$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7320ea83-29fc-3129-980c-290a8625bde5.roa File: 7320ea83-29fc-3129-980c-290a8625bde5.roa (raw, json) Hash identifier: ZHABMPllHxiE+iK9pmYACnmB1fzU3on/vc56Ys5dAmA= Subject key identifier: 9D:4C:8F:87:DA:7F:F1:7A:A1:DB:81:8B:7E:25:BF:87:EA:A6:B6:3D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A43DB0B5BA7B9C4DB896E7320 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7320ea83-29fc-3129-980c-290a8625bde5.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 9009 IP address blocks: 172.94.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:0b:5b:a7:b9:c4:db:89:6e:73:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=fd55432b-3a70-404c-abd3-5ab4a8daaf7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3f:1e:b6:4a:96:78:24:dc:04:2c:87:98:ce: 94:ae:bf:0b:4c:53:d1:84:7c:fe:16:88:48:49:06: f6:7d:9c:46:6f:12:29:e2:f5:63:ee:d7:16:46:8a: 56:46:9e:ef:40:14:05:0d:6d:a9:4e:bd:65:c4:ea: 92:89:c1:9f:70:b1:2d:1a:90:08:f9:45:5d:73:55: a4:95:d8:99:cb:74:bc:3c:63:f8:a2:2c:40:43:26: af:15:e5:c9:7b:a2:33:fe:02:d3:58:21:64:be:41: 65:c3:41:b1:47:aa:f2:52:9d:2f:25:88:f5:5f:c8: 6d:2f:2e:09:2f:03:ec:d4:ea:13:05:38:28:81:a8: 94:60:53:50:50:7c:a3:08:de:c0:b4:8d:f4:49:a7: 3e:bd:fc:b0:b5:d6:ee:c8:a9:79:0f:43:c4:0e:86: 9c:53:32:49:78:5d:89:3b:00:5c:09:26:a8:e8:81: 38:8c:31:9d:3b:99:96:ac:74:24:64:d5:b3:c9:c2: 6f:13:f4:ab:5e:f2:17:ea:6c:91:de:f4:e5:32:58: 16:b4:db:f4:20:69:93:31:c3:65:45:07:b0:05:37: be:4e:b3:9d:27:8a:f3:9d:b1:d7:8d:03:c0:9a:71: 40:6b:57:2e:65:33:5a:97:9b:76:58:18:ae:76:c9: 12:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4C:8F:87:DA:7F:F1:7A:A1:DB:81:8B:7E:25:BF:87:EA:A6:B6:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7320ea83-29fc-3129-980c-290a8625bde5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:0b:ec:47:26:3a:c9:2e:74:c3:12:e2:be:8e:2c:a2:8a:66: 71:1a:c7:07:45:9d:46:27:38:ff:4e:39:f6:b9:d9:49:1f:e8: ab:96:ab:7f:5c:08:13:2c:97:14:6f:73:52:06:06:19:ef:d7: c6:74:fd:32:cc:32:95:26:ae:f8:f0:b1:60:5a:7c:48:37:c3: 3f:2d:31:6e:9a:9a:99:a2:6f:b1:f0:b3:12:74:55:f7:d7:84: de:a5:8c:66:d6:ea:38:2c:72:eb:12:51:a4:38:1b:92:e3:0f: 08:34:93:de:63:dd:ba:47:98:ca:bf:33:d4:86:16:a1:07:df: 4a:6a:62:2e:ec:39:21:44:1f:9e:b4:5a:06:34:70:9f:76:fd: f2:34:6d:28:8c:1f:d5:7a:31:58:41:99:bb:ed:49:9e:85:ad: 3e:34:f2:3b:e3:ad:13:3b:60:bf:fa:45:c6:cc:3d:09:0c:0f: b5:a5:39:45:59:a0:4f:5f:fb:7e:98:d9:42:02:36:15:ed:3a: 66:a5:82:e3:78:e0:09:34:ef:ed:aa:40:a6:63:b8:d5:32:4f: 93:8a:55:2c:75:25:6b:b1:6a:b5:a5:b2:90:3b:98:44:e1:8e: 9f:2c:32:66:c8:1d:3d:ca:47:cd:0d:7e:55:56:26:4a:53:fd: 63:48:53:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wtbp7nE24lucyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk ZmQ1NTQzMmItM2E3MC00MDRjLWFiZDMtNWFiNGE4ZGFhZjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD8etkqWeCTcBCyHmM6Urr8LTFPRhHz+FohI SQb2fZxGbxIp4vVj7tcWRopWRp7vQBQFDW2pTr1lxOqSicGfcLEtGpAI+UVdc1Wk ldiZy3S8PGP4oixAQyavFeXJe6Iz/gLTWCFkvkFlw0GxR6ryUp0vJYj1X8htLy4J LwPs1OoTBTgogaiUYFNQUHyjCN7AtI30Sac+vfywtdbuyKl5D0PEDoacUzJJeF2J OwBcCSao6IE4jDGdO5mWrHQkZNWzycJvE/SrXvIX6myR3vTlMlgWtNv0IGmTMcNl RQewBTe+TrOdJ4rznbHXjQPAmnFAa1cuZTNal5t2WBiudskS1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1Mj4faf/F6oduBi34lv4fqprY9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzMyMGVhODMtMjlmYy0z MTI5LTk4MGMtMjkwYTg2MjViZGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYL7EcmOskudMMS4r6OLKKKZnEaxwdFnUYnOP9OOfa52Ukf6KuWq39c CBMslxRvc1IGBhnv18Z0/TLMMpUmrvjwsWBafEg3wz8tMW6ampmib7HwsxJ0VffX hN6ljGbW6jgscusSUaQ4G5LjDwg0k95j3bpHmMq/M9SGFqEH30pqYi7sOSFEH560 WgY0cJ92/fI0bSiMH9V6MVhBmbvtSZ6FrT408jvjrRM7YL/6RcbMPQkMD7WlOUVZ oE9f+36Y2UICNhXtOmalguN44Ak07+2qQKZjuNUyT5OKVSx1JWuxarWlspA7mETh jp8sMmbIHT3KR80NflVWJkpT/WNIU34= -----END CERTIFICATE-----Generated at Tue Jul 1 10:52:07 2025 by rpki-client