$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/50bff4eb-97a9-3a59-b4c3-bbb0676e6084.roa File: 50bff4eb-97a9-3a59-b4c3-bbb0676e6084.roa (raw, json) Hash identifier: SQMJVd8XLqHDSczip4wbkulfRA34+y0bE8PebQ1/EYs= Subject key identifier: BF:EA:70:BE:14:B0:27:41:E2:70:94:F5:CA:77:12:D1:E7:89:13:EF Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848F7C14423AD7B6609CC90EDC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/50bff4eb-97a9-3a59-b4c3-bbb0676e6084.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 60117 IP address blocks: 172.94.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:44:23:ad:7b:66:09:cc:90:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=5d95f560-4c5f-42cb-936d-1ae80a92efab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6b:c8:ce:65:bf:16:d4:a4:06:66:05:04:96: 63:47:1b:f0:d0:26:0b:a7:e0:a1:2c:96:fb:61:f0: 0f:cf:51:95:36:4a:4b:83:b3:c2:0d:e2:1b:55:17: 4d:82:a8:2c:13:4b:99:8d:95:09:87:d1:8e:75:32: 1e:40:88:fd:c4:a1:35:b5:9e:1b:fb:ea:ea:58:48: cc:ab:2d:6d:21:74:7d:fa:89:df:17:52:e8:8d:a9: 4d:f4:ca:05:f0:f2:3e:50:1f:6d:5e:44:49:c6:b6: 53:70:e0:a1:d7:64:96:1f:13:4a:53:aa:48:a0:b8: f0:3a:ac:cb:f3:13:63:b8:04:97:88:31:ba:09:a2: 87:69:26:7e:25:da:fd:22:c7:71:5b:54:e3:71:15: 6b:0c:1f:f5:22:11:58:dc:a1:98:f6:a0:b5:cb:64: a5:31:cf:48:a0:52:96:f7:90:a3:28:da:92:6e:cc: 0b:20:2b:35:74:d4:eb:fc:85:77:7f:09:35:d3:d0: ca:73:3c:50:51:35:ce:dd:43:cf:08:4d:6b:d1:73: a9:39:44:ba:d7:8a:8d:56:41:78:14:ed:47:ee:75: 13:7f:c6:02:7e:79:6f:ea:e9:f5:e1:70:87:10:f6: b1:76:38:b3:3a:a5:19:c0:13:9f:d8:b2:74:b9:5f: 27:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EA:70:BE:14:B0:27:41:E2:70:94:F5:CA:77:12:D1:E7:89:13:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/50bff4eb-97a9-3a59-b4c3-bbb0676e6084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ec:3a:21:8f:3f:9c:a1:71:c1:f4:57:25:32:b3:96:04:06: 1d:9f:90:7d:94:8f:c4:a8:95:ec:df:01:02:5f:43:8d:82:f4: 9a:70:01:b3:41:6e:21:a7:75:6b:f7:04:10:f1:51:0a:84:e1: 23:50:2d:6f:3f:ae:5e:93:b8:10:3e:1e:c0:fa:f1:4b:97:20: 21:fa:81:b2:e5:a2:b3:1f:8a:04:19:6e:f4:3a:8d:f3:a5:cc: 99:2a:c1:6b:17:fa:a2:24:a7:cb:b5:5d:7f:46:4e:db:e8:95: f0:db:f0:8a:ed:75:2f:d6:71:e8:cb:f3:f7:b2:19:ad:7e:7f: 67:01:ae:3a:13:32:24:8a:8f:b9:7e:64:20:28:f8:dc:ae:c4: c7:9d:6e:c5:4f:6a:5d:34:9e:df:29:4f:94:a7:e0:f1:4a:fd: 49:78:46:85:35:28:56:06:26:64:dd:7f:82:c7:e9:ce:b8:88: fc:84:37:b6:90:29:e7:73:a6:4e:42:a6:a7:23:40:6e:01:d7: e8:5a:c4:38:1c:df:41:f5:42:9a:07:12:c6:0f:8b:39:5a:ad: ba:2c:b8:df:3c:02:0e:08:d0:18:26:91:3c:38:09:b6:1b:ae: 89:6c:e2:17:d3:0f:51:51:c8:c6:c2:ec:2c:22:66:38:78:3c: 26:87:c4:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wUQjrXtmCcyQ7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk NWQ5NWY1NjAtNGM1Zi00MmNiLTkzNmQtMWFlODBhOTJlZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGvIzmW/FtSkBmYFBJZjRxvw0CYLp+ChLJb7 YfAPz1GVNkpLg7PCDeIbVRdNgqgsE0uZjZUJh9GOdTIeQIj9xKE1tZ4b++rqWEjM qy1tIXR9+onfF1LojalN9MoF8PI+UB9tXkRJxrZTcOCh12SWHxNKU6pIoLjwOqzL 8xNjuASXiDG6CaKHaSZ+Jdr9IsdxW1TjcRVrDB/1IhFY3KGY9qC1y2SlMc9IoFKW 95CjKNqSbswLICs1dNTr/IV3fwk109DKczxQUTXO3UPPCE1r0XOpOUS614qNVkF4 FO1H7nUTf8YCfnlv6un14XCHEPaxdjizOqUZwBOf2LJ0uV8nowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/qcL4UsCdB4nCU9cp3EtHniRPvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTBiZmY0ZWItOTdhOS0z YTU5LWI0YzMtYmJiMDY3NmU2MDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjsOiGPP5yhccH0VyUys5YEBh2fkH2Uj8SolezfAQJfQ42C9JpwAbNB biGndWv3BBDxUQqE4SNQLW8/rl6TuBA+HsD68UuXICH6gbLlorMfigQZbvQ6jfOl zJkqwWsX+qIkp8u1XX9GTtvolfDb8IrtdS/WcejL8/eyGa1+f2cBrjoTMiSKj7l+ ZCAo+NyuxMedbsVPal00nt8pT5Sn4PFK/Ul4RoU1KFYGJmTdf4LH6c64iPyEN7aQ Kedzpk5CpqcjQG4B1+haxDgc30H1QpoHEsYPizlarbosuN88Ag4I0BgmkTw4CbYb rols4hfTD1FRyMbC7CwiZjh4PCaHxHg= -----END CERTIFICATE-----Generated at Sat Apr 5 16:44:43 2025 by rpki-client