$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa File: 438abf06-355b-3925-b81c-ed0f431c4a35.roa (raw, json) Hash identifier: gocnrj/GYqzdqYedNmtgYhurZvnYHvvEO3hMFC1u9Ts= Subject key identifier: 91:F0:35:26:00:B6:D1:C3:3B:18:78:8A:D2:F8:39:45:6C:CC:EA:B9 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849E7BA826F6968434F165B4380 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 3223 IP address blocks: 172.94.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:82:6f:69:68:43:4f:16:5b:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=d637cc6f-c596-4964-b489-7f89222185e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0b:0b:4f:bf:77:8d:7f:58:02:07:8e:8b:d4: 3b:4d:75:4a:67:59:7b:2b:67:a8:8e:20:82:be:29: 44:3c:b4:8c:74:67:c9:33:71:25:f6:62:0f:bf:5a: 96:0c:47:90:aa:f9:e9:c3:89:29:73:e1:50:c5:8e: 03:54:97:cb:c4:c4:f6:d6:eb:c3:02:96:97:46:c6: d8:58:28:6d:28:5f:e1:57:af:d2:78:44:87:33:c1: 7b:db:17:11:36:a7:a8:6a:ff:54:3c:df:3d:a5:1d: 9d:89:f4:71:c5:11:a0:27:7e:83:51:07:3f:40:ec: a1:95:bf:9f:65:e1:4c:d9:82:77:61:ec:82:1d:38: 24:98:d2:47:ed:3d:2a:25:ac:d8:ca:d5:07:66:be: f8:3e:53:65:b5:39:05:1f:22:d5:5d:55:1a:c3:18: c6:43:93:72:4e:67:ac:17:02:79:e3:17:da:c6:32: f1:60:30:b8:1c:ce:b1:ab:2c:e2:98:02:5b:95:ad: cd:ad:55:09:b6:3b:ad:c7:20:22:b2:42:d8:72:5c: e6:83:68:49:d8:7e:7d:fd:0d:6d:14:a1:06:45:54: e1:c5:c7:21:23:5d:38:56:c8:25:15:71:85:51:87: 2d:f5:88:88:a6:fa:92:32:fa:69:3f:26:20:99:27: e8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F0:35:26:00:B6:D1:C3:3B:18:78:8A:D2:F8:39:45:6C:CC:EA:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/438abf06-355b-3925-b81c-ed0f431c4a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:a7:9b:11:4d:5a:d9:10:a5:50:43:6e:3c:04:7d:22:d6:6b: f8:58:33:c7:ec:23:b0:a4:12:8b:3d:05:b3:a7:01:e7:80:7a: 2e:1a:eb:34:07:67:fc:3c:5f:57:e0:40:05:85:6a:4b:ca:44: b5:b8:f6:65:52:e1:8b:a4:fa:56:d1:96:b2:60:7e:a2:1a:9b: cb:fc:ea:01:69:80:c6:b2:31:12:03:80:00:9a:09:f5:52:b1: 98:aa:a6:06:c0:15:29:b9:75:89:43:db:6e:e2:8d:18:db:e1: 29:fa:16:27:c6:9d:cb:9e:90:eb:e3:ca:82:53:af:45:af:15: 0a:18:4e:05:f2:ec:94:a9:c7:50:8d:6d:9a:cf:cc:3a:98:97: e5:bf:b3:6c:47:92:45:6c:b6:57:41:a6:cd:85:37:49:80:87: db:c9:50:c9:45:bb:41:99:e5:59:9d:61:a1:51:b3:a8:38:0c: cf:10:0b:14:d9:ff:33:a0:d0:24:ce:36:50:8b:b2:8a:46:b4: 03:5c:1a:84:a8:3a:20:a5:f9:a8:4c:29:5b:65:8b:87:3b:9c: 76:a0:7b:61:31:f1:36:e4:0a:1b:7a:69:ee:35:6a:fc:2a:eb: cd:fa:0c:65:7f:57:f2:68:95:ce:39:4f:ef:06:c3:eb:03:63: f1:ed:58:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuoJvaWhDTxZbQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk ZDYzN2NjNmYtYzU5Ni00OTY0LWI0ODktN2Y4OTIyMjE4NWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggsLT793jX9YAgeOi9Q7TXVKZ1l7K2eojiCC vilEPLSMdGfJM3El9mIPv1qWDEeQqvnpw4kpc+FQxY4DVJfLxMT21uvDApaXRsbY WChtKF/hV6/SeESHM8F72xcRNqeoav9UPN89pR2difRxxRGgJ36DUQc/QOyhlb+f ZeFM2YJ3YeyCHTgkmNJH7T0qJazYytUHZr74PlNltTkFHyLVXVUawxjGQ5NyTmes FwJ54xfaxjLxYDC4HM6xqyzimAJbla3NrVUJtjutxyAiskLYclzmg2hJ2H59/Q1t FKEGRVThxcchI104VsglFXGFUYct9YiIpvqSMvppPyYgmSfo2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHwNSYAttHDOxh4itL4OUVszOq5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDM4YWJmMDYtMzU1Yi0z OTI1LWI4MWMtZWQwZjQzMWM0YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABunmxFNWtkQpVBDbjwEfSLWa/hYM8fsI7CkEos9BbOnAeeAei4a6zQH Z/w8X1fgQAWFakvKRLW49mVS4Yuk+lbRlrJgfqIam8v86gFpgMayMRIDgACaCfVS sZiqpgbAFSm5dYlD227ijRjb4Sn6FifGncuekOvjyoJTr0WvFQoYTgXy7JSpx1CN bZrPzDqYl+W/s2xHkkVstldBps2FN0mAh9vJUMlFu0GZ5VmdYaFRs6g4DM8QCxTZ /zOg0CTONlCLsopGtANcGoSoOiCl+ahMKVtli4c7nHage2Ex8TbkCht6ae41avwq 6836DGV/V/Jolc45T+8Gw+sDY/HtWE4= -----END CERTIFICATE-----Generated at Tue Jul 1 19:50:12 2025 by rpki-client