:49 2025 GMT Not After : Sep 16 12:14:49 2025 GMT Subject: CN=3c5e3b7c-f172-4aa8-a952-8829d552c3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:62:d7:15:18:23:15:a8:b4:c0:6e:aa:f5:3b: 2a:1e:41:22:e2:f7:8b:5f:8f:d6:54:6d:fc:46:4f: 0f:cf:f9:38:ba:d4:c5:32:16:2f:41:a6:8e:57:3d: a8:c3:94:60:f2:30:c1:8b:36:4f:95:d0:d8:b7:9f: 14:85:9b:02:91:8c:d1:19:90:05:32:53:35:f2:a2: 4e:2e:21:db:da:b5:70:71:ff:9f:06:0d:0a:ae:63: c5:aa:8b:83:c5:39:60:4f:33:3b:ca:91:bb:f5:18: f6:bd:9a:d5:5b:2c:42:b1:24:a2:d3:b5:a9:f6:30: 41:36:62:c8:42:ae:d5:88:d3:c0:3c:0a:0d:e5:9d: 81:b2:b6:51:0a:7b:72:90:14:e3:69:2a:62:ba:3f: 02:43:46:e1:0d:f0:24:04:d7:af:cc:42:97:b4:ba: 4e:58:59:03:bd:3e:e5:98:f6:c3:3e:f2:82:99:5d: 14:c2:4a:65:4a:63:9e:27:1b:b6:4f:c2:ec:de:fb: 13:39:54:cb:20:9b:78:ff:ca:09:c0:64:40:72:0d: e4:bd:eb:c7:0c:5b:fb:81:20:3c:e9:bb:ea:26:c7: 53:95:4e:71:26:e9:9d:63:0c:8b:84:36:e4:b3:3a: fc:ec:4b:57:f3:34:5c:43:72:6b:11:64:e7:83:27: 03:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B4:A9:41:24:39:DF:D6:E5:F2:A5:0D:89:94:0F:FA:B4:70:E3:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4272e526-a4e4-327d-9ced-f6daadf4d31c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c7:7c:8e:4b:1e:d2:2f:6d:a1:eb:ee:77:ff:7f:97:86:a8: 5a:99:dc:85:2e:40:b4:b1:2c:a8:9d:69:bc:80:59:47:9c:e6: b0:17:fd:28:c1:1c:10:34:e6:c7:6b:81:49:1e:31:77:93:8f: 06:5a:2e:e9:3f:96:6d:4e:f9:31:82:02:be:ec:d2:37:87:b4: 41:0b:a0:88:06:1c:33:40:1f:e8:aa:47:f9:5d:7e:cb:8c:1e: fb:0e:3b:24:bc:ec:1e:d5:6c:a3:aa:03:a8:d0:a9:d5:c4:c1: 99:96:ee:7a:c5:3d:43:01:a5:8a:52:20:95:f7:4b:55:d0:4a: 7c:c8:ba:a7:da:4d:e0:ea:cb:74:1b:68:b2:5c:ed:0f:54:d7: 3d:8f:ee:a5:53:a8:e9:d1:e9:96:30:f1:f7:00:f7:72:50:bc: 64:5e:89:11:1b:22:06:e6:c5:67:a3:03:5b:3a:b3:be:45:16: 66:32:72:e1:82:da:e7:3a:c7:b0:c6:a0:6c:61:a8:8e:64:6f: ca:05:c4:73:9d:fa:ca:58:b8:1b:5c:a0:9d:0e:6f:78:c0:c2: 93:f3:8d:7e:b4:4c:ee:03:5d:4d:76:cf:e7:ce:75:f8:6f:1d: 45:f3:17:26:90:6a:a5:87:33:a5:ef:f4:81:41:cf:bb:8e:9e: a8:5e:bc:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7Y+/vgtU+3YSJScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxODEyMTQ0OVoXDTI1MDkxNjEyMTQ0OVowLzEtMCsGA1UEAxMk M2M1ZTNiN2MtZjE3Mi00YWE4LWE5NTItODgyOWQ1NTJjM2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmLXFRgjFai0wG6q9TsqHkEi4veLX4/WVG38 Rk8Pz/k4utTFMhYvQaaOVz2ow5Rg8jDBizZPldDYt58UhZsCkYzRGZAFMlM18qJO LiHb2rVwcf+fBg0KrmPFqouDxTlgTzM7ypG79Rj2vZrVWyxCsSSi07Wp9jBBNmLI Qq7ViNPAPAoN5Z2BsrZRCntykBTjaSpiuj8CQ0bhDfAkBNevzEKXtLpOWFkDvT7l mPbDPvKCmV0UwkplSmOeJxu2T8Ls3vsTOVTLIJt4/8oJwGRAcg3kvevHDFv7gSA8 6bvqJsdTlU5xJumdYwyLhDbkszr87EtX8zRcQ3JrEWTngycDVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI60qUEkOd/W5fKlDYmUD/q0cOMxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDI3MmU1MjYtYTRlNC0z MjdkLTljZWQtZjZkYWFkZjRkMzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDHfI5LHtIvbaHr7nf/f5eGqFqZ3IUuQLSxLKidabyAWUec5rAX/SjB HBA05sdrgUkeMXeTjwZaLuk/lm1O+TGCAr7s0jeHtEELoIgGHDNAH+iqR/ldfsuM HvsOOyS87B7VbKOqA6jQqdXEwZmW7nrFPUMBpYpSIJX3S1XQSnzIuqfaTeDqy3Qb aLJc7Q9U1z2P7qVTqOnR6ZYw8fcA93JQvGReiREbIgbmxWejA1s6s75FFmYycuGC 2uc6x7DGoGxhqI5kb8oFxHOd+spYuBtcoJ0Ob3jAwpPzjX60TO4DXU12z+fOdfhv HUXzFyaQaqWHM6Xv9IFBz7uOnqhevA0= -----END CERTIFICATE-----Generated at Sun Jun 29 11:52:53 2025 by rpki-client