$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6072d139-5613-3949-b4b7-4b495700bd4b.roa File: 6072d139-5613-3949-b4b7-4b495700bd4b.roa (raw, json) Hash identifier: Nn7+/gqRgYq05e8ZGYGb8KoegsjIri9BnHlu+KQmm1o= Subject key identifier: A0:A6:4B:F4:1A:23:BD:87:CF:18:18:91:21:6E:B3:98:D7:61:B5:D4 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A3B651A5C2EF541A1F8C69220 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6072d139-5613-3949-b4b7-4b495700bd4b.roa Signing time: Wed 18 Jun 2025 12:17:10 +0000 ROA not before: Wed 18 Jun 2025 12:17:10 +0000 ROA not after: Tue 16 Sep 2025 12:17:10 +0000 asID: 29802 IP address blocks: 172.94.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:65:1a:5c:2e:f5:41:a1:f8:c6:92:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 18 12:17:10 2025 GMT Not After : Sep 16 12:17:10 2025 GMT Subject: CN=afefe606-b4f3-4d60-92c2-0a3de8c0e659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b7:e2:f9:eb:3d:fe:4d:57:6c:bf:11:b4:71: a0:9b:71:1d:39:7a:50:cd:db:2c:82:f7:ca:87:21: b4:2e:dc:98:5e:7a:43:e7:61:c5:2a:c0:2f:28:41: ac:b7:c5:0b:a9:15:b5:4f:7d:de:7b:47:2a:79:55: 68:e5:ee:50:09:c8:b9:06:de:69:7d:c7:6e:7c:c3: 2a:95:43:87:97:95:04:38:e2:ad:da:4d:ee:e7:a6: 55:41:52:1b:f3:ba:dc:1f:99:52:bb:18:51:c4:ad: 11:9c:24:8f:5c:0a:27:d7:77:63:d2:61:a7:1e:7c: 34:3a:bb:1f:69:c7:05:a7:08:4f:24:37:06:44:09: 7b:f7:ee:42:66:f7:f9:d6:13:fb:f1:75:86:31:f0: 1d:c6:80:11:87:ab:6d:f0:81:ea:6a:14:0f:e5:11: 4b:fa:9c:98:ba:b9:17:4c:18:29:fe:83:6f:01:0a: 90:5b:64:7e:f2:73:94:9e:8b:c4:59:81:ec:29:87: 1a:d0:a5:e5:c7:61:25:a2:52:3a:f7:42:35:24:c0: 61:62:64:a2:d0:e4:76:aa:e9:18:ee:2c:75:f1:73: 91:e8:e5:19:7f:55:6b:b0:4f:af:6f:36:3e:e9:e5: 5b:8f:16:ca:88:33:7c:88:8c:58:c2:29:06:69:fd: 78:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A6:4B:F4:1A:23:BD:87:CF:18:18:91:21:6E:B3:98:D7:61:B5:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6072d139-5613-3949-b4b7-4b495700bd4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:c5:fa:6e:58:34:b5:13:3e:ee:5d:01:4f:62:db:12:79:22: 27:9f:b1:77:b6:c6:40:2b:c9:f6:2c:a9:27:46:3a:0b:fb:71: 6f:6c:ac:96:50:4a:8f:11:a2:85:ba:bd:98:36:2b:25:27:71: 6e:e0:d1:96:9d:33:4d:5c:7e:3f:d2:0e:eb:07:0c:26:9b:c4: c1:45:55:24:fe:76:e4:a4:ad:0c:36:c4:a7:e7:25:24:6c:9f: f5:5b:f1:e6:c7:a9:57:6f:ed:1b:59:4b:bf:50:39:2f:5f:06: a3:15:13:b6:f2:36:b7:df:f1:4b:27:7e:2d:49:24:11:71:aa: ab:ec:f7:5e:5e:c1:99:a1:1d:1b:d4:63:79:56:ae:29:1e:e0: f7:49:18:0a:45:51:05:8b:b9:37:78:df:64:77:d2:1b:9d:a2: 9b:21:b8:15:74:e9:ea:4e:f9:a9:03:fe:a2:9d:09:1a:9c:4e: ac:ce:0d:91:df:53:39:a4:2b:c4:dd:94:16:f0:23:db:07:8f: f2:0b:c0:2d:08:ff:6d:31:ad:55:bd:f5:45:76:03:26:0d:71: 68:d7:24:88:fe:bb:d0:19:f8:c3:0a:49:9d:68:7e:3f:61:3a: f8:2a:ad:84:94:c2:08:ef:9f:dd:ed:a5:f8:80:8d:6b:e7:5e: af:06:b1:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ZRpcLvVBofjGkiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxODEyMTcxMFoXDTI1MDkxNjEyMTcxMFowLzEtMCsGA1UEAxMk YWZlZmU2MDYtYjRmMy00ZDYwLTkyYzItMGEzZGU4YzBlNjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLfi+es9/k1XbL8RtHGgm3EdOXpQzdssgvfK hyG0LtyYXnpD52HFKsAvKEGst8ULqRW1T33ee0cqeVVo5e5QCci5Bt5pfcdufMMq lUOHl5UEOOKt2k3u56ZVQVIb87rcH5lSuxhRxK0RnCSPXAon13dj0mGnHnw0Orsf accFpwhPJDcGRAl79+5CZvf51hP78XWGMfAdxoARh6tt8IHqahQP5RFL+pyYurkX TBgp/oNvAQqQW2R+8nOUnovEWYHsKYca0KXlx2ElolI690I1JMBhYmSi0OR2qukY 7ix18XOR6OUZf1VrsE+vbzY+6eVbjxbKiDN8iIxYwikGaf14RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCmS/QaI72HzxgYkSFus5jXYbXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjA3MmQxMzktNTYxMy0z OTQ5LWI0YjctNGI0OTU3MDBiZDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/F+m5YNLUTPu5dAU9i2xJ5IiefsXe2xkAryfYsqSdGOgv7cW9srJZQ So8RooW6vZg2KyUncW7g0ZadM01cfj/SDusHDCabxMFFVST+duSkrQw2xKfnJSRs n/Vb8ebHqVdv7RtZS79QOS9fBqMVE7byNrff8Usnfi1JJBFxqqvs915ewZmhHRvU Y3lWrike4PdJGApFUQWLuTd432R30hudopshuBV06epO+akD/qKdCRqcTqzODZHf UzmkK8TdlBbwI9sHj/ILwC0I/20xrVW99UV2AyYNcWjXJIj+u9AZ+MMKSZ1ofj9h OvgqrYSUwgjvn93tpfiAjWvnXq8GsVs= -----END CERTIFICATE-----Generated at Wed Jul 2 00:40:05 2025 by rpki-client