$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/64cc4dc0-b942-373c-921f-50d20e0b05ad.roa File: 64cc4dc0-b942-373c-921f-50d20e0b05ad.roa (raw, json) Hash identifier: HPVo1wEGpmqU2eX3L3kwekfhDVHaPS1gtpFimAuTEbc= Subject key identifier: 47:8D:79:8A:EC:5D:84:A8:42:06:01:02:ED:2B:E2:B4:C8:9F:DD:6A Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849B14A02FF50DB31165F0FDE60 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/64cc4dc0-b942-373c-921f-50d20e0b05ad.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 9009 IP address blocks: 172.94.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:02:ff:50:db:31:16:5f:0f:de:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=083d6075-3572-45f7-9d64-e0f5758266e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9b:ae:3a:2f:0d:ea:5f:e5:1d:22:fb:c1:f4: e9:b9:db:30:80:09:70:ca:10:5e:9b:1c:d3:0d:2a: 33:08:15:f2:67:c2:b9:23:46:ee:bb:ac:5f:d5:a4: f3:f7:8b:f5:f0:db:6c:a9:a3:25:68:f9:25:94:91: 3f:dd:fe:8c:ae:19:96:79:25:71:b6:10:a1:49:2a: d3:4b:63:60:ae:10:9f:74:ef:cb:5e:c0:ac:c9:0d: c1:1a:6a:2f:ef:a5:c6:d3:4c:a7:f2:6c:47:a4:b3: 20:1c:cf:cb:65:a4:2d:ef:a7:e8:30:43:ed:48:a4: 6e:28:86:60:34:03:d1:cb:62:57:6b:e3:2a:a5:8b: 2b:29:da:d1:79:9b:5f:dc:f4:b7:35:73:0f:7b:4a: e8:f8:22:29:55:38:c8:65:60:d0:4a:05:2c:07:9a: d1:91:88:de:62:e4:75:7e:6e:0a:42:60:b4:45:03: d9:62:d3:4f:b0:7a:93:93:ad:d8:e5:52:0e:bf:e5: a1:b1:23:03:e5:59:c7:32:08:f3:60:14:5e:ea:f5: 29:83:2d:2f:4f:94:b0:39:d1:60:8d:de:40:89:d4: 1f:38:2c:a4:e0:ca:01:37:e2:e4:de:05:15:70:11: 36:6f:4e:91:59:9b:03:db:12:86:95:51:20:81:52: 5f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8D:79:8A:EC:5D:84:A8:42:06:01:02:ED:2B:E2:B4:C8:9F:DD:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/64cc4dc0-b942-373c-921f-50d20e0b05ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:24:00:c8:24:b7:75:ef:b3:ff:53:80:09:25:bb:b3:ae:b1: 7b:1c:34:69:56:d8:3e:72:39:f7:93:43:2a:21:97:dc:38:58: bf:40:62:8c:6c:a9:11:21:91:58:65:c6:41:e1:9f:fd:3f:e2: b4:ec:68:59:5c:ad:89:43:56:0b:5e:97:f9:18:f4:9d:13:01: 3b:38:66:27:60:68:aa:fd:f2:a7:24:b2:d6:2e:47:49:7a:4c: bb:71:3c:11:ab:05:84:16:48:95:42:24:86:32:3f:c3:56:38: b6:26:b4:39:21:2d:3c:24:38:3c:06:76:ee:31:35:91:1b:91: 19:14:7a:07:29:a9:d4:80:aa:12:ff:48:5b:c6:6f:5c:e8:46: 67:c8:a7:76:ed:f9:10:90:e2:81:57:27:90:12:a3:72:c6:c3: fb:92:2d:51:4c:e6:1b:f4:70:89:af:d0:fc:58:6b:7b:ef:37: f9:36:86:67:3a:a6:16:55:9e:f4:5d:d8:8d:8f:0a:83:ea:76: b9:04:fd:40:f3:68:e1:e2:5f:1b:48:dc:88:23:5d:d6:c4:62: 4b:a4:bc:9e:d2:d9:80:87:54:85:b0:bb:f0:7c:1d:09:6c:82: 69:1a:b0:ac:6e:76:4e:1c:5d:df:6c:7b:1b:0e:79:05:df:6e: 31:28:e3:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSgL/UNsxFl8P3mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MDgzZDYwNzUtMzU3Mi00NWY3LTlkNjQtZTBmNTc1ODI2NmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypuuOi8N6l/lHSL7wfTpudswgAlwyhBemxzT DSozCBXyZ8K5I0buu6xf1aTz94v18NtsqaMlaPkllJE/3f6MrhmWeSVxthChSSrT S2NgrhCfdO/LXsCsyQ3BGmov76XG00yn8mxHpLMgHM/LZaQt76foMEPtSKRuKIZg NAPRy2JXa+MqpYsrKdrReZtf3PS3NXMPe0ro+CIpVTjIZWDQSgUsB5rRkYjeYuR1 fm4KQmC0RQPZYtNPsHqTk63Y5VIOv+WhsSMD5VnHMgjzYBRe6vUpgy0vT5SwOdFg jd5AidQfOCyk4MoBN+Lk3gUVcBE2b06RWZsD2xKGlVEggVJf9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeNeYrsXYSoQgYBAu0r4rTIn91qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjRjYzRkYzAtYjk0Mi0z NzNjLTkyMWYtNTBkMjBlMGIwNWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYkAMgkt3Xvs/9TgAklu7OusXscNGlW2D5yOfeTQyohl9w4WL9AYoxs qREhkVhlxkHhn/0/4rTsaFlcrYlDVgtel/kY9J0TATs4ZidgaKr98qckstYuR0l6 TLtxPBGrBYQWSJVCJIYyP8NWOLYmtDkhLTwkODwGdu4xNZEbkRkUegcpqdSAqhL/ SFvGb1zoRmfIp3bt+RCQ4oFXJ5ASo3LGw/uSLVFM5hv0cImv0PxYa3vvN/k2hmc6 phZVnvRd2I2PCoPqdrkE/UDzaOHiXxtI3IgjXdbEYkukvJ7S2YCHVIWwu/B8HQls gmkasKxudk4cXd9sexsOeQXfbjEo42Q= -----END CERTIFICATE-----Generated at Fri May 9 07:17:41 2025 by rpki-client