$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6057ef7b-5b34-3d50-820b-5115e319967d.roa File: 6057ef7b-5b34-3d50-820b-5115e319967d.roa (raw, json) Hash identifier: LDFbuQX15w7GmJbd2TtgkIhqO/FK8gL4UE4iIjngnUw= Subject key identifier: 83:58:21:93:F3:81:62:EE:64:34:91:5D:64:6C:F1:FF:D1:7C:30:20 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A23C016BBF062FAFF28C71100 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6057ef7b-5b34-3d50-820b-5115e319967d.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 9009 IP address blocks: 172.94.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:16:bb:f0:62:fa:ff:28:c7:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=f97a32ba-debd-489f-bf81-35b285f7dcff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8d:44:b9:18:0b:c9:42:49:b2:e6:69:d5:fe: 25:1d:a7:32:d1:ef:53:00:c4:f9:e8:5f:ea:36:93: e3:55:82:a2:dd:3d:d7:60:51:5d:89:4a:3c:ad:f9: c2:40:b3:28:d8:62:6a:a5:76:32:81:06:e6:e9:e5: da:0d:5f:49:9a:fa:a5:be:a3:95:60:19:66:33:ac: 56:a4:0a:be:01:53:1b:1d:30:59:ba:aa:9b:82:3e: 9b:2c:c2:bd:c4:3b:64:fe:88:4d:13:d9:23:50:c5: 5c:c2:0d:14:15:80:11:d3:a5:21:c8:1e:cf:22:85: 7b:e0:47:11:c5:01:1b:e2:08:fb:da:18:ee:e4:b9: 99:0c:4f:23:c1:b2:2b:3a:10:a2:6f:66:28:19:8e: 96:a1:86:01:93:f0:00:44:94:e7:c7:f1:a5:0b:c7: 28:38:1a:d4:6b:9b:60:40:dc:a3:b0:09:b0:26:f2: f5:41:a6:cb:5f:f7:f2:6f:ac:65:4f:04:77:f5:2d: c0:fa:af:55:91:51:3e:a4:4b:49:ef:42:cf:25:0f: 5e:bd:ea:b0:10:ec:09:b7:47:63:fc:c0:45:25:fe: 72:ba:0b:ac:ba:f7:15:46:1a:b0:f2:77:e3:6b:4d: b0:d1:93:89:c0:d3:0d:14:9e:dd:d1:f4:ba:cf:46: 19:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:58:21:93:F3:81:62:EE:64:34:91:5D:64:6C:F1:FF:D1:7C:30:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6057ef7b-5b34-3d50-820b-5115e319967d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:13:af:2a:d8:4a:73:3d:a1:64:f3:40:5c:49:35:6d:5b:ed: eb:41:86:80:ac:06:86:33:74:b9:cb:6b:5e:d4:d2:4f:7b:4b: 97:c0:3b:ff:be:99:fc:b9:84:ec:0b:5e:84:fc:8f:07:0b:b8: 5c:8d:c1:d5:9e:df:bd:70:20:52:32:d5:f9:d5:d6:4f:4a:9d: d2:2a:a7:02:97:97:f2:3c:20:42:42:be:03:67:1d:2e:ee:6b: f9:d1:d3:cf:65:30:ba:24:39:b3:ce:88:13:96:80:31:d7:9e: 59:6e:c8:00:e0:29:b9:ab:70:3d:e3:1c:2d:98:41:d1:59:2b: e8:ce:30:00:00:84:f6:85:87:f5:17:b1:b0:80:83:19:2d:e8: 7b:3b:98:e0:07:11:ca:de:c8:d6:fe:4f:ff:42:1b:bf:86:92: 95:3a:23:b6:86:1e:22:b1:6d:bf:bc:54:52:fb:6a:03:b2:df: d8:83:e0:e9:f9:7c:aa:8e:13:8f:68:98:42:46:2c:9b:d4:21: 3b:64:e1:b1:8e:f3:bc:a4:e1:91:cb:bd:22:bc:52:b3:ea:4c: 14:ff:ef:1d:9b:41:15:98:1c:55:fe:ea:92:1d:54:97:78:5a: ca:99:58:f3:a4:77:33:fb:9c:7e:2c:2b:9c:9f:63:5d:b3:fa: a1:93:36:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwBa78GL6/yjHEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk Zjk3YTMyYmEtZGViZC00ODlmLWJmODEtMzViMjg1ZjdkY2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo1EuRgLyUJJsuZp1f4lHacy0e9TAMT56F/q NpPjVYKi3T3XYFFdiUo8rfnCQLMo2GJqpXYygQbm6eXaDV9JmvqlvqOVYBlmM6xW pAq+AVMbHTBZuqqbgj6bLMK9xDtk/ohNE9kjUMVcwg0UFYAR06UhyB7PIoV74EcR xQEb4gj72hju5LmZDE8jwbIrOhCib2YoGY6WoYYBk/AARJTnx/GlC8coOBrUa5tg QNyjsAmwJvL1QabLX/fyb6xlTwR39S3A+q9VkVE+pEtJ70LPJQ9eveqwEOwJt0dj /MBFJf5yugusuvcVRhqw8nfja02w0ZOJwNMNFJ7d0fS6z0YZsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINYIZPzgWLuZDSRXWRs8f/RfDAgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjA1N2VmN2ItNWIzNC0z ZDUwLTgyMGItNTExNWUzMTk5NjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF57MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUTryrYSnM9oWTzQFxJNW1b7etBhoCsBoYzdLnLa17U0k97S5fAO/++ mfy5hOwLXoT8jwcLuFyNwdWe371wIFIy1fnV1k9KndIqpwKXl/I8IEJCvgNnHS7u a/nR089lMLokObPOiBOWgDHXnlluyADgKbmrcD3jHC2YQdFZK+jOMAAAhPaFh/UX sbCAgxkt6Hs7mOAHEcreyNb+T/9CG7+GkpU6I7aGHiKxbb+8VFL7agOy39iD4On5 fKqOE49omEJGLJvUITtk4bGO87yk4ZHLvSK8UrPqTBT/7x2bQRWYHFX+6pIdVJd4 WsqZWPOkdzP7nH4sK5yfY12z+qGTNrg= -----END CERTIFICATE-----Generated at Tue Jul 1 07:22:09 2025 by rpki-client