$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7fb011a1-47ed-3d30-b7ab-13e398fceee1.roa File: 7fb011a1-47ed-3d30-b7ab-13e398fceee1.roa (raw, json) Hash identifier: AhwuYTdyDxD6BmE58UN283W8sBIBTvXoDeH0855oyB8= Subject key identifier: 53:ED:61:72:70:19:9B:E2:9E:F8:33:C8:C3:B8:FB:0B:EE:E5:C8:52 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A3B65B56E3F11D5F37E1F8200 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7fb011a1-47ed-3d30-b7ab-13e398fceee1.roa Signing time: Wed 18 Jun 2025 12:18:23 +0000 ROA not before: Wed 18 Jun 2025 12:18:23 +0000 ROA not after: Tue 16 Sep 2025 12:18:23 +0000 asID: 29802 IP address blocks: 172.94.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:65:b5:6e:3f:11:d5:f3:7e:1f:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 18 12:18:23 2025 GMT Not After : Sep 16 12:18:23 2025 GMT Subject: CN=69fadc1e-7a51-4ee4-acb6-4c907825a06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0f:d2:06:ee:e8:3d:ff:01:32:26:b4:82:15: 7c:a2:87:9d:70:26:d9:68:0e:77:95:56:8d:f8:17: 1a:6b:88:40:59:4c:a6:b2:59:b0:9e:33:2f:e7:20: bd:27:ed:4c:40:b6:c5:f2:54:d0:4b:af:0c:5d:24: 57:05:d1:3f:76:69:56:de:94:43:87:10:6b:ba:e8: ea:8b:7c:02:35:24:bd:79:07:e6:78:01:47:ac:da: 6a:dd:a8:02:e2:a6:d5:df:c2:b3:de:d0:05:c7:c8: 86:ec:ab:37:23:31:18:01:86:b3:87:89:ff:94:38: a0:a0:11:ae:27:7c:62:50:85:bc:81:86:83:2f:e3: bb:54:a4:47:49:8a:c6:26:1a:5e:a8:cc:08:d8:e4: e6:ec:b9:18:17:d7:d5:46:80:21:b1:e3:0a:98:28: 31:44:fc:90:f9:70:8f:66:6d:43:88:66:a6:22:ca: ed:ad:35:ef:aa:bc:e8:0c:ee:e6:83:3f:e2:02:9b: 9b:e4:6a:67:ad:9b:9b:ec:8d:12:f1:17:60:25:ab: dc:11:9c:4c:b7:df:06:bb:fa:25:cc:6a:f0:1b:e3: df:30:cb:dd:f1:b7:31:9b:c0:9d:36:9b:d0:0f:d0: 32:56:b6:3b:45:12:6e:2c:29:94:65:e9:cd:64:e7: da:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:ED:61:72:70:19:9B:E2:9E:F8:33:C8:C3:B8:FB:0B:EE:E5:C8:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7fb011a1-47ed-3d30-b7ab-13e398fceee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:2d:30:5f:14:4c:1d:09:26:e0:53:13:9d:61:f4:56:bc:31: 89:92:92:38:26:20:91:c8:94:67:d9:16:da:f6:cf:af:15:17: f8:05:ab:df:6d:23:89:3d:77:d5:97:e2:d0:32:ab:06:92:b5: de:52:85:93:34:0d:29:29:ee:35:d3:52:0e:08:f8:6f:21:a9: cd:ca:3e:db:dc:fb:d3:57:53:3e:ce:50:44:6b:14:ab:83:71: dc:35:37:49:e0:71:cb:53:e7:a6:7e:15:99:f0:95:39:86:db: 0a:41:34:aa:c6:dd:cd:2f:67:17:88:2a:27:15:bf:91:9a:11: 4c:d7:2f:b3:45:db:c0:f5:d0:0a:e4:75:cf:4a:d0:93:4b:d7: 97:f8:4e:f8:6c:9e:7c:de:2f:bc:a2:d2:51:cc:e1:a0:bb:61: e9:46:4f:8b:cd:bd:b9:77:0c:92:2e:8e:95:fc:e2:24:d8:db: c3:69:5f:a2:d5:37:c6:ac:f4:c8:e1:11:55:84:7f:15:3c:00: c1:f7:a3:30:ca:7b:45:b1:2e:2d:03:d2:75:37:6e:3b:1e:22: 47:13:4e:8e:66:10:c6:ed:9c:a2:d4:64:66:44:d8:be:b1:a2: d9:1e:6a:f0:62:4e:4b:61:27:34:ff:69:77:d8:d0:30:23:bc: 7f:b4:83:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ZbVuPxHV834fggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxODEyMTgyM1oXDTI1MDkxNjEyMTgyM1owLzEtMCsGA1UEAxMk NjlmYWRjMWUtN2E1MS00ZWU0LWFjYjYtNGM5MDc4MjVhMDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA/SBu7oPf8BMia0ghV8ooedcCbZaA53lVaN +Bcaa4hAWUymslmwnjMv5yC9J+1MQLbF8lTQS68MXSRXBdE/dmlW3pRDhxBruujq i3wCNSS9eQfmeAFHrNpq3agC4qbV38Kz3tAFx8iG7Ks3IzEYAYazh4n/lDigoBGu J3xiUIW8gYaDL+O7VKRHSYrGJhpeqMwI2OTm7LkYF9fVRoAhseMKmCgxRPyQ+XCP Zm1DiGamIsrtrTXvqrzoDO7mgz/iApub5GpnrZub7I0S8RdgJavcEZxMt98Gu/ol zGrwG+PfMMvd8bcxm8CdNpvQD9AyVrY7RRJuLCmUZenNZOfa7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPtYXJwGZvinvgzyMO4+wvu5chSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvN2ZiMDExYTEtNDdlZC0z ZDMwLWI3YWItMTNlMzk4ZmNlZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYtMF8UTB0JJuBTE51h9Fa8MYmSkjgmIJHIlGfZFtr2z68VF/gFq99t I4k9d9WX4tAyqwaStd5ShZM0DSkp7jXTUg4I+G8hqc3KPtvc+9NXUz7OUERrFKuD cdw1N0ngcctT56Z+FZnwlTmG2wpBNKrG3c0vZxeIKicVv5GaEUzXL7NF28D10Ark dc9K0JNL15f4TvhsnnzeL7yi0lHM4aC7YelGT4vNvbl3DJIujpX84iTY28NpX6LV N8as9MjhEVWEfxU8AMH3ozDKe0WxLi0D0nU3bjseIkcTTo5mEMbtnKLUZGZE2L6x otkeavBiTkthJzT/aXfY0DAjvH+0gw8= -----END CERTIFICATE-----Generated at Mon Jun 30 18:18:43 2025 by rpki-client