$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7a6ed6ad-6241-3559-aaa6-3744d57cdeea.roa File: 7a6ed6ad-6241-3559-aaa6-3744d57cdeea.roa (raw, json) Hash identifier: ioMgCNRMdmTfb772u9PMj+i9bhbywQn/QVVv4TabG5o= Subject key identifier: 6A:32:F2:D7:9B:91:AA:06:66:5B:F7:5E:FA:07:BE:EB:D2:CD:7E:A0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A4F05BFE82C70268A13BAFE00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7a6ed6ad-6241-3559-aaa6-3744d57cdeea.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 9009 IP address blocks: 172.94.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:bf:e8:2c:70:26:8a:13:ba:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=3149f31b-9488-4596-8480-bee82673fb90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bb:f5:38:67:d8:2c:26:08:e1:33:a3:01:79: 6e:8d:8d:95:4b:16:49:17:78:55:ec:5f:ff:3b:cf: b7:ec:cc:c4:cc:87:7c:ea:fc:7b:25:81:c8:0b:bd: 6e:85:31:0e:0b:f2:04:0b:f1:5c:16:2b:5d:00:59: 93:85:42:11:29:ac:7d:3c:13:47:d1:56:bf:2e:94: e9:7b:c4:7b:58:8c:ce:0d:cc:36:57:25:de:55:73: fb:e8:a7:c7:c4:22:0d:1a:1f:24:22:ae:eb:67:7c: f8:b8:17:3f:ee:59:14:56:c1:47:35:6e:37:30:80: 32:68:84:61:a3:38:06:fe:49:36:85:72:47:de:8a: 04:14:ce:01:bf:c8:17:c8:d4:68:1f:13:8f:56:07: 27:49:e6:0c:c8:12:26:44:80:d9:3f:5d:4c:6d:88: cc:a4:22:8a:69:cd:73:b9:82:8c:af:7d:e6:f4:70: f3:92:ba:0f:f6:ec:89:d8:43:c2:55:15:df:25:86: 13:cb:6f:6f:20:f0:6a:47:36:02:c9:e0:ab:8b:8c: d3:52:a3:9b:f0:24:53:72:43:9a:ec:54:59:2a:bf: 00:4f:40:0a:c4:bd:6e:47:ba:54:46:ed:ee:08:98: 16:b3:32:71:42:8e:2d:65:b1:a1:82:35:8b:ac:35: 39:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:32:F2:D7:9B:91:AA:06:66:5B:F7:5E:FA:07:BE:EB:D2:CD:7E:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7a6ed6ad-6241-3559-aaa6-3744d57cdeea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:69:81:ef:0f:ce:b9:2e:51:71:be:fa:5f:16:59:fc:fe:d5: 38:ce:9f:87:46:05:4b:ee:62:5c:0a:6e:ae:6b:01:60:5d:70: 52:99:27:68:4f:ba:8f:77:30:ff:d5:e2:77:45:93:15:92:a0: fe:04:e4:8b:18:4b:7d:a1:e9:79:a9:e1:18:12:50:6c:0e:96: 8c:43:e6:f1:4b:02:8a:44:de:dd:b0:b4:8c:31:f1:91:5b:93: e2:88:f4:5a:13:b1:74:d7:84:83:a9:a6:79:b4:f2:af:84:36: 6c:29:cd:25:e5:94:1d:48:40:42:08:32:3f:20:1c:9a:8d:ed: ee:68:71:db:5d:e2:7c:b9:b1:60:aa:2c:18:45:2f:d3:a2:89: 23:2d:35:f3:8b:56:2e:3a:70:30:16:b7:ac:2b:bd:ba:e4:e1: 8c:9f:57:c1:8c:4d:c9:cf:a5:72:f9:c6:dd:e0:30:ec:f6:49: fa:50:7a:1c:fb:a5:76:f0:55:5d:c2:08:40:4d:59:ba:06:82: 07:6e:86:ef:ce:b4:8f:fb:82:5f:5d:1a:68:58:8c:23:e0:ec: 3a:24:87:26:6c:b0:cd:76:09:bd:fa:19:ae:72:36:77:f8:86: 37:74:0d:9b:a5:a0:4c:05:43:95:b5:d9:51:94:9f:d6:e7:30: 16:9c:23:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBb/oLHAmihO6/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk MzE0OWYzMWItOTQ4OC00NTk2LTg0ODAtYmVlODI2NzNmYjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLv1OGfYLCYI4TOjAXlujY2VSxZJF3hV7F// O8+37MzEzId86vx7JYHIC71uhTEOC/IEC/FcFitdAFmThUIRKax9PBNH0Va/LpTp e8R7WIzODcw2VyXeVXP76KfHxCINGh8kIq7rZ3z4uBc/7lkUVsFHNW43MIAyaIRh ozgG/kk2hXJH3ooEFM4Bv8gXyNRoHxOPVgcnSeYMyBImRIDZP11MbYjMpCKKac1z uYKMr33m9HDzkroP9uyJ2EPCVRXfJYYTy29vIPBqRzYCyeCri4zTUqOb8CRTckOa 7FRZKr8AT0AKxL1uR7pURu3uCJgWszJxQo4tZbGhgjWLrDU5HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoy8tebkaoGZlv3XvoHvuvSzX6gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvN2E2ZWQ2YWQtNjI0MS0z NTU5LWFhYTYtMzc0NGQ1N2NkZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClpge8PzrkuUXG++l8WWfz+1TjOn4dGBUvuYlwKbq5rAWBdcFKZJ2hP uo93MP/V4ndFkxWSoP4E5IsYS32h6Xmp4RgSUGwOloxD5vFLAopE3t2wtIwx8ZFb k+KI9FoTsXTXhIOppnm08q+ENmwpzSXllB1IQEIIMj8gHJqN7e5ocdtd4ny5sWCq LBhFL9OiiSMtNfOLVi46cDAWt6wrvbrk4YyfV8GMTcnPpXL5xt3gMOz2SfpQehz7 pXbwVV3CCEBNWboGggduhu/OtI/7gl9dGmhYjCPg7DokhyZssM12Cb36Ga5yNnf4 hjd0DZuloEwFQ5W12VGUn9bnMBacIwE= -----END CERTIFICATE-----Generated at Tue Jul 1 20:44:21 2025 by rpki-client