$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f609be04-d16a-3ea1-b01b-4ae2c692a6f3.roa File: f609be04-d16a-3ea1-b01b-4ae2c692a6f3.roa (raw, json) Hash identifier: nWvZ91aqD7pfDV8xtIDy3r86NuDYgMEmRVhHH/0C9k8= Subject key identifier: 50:66:D8:3A:C4:57:31:B1:2A:86:87:47:A4:1F:9C:6D:0E:08:38:DC Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A3E45B0916FDF65A1AD9CAD00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f609be04-d16a-3ea1-b01b-4ae2c692a6f3.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 9009 IP address blocks: 172.94.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:b0:91:6f:df:65:a1:ad:9c:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=f750befa-15ca-4a0c-b9c4-81111916f9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:20:ba:59:93:3e:06:e7:d7:5a:2a:01:ae: 7b:6f:ae:30:37:3f:cb:fa:92:d0:05:bc:56:c0:f3: a2:62:4f:80:0e:3e:bf:6b:15:18:96:6c:89:b7:8a: 41:85:2d:f7:2d:d3:bd:62:82:68:10:23:49:47:ae: a3:5f:ce:22:99:02:35:7e:94:21:36:b7:1a:13:73: c3:58:32:e7:98:03:26:7a:46:ae:e0:48:4c:e9:ea: 7b:f5:cf:d1:c4:4f:7c:ae:77:ff:ef:8c:3d:6e:b1: e9:3f:14:46:04:58:1f:25:60:ea:64:54:ac:64:41: e1:a8:ed:f9:cc:8a:77:63:60:21:b5:4a:6c:7e:ed: a8:8d:71:d7:85:5b:d0:39:d3:f8:2e:a1:f7:1a:51: ff:26:48:1a:b1:92:3d:76:23:bb:d5:f2:f1:44:3f: a5:02:70:46:18:30:8f:55:2f:6c:06:5d:91:2c:cd: 6e:e0:03:89:b9:6f:40:02:65:a0:1f:f6:3b:91:a3: d9:45:f0:21:0f:eb:a8:a5:e0:ca:96:56:fb:cc:98: 6a:d1:9b:65:10:2b:66:72:f8:6f:56:67:29:20:35: 3b:89:8e:0e:a0:ef:35:96:11:8c:34:f2:18:1c:9e: a9:30:1b:4b:df:0d:5e:9b:fe:73:0e:f3:f9:10:1e: 11:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:66:D8:3A:C4:57:31:B1:2A:86:87:47:A4:1F:9C:6D:0E:08:38:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f609be04-d16a-3ea1-b01b-4ae2c692a6f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:fc:f8:06:44:2a:94:28:80:ec:2c:76:19:5f:d5:aa:f8:a4: 3d:04:79:22:8a:00:fc:6f:9e:c6:4a:7f:6c:30:2a:85:26:dd: 89:75:7e:75:21:c9:9e:58:02:d0:be:44:37:69:09:e4:cf:02: d3:4d:9e:7f:09:56:a9:a2:a6:ab:2c:a6:ae:05:19:7f:2a:c6: c3:1b:01:1b:8a:2d:2c:8b:79:96:a9:ef:6e:77:d7:04:2e:f5: 7e:fe:34:11:cc:76:32:09:66:2e:89:f2:17:42:b9:50:a4:97: 88:97:9b:1b:ab:7c:44:76:41:03:14:4c:fb:14:ef:90:50:27: 4b:59:f6:df:b6:38:99:9f:c5:ac:d5:4a:82:ab:1f:1b:29:67: 8c:ab:dd:54:a9:0b:40:b0:8d:70:03:6f:0b:b3:45:b9:e2:b1: a5:f3:a6:e0:6a:f9:d8:b1:c7:c1:71:44:58:68:d1:10:10:df: 32:17:5b:55:fd:20:18:a4:b7:0f:05:99:72:0a:98:5e:c4:1e: b9:c8:90:90:89:fd:77:54:81:1f:e1:66:12:fa:a0:8d:cd:84: 4a:ef:37:b9:83:ac:de:d6:57:a1:25:d8:3d:08:90:7f:b4:f4: 6f:f7:5e:46:21:54:a3:3a:f0:c2:b7:38:55:90:0b:a3:c7:51: 05:34:d8:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RbCRb99loa2crQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk Zjc1MGJlZmEtMTVjYS00YTBjLWI5YzQtODExMTE5MTZmOWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVUgulmTPgbn11oqAa57b64wNz/L+pLQBbxW wPOiYk+ADj6/axUYlmyJt4pBhS33LdO9YoJoECNJR66jX84imQI1fpQhNrcaE3PD WDLnmAMmekau4EhM6ep79c/RxE98rnf/74w9brHpPxRGBFgfJWDqZFSsZEHhqO35 zIp3Y2AhtUpsfu2ojXHXhVvQOdP4LqH3GlH/JkgasZI9diO71fLxRD+lAnBGGDCP VS9sBl2RLM1u4AOJuW9AAmWgH/Y7kaPZRfAhD+uopeDKllb7zJhq0ZtlECtmcvhv VmcpIDU7iY4OoO81lhGMNPIYHJ6pMBtL3w1em/5zDvP5EB4RXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBm2DrEVzGxKoaHR6QfnG0OCDjcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjYwOWJlMDQtZDE2YS0z ZWExLWIwMWItNGFlMmM2OTJhNmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABf8+AZEKpQogOwsdhlf1ar4pD0EeSKKAPxvnsZKf2wwKoUm3Yl1fnUh yZ5YAtC+RDdpCeTPAtNNnn8JVqmipqsspq4FGX8qxsMbARuKLSyLeZap72531wQu 9X7+NBHMdjIJZi6J8hdCuVCkl4iXmxurfER2QQMUTPsU75BQJ0tZ9t+2OJmfxazV SoKrHxspZ4yr3VSpC0CwjXADbwuzRbnisaXzpuBq+dixx8FxRFho0RAQ3zIXW1X9 IBiktw8FmXIKmF7EHrnIkJCJ/XdUgR/hZhL6oI3NhErvN7mDrN7WV6El2D0IkH+0 9G/3XkYhVKM68MK3OFWQC6PHUQU02NI= -----END CERTIFICATE-----Generated at Sun Jun 29 11:21:41 2025 by rpki-client