$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8517a87a-2f44-38dd-91bb-eef4d6142d93.roa File: 8517a87a-2f44-38dd-91bb-eef4d6142d93.roa (raw, json) Hash identifier: hfVvoy2SPdVXe/L+UABC2/bg2S37f9PqsIke2YSYc9M= Subject key identifier: 02:8D:B5:95:0B:23:37:3F:68:20:0E:EA:18:7E:4D:67:F7:C7:F0:83 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A3B62B79713B9A6ED18746A00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8517a87a-2f44-38dd-91bb-eef4d6142d93.roa Signing time: Wed 18 Jun 2025 12:12:21 +0000 ROA not before: Wed 18 Jun 2025 12:12:21 +0000 ROA not after: Tue 16 Sep 2025 12:12:21 +0000 asID: 29802 IP address blocks: 172.94.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:62:b7:97:13:b9:a6:ed:18:74:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 18 12:12:21 2025 GMT Not After : Sep 16 12:12:21 2025 GMT Subject: CN=ca426d85-a225-47c7-b422-228594792253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a7:f0:1d:f2:75:b2:46:7f:16:74:0f:45:ea: 40:0c:8b:9d:76:b0:43:e7:14:8c:39:8a:b8:d1:61: 3d:aa:e1:74:55:c6:3c:84:9a:3d:0d:b4:6e:c6:29: a0:b0:26:85:14:80:30:3b:e3:5d:a3:05:23:82:80: 1c:77:5e:b0:e5:61:e0:56:3d:31:b6:e6:d5:5d:31: c2:ba:9d:6b:1c:75:37:51:43:29:f3:85:e1:5f:91: cc:76:48:e7:4b:0b:10:a5:2a:e5:33:73:59:c4:f1: 1a:12:a0:05:23:2a:1a:a3:0a:ae:76:51:51:5d:64: 20:aa:ba:b2:49:66:67:f3:ed:b9:19:fd:75:8f:b3: ed:60:bb:2c:b1:f6:79:5b:67:b7:c1:e3:2c:8e:b9: 69:ca:81:49:23:52:bb:03:09:ab:5e:2d:f1:9c:ad: 3b:50:39:ee:d9:c0:cb:26:71:a1:de:71:e8:54:8a: 32:af:d8:33:61:f2:30:41:36:f1:41:3a:99:88:e3: 5c:55:1e:22:40:b9:85:f1:5c:9c:b3:38:54:68:95: c7:cf:1f:0a:88:32:ad:ac:20:2a:20:25:ad:36:37: f8:8b:d3:19:09:99:7c:f6:89:e7:58:35:e1:c2:ab: 57:66:4f:5e:d1:1e:92:5d:35:ae:58:2b:e1:3c:5a: 0a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8D:B5:95:0B:23:37:3F:68:20:0E:EA:18:7E:4D:67:F7:C7:F0:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/8517a87a-2f44-38dd-91bb-eef4d6142d93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a2:39:7e:93:1e:63:d4:c4:0c:55:25:6d:82:38:45:64:a1: 31:9e:a1:a3:13:04:c6:b9:8b:04:89:d8:c3:84:b0:ff:1b:b6: 98:4a:64:7b:1a:c6:21:87:a5:95:88:e4:22:7f:68:e0:6a:df: e7:6f:df:de:8b:7c:75:da:fd:08:4d:45:00:81:ab:b1:34:3f: 3e:ce:dd:a3:4a:3e:1f:de:16:20:07:ac:94:78:e8:0d:66:4f: 47:d1:9a:4b:36:79:57:31:f4:12:d2:3c:31:fe:19:99:8b:45: 25:ce:cd:fb:cf:14:aa:30:a0:4b:1c:3b:66:4a:3e:2d:75:67: 91:ff:20:60:34:d4:be:ed:b9:6f:8c:84:96:5e:a7:bc:2c:13: 2a:57:7f:3a:50:dd:b9:56:a9:1f:89:65:29:be:b0:90:e6:10: 9f:5e:19:c4:19:40:9e:20:e9:cd:3b:a2:d7:a9:23:b1:eb:42: 99:27:cf:d6:4f:c8:5f:34:da:92:e6:82:fd:01:ba:f0:91:aa: 45:01:25:97:68:9f:e4:59:37:fe:e5:90:5e:b6:c7:c0:af:d5: c5:a4:50:70:54:b8:66:91:5e:cd:c6:ee:08:6d:d5:95:b7:d7: 7d:9a:b4:86:05:05:dc:d2:96:52:34:24:c2:64:af:2c:d6:e4: f7:c8:23:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7YreXE7mm7Rh0agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxODEyMTIyMVoXDTI1MDkxNjEyMTIyMVowLzEtMCsGA1UEAxMk Y2E0MjZkODUtYTIyNS00N2M3LWI0MjItMjI4NTk0NzkyMjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKfwHfJ1skZ/FnQPRepADIuddrBD5xSMOYq4 0WE9quF0VcY8hJo9DbRuximgsCaFFIAwO+NdowUjgoAcd16w5WHgVj0xtubVXTHC up1rHHU3UUMp84XhX5HMdkjnSwsQpSrlM3NZxPEaEqAFIyoaowqudlFRXWQgqrqy SWZn8+25Gf11j7PtYLsssfZ5W2e3weMsjrlpyoFJI1K7AwmrXi3xnK07UDnu2cDL JnGh3nHoVIoyr9gzYfIwQTbxQTqZiONcVR4iQLmF8VycszhUaJXHzx8KiDKtrCAq ICWtNjf4i9MZCZl89onnWDXhwqtXZk9e0R6SXTWuWCvhPFoK0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKNtZULIzc/aCAO6hh+TWf3x/CDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODUxN2E4N2EtMmY0NC0z OGRkLTkxYmItZWVmNGQ2MTQyZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACiOX6THmPUxAxVJW2COEVkoTGeoaMTBMa5iwSJ2MOEsP8btphKZHsa xiGHpZWI5CJ/aOBq3+dv396LfHXa/QhNRQCBq7E0Pz7O3aNKPh/eFiAHrJR46A1m T0fRmks2eVcx9BLSPDH+GZmLRSXOzfvPFKowoEscO2ZKPi11Z5H/IGA01L7tuW+M hJZep7wsEypXfzpQ3blWqR+JZSm+sJDmEJ9eGcQZQJ4g6c07otepI7HrQpknz9ZP yF802pLmgv0BuvCRqkUBJZdon+RZN/7lkF62x8Cv1cWkUHBUuGaRXs3G7ght1ZW3 132atIYFBdzSllI0JMJkryzW5PfII/4= -----END CERTIFICATE-----Generated at Tue Jul 1 21:03:05 2025 by rpki-client