$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/64e3b005-0976-3d9a-920f-927b6554f98e.roa File: 64e3b005-0976-3d9a-920f-927b6554f98e.roa (raw, json) Hash identifier: 6yYlTsuTWSZ7cJTqs27pJxm3GoN0w24J1TBYkt201DA= Subject key identifier: CA:13:46:BE:0E:B5:8E:8D:FE:42:99:B3:A4:F8:02:3B:37:61:8D:3F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A37F95EEA0D65C74557C3BB20 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/64e3b005-0976-3d9a-920f-927b6554f98e.roa Signing time: Tue 17 Jun 2025 06:52:40 +0000 ROA not before: Tue 17 Jun 2025 06:52:40 +0000 ROA not after: Mon 15 Sep 2025 06:52:40 +0000 asID: 29802 IP address blocks: 172.94.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:f9:5e:ea:0d:65:c7:45:57:c3:bb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 17 06:52:40 2025 GMT Not After : Sep 15 06:52:40 2025 GMT Subject: CN=4551d273-356e-4fbd-8710-b973ac90c9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ff:35:09:7c:b1:14:96:f5:64:e8:f3:60:65: 41:a2:94:f7:9e:b5:fe:b9:64:bc:58:01:18:a9:2a: 1c:07:74:2d:f2:75:c2:93:fd:a7:07:c9:22:4b:92: 29:7f:14:88:55:7c:04:79:28:79:fb:f8:5c:48:ed: 30:32:d2:87:12:ec:6b:0e:20:d6:36:2c:ff:a6:d8: 91:21:bf:5c:11:79:b5:ba:25:f3:c0:cc:59:82:17: f7:7f:77:45:8a:63:74:94:bb:9d:f3:a3:4d:f9:bb: 86:c6:28:06:f1:af:45:ff:ab:63:80:7b:18:8d:35: ca:fb:37:a5:5f:2a:52:92:08:ad:88:dd:08:74:53: 0c:54:e5:54:ce:81:35:1f:28:24:f2:89:e0:c0:41: e4:31:b4:cb:fa:64:c2:9b:f0:5e:0d:a2:a5:4b:43: 40:9a:a1:49:98:7b:1b:ad:f6:e2:0f:8b:ee:00:7a: 70:24:8e:fe:0a:49:b1:92:98:02:fe:15:23:3f:ca: c9:b9:2c:25:57:34:43:ac:bb:8e:ed:08:71:c4:ff: 60:54:96:2e:8d:a4:bd:4d:6e:66:6c:4d:84:57:6e: 81:b8:2d:6c:20:3e:58:75:ac:f5:57:11:ed:90:83: de:28:3a:66:f9:07:ac:c4:be:79:cb:3e:f0:f0:35: c4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:13:46:BE:0E:B5:8E:8D:FE:42:99:B3:A4:F8:02:3B:37:61:8D:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/64e3b005-0976-3d9a-920f-927b6554f98e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:51:0a:6b:ba:8b:db:ba:68:bd:e9:2f:7d:3d:52:9c:be:76: 01:cd:35:2a:5b:c4:1b:44:9c:3f:68:33:1e:5c:28:6d:ba:41: 14:81:58:eb:cf:e6:62:6a:22:1e:73:e2:da:e6:e9:7e:38:02: c7:86:06:38:f6:83:6a:4b:ec:24:92:c3:9b:b6:22:e9:f4:b7: e0:a2:f9:8e:73:10:46:7e:b2:34:aa:b5:95:4d:8e:97:63:82: 9a:6f:2b:3a:61:4f:fa:c9:65:10:2e:e4:26:1f:4d:40:7d:c1: f0:3f:de:c7:13:66:06:df:43:f9:9b:15:e8:d3:9d:37:8a:48: 12:67:dc:59:e8:54:9e:13:29:e6:00:a9:4d:43:e8:90:50:88: 94:72:ef:93:66:b4:d1:1a:87:2a:02:43:5d:88:56:42:88:58: eb:68:cb:c4:58:57:24:3d:29:27:92:b5:7e:fa:c6:80:4c:52: af:e9:95:13:ed:8f:ca:53:eb:bb:dc:d9:18:ea:4e:fa:f4:5d: db:ab:ae:c6:bf:14:c2:68:0c:78:dd:91:5a:c5:93:b7:6f:c8: 8c:fc:9f:61:d3:32:e6:bf:0b:53:5a:ea:5d:6e:80:47:f1:3e: 67:16:a6:a8:1e:52:d1:be:92:bf:b4:f9:0d:85:38:a6:7a:e5: c7:a8:aa:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3+V7qDWXHRVfDuyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxNzA2NTI0MFoXDTI1MDkxNTA2NTI0MFowLzEtMCsGA1UEAxMk NDU1MWQyNzMtMzU2ZS00ZmJkLTg3MTAtYjk3M2FjOTBjOWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov81CXyxFJb1ZOjzYGVBopT3nrX+uWS8WAEY qSocB3Qt8nXCk/2nB8kiS5IpfxSIVXwEeSh5+/hcSO0wMtKHEuxrDiDWNiz/ptiR Ib9cEXm1uiXzwMxZghf3f3dFimN0lLud86NN+buGxigG8a9F/6tjgHsYjTXK+zel XypSkgitiN0IdFMMVOVUzoE1Hygk8ongwEHkMbTL+mTCm/BeDaKlS0NAmqFJmHsb rfbiD4vuAHpwJI7+CkmxkpgC/hUjP8rJuSwlVzRDrLuO7QhxxP9gVJYujaS9TW5m bE2EV26BuC1sID5Ydaz1VxHtkIPeKDpm+QesxL55yz7w8DXEmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoTRr4OtY6N/kKZs6T4Ajs3YY0/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjRlM2IwMDUtMDk3Ni0z ZDlhLTkyMGYtOTI3YjY1NTRmOThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJRCmu6i9u6aL3pL309Upy+dgHNNSpbxBtEnD9oMx5cKG26QRSBWOvP 5mJqIh5z4trm6X44AseGBjj2g2pL7CSSw5u2Iun0t+Ci+Y5zEEZ+sjSqtZVNjpdj gppvKzphT/rJZRAu5CYfTUB9wfA/3scTZgbfQ/mbFejTnTeKSBJn3FnoVJ4TKeYA qU1D6JBQiJRy75NmtNEahyoCQ12IVkKIWOtoy8RYVyQ9KSeStX76xoBMUq/plRPt j8pT67vc2RjqTvr0Xdurrsa/FMJoDHjdkVrFk7dvyIz8n2HTMua/C1Na6l1ugEfx PmcWpqgeUtG+kr+0+Q2FOKZ65ceoqvE= -----END CERTIFICATE-----Generated at Tue Jul 1 09:07:44 2025 by rpki-client