$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/eea0c1c0-f27f-3a05-a0c4-10a69c0cbc15.roa File: eea0c1c0-f27f-3a05-a0c4-10a69c0cbc15.roa (raw, json) Hash identifier: O8rFD5fYi9elHSLvJ0ouB+E2Mwx/aRpRCKvw6SoggSo= Subject key identifier: 59:E6:75:6F:9E:F1:F0:A7:E7:16:16:92:89:73:2A:F6:88:88:35:30 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A56B96F545766F24CED779F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/eea0c1c0-f27f-3a05-a0c4-10a69c0cbc15.roa Signing time: Sat 28 Jun 2025 07:13:55 +0000 ROA not before: Sat 28 Jun 2025 07:13:55 +0000 ROA not after: Fri 26 Sep 2025 07:13:55 +0000 asID: 207184 IP address blocks: 172.94.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:b9:6f:54:57:66:f2:4c:ed:77:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 28 07:13:55 2025 GMT Not After : Sep 26 07:13:55 2025 GMT Subject: CN=23c152c2-ef91-47d1-82da-0b20111ab4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:3a:e5:fc:99:f2:ef:3f:7d:7b:02:c9:56: 49:b4:2c:31:96:62:cf:ca:29:19:e9:6b:6a:3f:a1: 08:ac:49:2d:b1:04:ce:5a:e4:c6:22:8a:cd:42:b0: 41:da:ca:17:09:9e:64:5a:18:c6:3e:65:27:f7:f9: c4:1b:b3:50:e5:2f:50:f7:a2:91:45:cf:b6:25:a3: 3b:cf:1e:34:b5:1a:58:9f:f7:b0:24:d1:b6:d9:41: 3c:6b:71:18:9b:93:72:f3:b6:e5:e5:9a:24:d3:ab: 2a:51:00:4a:db:f9:7f:31:67:b8:10:5e:e4:65:93: cb:e4:75:de:b3:ec:69:47:ba:58:d3:b3:ea:c1:0e: dc:86:4a:06:ad:4d:e1:98:28:89:4c:8b:3e:c9:4b: b6:53:07:7b:0f:fa:19:fa:99:b3:27:ba:62:30:69: 96:f8:e2:30:11:a2:3a:1b:d5:a3:a3:3d:3d:04:cc: 0b:7b:0b:3e:0c:4a:9e:48:71:6f:9f:f1:61:f5:5b: 93:ce:a6:2d:44:56:f8:ab:75:81:5a:6d:38:8a:db: e2:77:9b:60:bd:8b:1f:41:20:f3:db:65:f5:d4:fa: 0d:7f:b7:23:d7:a5:28:12:c1:48:cf:80:cf:7c:56: bd:53:6c:c0:5a:16:77:2e:55:02:35:f8:90:d9:3e: a4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E6:75:6F:9E:F1:F0:A7:E7:16:16:92:89:73:2A:F6:88:88:35:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/eea0c1c0-f27f-3a05-a0c4-10a69c0cbc15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a9:f1:61:56:c1:85:52:d7:71:5f:3e:80:e0:b8:bc:85:4b: 05:3d:8d:bb:aa:c9:5a:33:0f:97:28:79:0e:16:0e:b0:34:25: 49:8d:3e:4b:d6:97:6c:e2:49:f8:3c:1a:ae:99:84:7a:e5:a0: e5:22:03:dd:1a:05:0d:70:58:63:87:70:8d:b1:94:8c:5a:a9: 45:46:31:ad:52:a4:af:d1:7f:e0:b8:d8:4e:b2:71:8b:39:15: 2b:ee:b4:54:2e:7e:03:ab:ec:8b:47:fd:51:9d:f4:2c:3b:ed: 60:71:66:48:57:1b:f8:3f:40:2d:ca:f8:bf:54:46:29:5a:6b: 2a:b5:9a:65:6b:b3:8a:36:53:bc:7d:26:4f:36:c1:43:20:b4: 4b:38:97:d0:98:66:f9:31:8a:88:12:c2:e4:66:5d:bc:40:05: 06:fe:ba:81:2d:b8:a3:a3:0c:e2:c6:79:d8:ae:ca:6d:ac:c8: 4c:08:08:97:40:7c:22:52:c5:82:1c:51:39:0d:52:9b:2f:d6: e3:b2:a2:0f:32:bc:dc:6c:ca:79:56:9e:d5:37:69:95:c5:05: e9:69:33:c5:2f:3f:0e:e5:b8:ae:aa:39:84:82:2a:68:0e:c2: 4e:d6:c1:8e:e6:62:88:ac:53:07:13:60:d5:4c:58:86:57:75: 61:65:8d:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpWuW9UV2byTO13n4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYyODA3MTM1NVoXDTI1MDkyNjA3MTM1NVowLzEtMCsGA1UEAxMk MjNjMTUyYzItZWY5MS00N2QxLTgyZGEtMGIyMDExMWFiNGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbM65fyZ8u8/fXsCyVZJtCwxlmLPyikZ6Wtq P6EIrEktsQTOWuTGIorNQrBB2soXCZ5kWhjGPmUn9/nEG7NQ5S9Q96KRRc+2JaM7 zx40tRpYn/ewJNG22UE8a3EYm5Ny87bl5Zok06sqUQBK2/l/MWe4EF7kZZPL5HXe s+xpR7pY07PqwQ7chkoGrU3hmCiJTIs+yUu2Uwd7D/oZ+pmzJ7piMGmW+OIwEaI6 G9Wjoz09BMwLews+DEqeSHFvn/Fh9VuTzqYtRFb4q3WBWm04itvid5tgvYsfQSDz 22X11PoNf7cj16UoEsFIz4DPfFa9U2zAWhZ3LlUCNfiQ2T6kGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnmdW+e8fCn5xYWkolzKvaIiDUwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZWVhMGMxYzAtZjI3Zi0z YTA1LWEwYzQtMTBhNjljMGNiYzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+p8WFWwYVS13FfPoDguLyFSwU9jbuqyVozD5coeQ4WDrA0JUmNPkvW l2ziSfg8Gq6ZhHrloOUiA90aBQ1wWGOHcI2xlIxaqUVGMa1SpK/Rf+C42E6ycYs5 FSvutFQufgOr7ItH/VGd9Cw77WBxZkhXG/g/QC3K+L9URilaayq1mmVrs4o2U7x9 Jk82wUMgtEs4l9CYZvkxiogSwuRmXbxABQb+uoEtuKOjDOLGediuym2syEwICJdA fCJSxYIcUTkNUpsv1uOyog8yvNxsynlWntU3aZXFBelpM8UvPw7luK6qOYSCKmgO wk7WwY7mYoisUwcTYNVMWIZXdWFljdU= -----END CERTIFICATE-----Generated at Sun Jun 29 16:16:12 2025 by rpki-client