$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5895768f-00f4-3f0b-8e3e-0c260577df14.roa File: 5895768f-00f4-3f0b-8e3e-0c260577df14.roa (raw, json) Hash identifier: jBENCspqikqg+OjxAuunEDS97fY+l2peuupL8YfzSqM= Subject key identifier: F1:FD:B9:9C:BB:A1:13:16:0A:62:DA:97:7B:93:91:D0:FF:9E:E0:D9 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848F7C143C0FEBA9F8210CE7E80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5895768f-00f4-3f0b-8e3e-0c260577df14.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 60117 IP address blocks: 172.94.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:43:c0:fe:ba:9f:82:10:ce:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=daf86dd8-5967-4a41-bcd1-1717dceccc4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a5:87:93:3e:12:bb:e5:cf:fd:60:2b:f9:49: db:9c:75:9c:38:b7:23:49:48:d9:77:69:8b:24:2e: 9a:0e:02:c6:35:35:09:aa:ad:08:24:aa:5e:57:8c: 73:6e:ae:b9:07:e4:63:b2:b6:5a:70:41:18:c9:33: 5d:ae:ee:2e:ee:67:8a:c4:74:a9:55:8b:a4:6e:ac: bd:ae:c3:cf:52:9a:2a:89:d9:4c:0d:cb:83:fb:00: 7c:6e:8a:81:97:8e:c0:36:90:9f:60:c0:02:cd:ed: 75:f1:a9:43:98:a5:91:8d:0b:97:e3:86:5a:59:8e: ad:e1:d2:a5:c0:ef:d1:e5:fa:21:a9:0f:76:da:7e: 68:1c:10:87:2f:c9:20:b5:39:0b:c3:8c:04:8e:a7: 3a:8c:ed:a5:88:97:4b:0a:eb:a7:00:4e:c4:aa:86: f6:20:9b:1f:af:dd:ff:aa:2a:b2:42:a5:b8:de:a6: 50:75:9f:17:ae:78:46:40:6e:e5:d8:d8:2c:bc:a0: d8:17:ee:26:93:72:01:39:e7:8f:c5:76:fb:50:b4: 4d:2a:ac:8b:75:e0:3b:9d:3e:80:48:ed:62:80:45: 82:8b:e3:99:07:4a:0e:5e:e2:18:8e:1a:fa:20:15: c1:13:eb:5b:fd:d2:8c:b6:d0:11:f3:fb:fe:84:fe: 67:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FD:B9:9C:BB:A1:13:16:0A:62:DA:97:7B:93:91:D0:FF:9E:E0:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5895768f-00f4-3f0b-8e3e-0c260577df14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f3:fc:b8:89:bf:45:94:da:4e:3c:4c:d7:69:6a:44:e8:3d: 8a:a6:cf:ac:9c:d2:dd:78:d5:8a:5f:5d:d6:00:78:a6:53:6a: b2:60:88:00:a9:03:33:83:7e:d6:41:88:ee:bd:1b:b3:72:7b: d6:02:d3:6a:ef:70:be:69:bd:b0:91:dd:2e:b2:c0:68:af:48: 54:33:3c:4c:35:f4:36:1b:04:e0:55:62:b0:e8:b8:38:1e:7f: 17:fa:f1:1b:b2:50:b2:58:61:e9:78:9b:10:df:d4:de:59:f3: 29:cf:66:03:e5:4c:af:c9:d4:6b:9e:87:f9:f0:6c:3c:9b:fa: f8:3b:36:7e:27:13:6c:12:66:a9:05:fe:1d:57:18:b9:93:c3: a9:97:db:00:2b:61:10:3d:c4:33:39:81:9b:31:42:69:82:27: dc:b0:72:6e:a7:e9:0f:d6:ee:8c:4c:99:2d:13:ea:4e:d5:3e: bc:f6:3e:df:07:e0:73:d5:91:cd:36:74:1d:f6:eb:e3:1d:5e: 18:c6:5c:8b:20:de:c7:fb:94:11:02:e3:86:1f:9a:52:5a:1f: 51:56:ae:c7:3d:23:35:a8:a4:ef:b8:ae:03:7b:a1:f7:d3:62: fd:6d:1c:ab:a7:3b:aa:6f:bf:27:56:f6:a0:5c:c8:e4:c0:6a: 4d:c6:be:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wUPA/rqfghDOfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk ZGFmODZkZDgtNTk2Ny00YTQxLWJjZDEtMTcxN2RjZWNjYzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaWHkz4Su+XP/WAr+UnbnHWcOLcjSUjZd2mL JC6aDgLGNTUJqq0IJKpeV4xzbq65B+RjsrZacEEYyTNdru4u7meKxHSpVYukbqy9 rsPPUpoqidlMDcuD+wB8boqBl47ANpCfYMACze118alDmKWRjQuX44ZaWY6t4dKl wO/R5fohqQ922n5oHBCHL8kgtTkLw4wEjqc6jO2liJdLCuunAE7Eqob2IJsfr93/ qiqyQqW43qZQdZ8XrnhGQG7l2NgsvKDYF+4mk3IBOeePxXb7ULRNKqyLdeA7nT6A SO1igEWCi+OZB0oOXuIYjhr6IBXBE+tb/dKMttAR8/v+hP5nIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPH9uZy7oRMWCmLal3uTkdD/nuDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTg5NTc2OGYtMDBmNC0z ZjBiLThlM2UtMGMyNjA1NzdkZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDz/LiJv0WU2k48TNdpakToPYqmz6yc0t141YpfXdYAeKZTarJgiACp AzODftZBiO69G7Nye9YC02rvcL5pvbCR3S6ywGivSFQzPEw19DYbBOBVYrDouDge fxf68RuyULJYYel4mxDf1N5Z8ynPZgPlTK/J1Gueh/nwbDyb+vg7Nn4nE2wSZqkF /h1XGLmTw6mX2wArYRA9xDM5gZsxQmmCJ9ywcm6n6Q/W7oxMmS0T6k7VPrz2Pt8H 4HPVkc02dB326+MdXhjGXIsg3sf7lBEC44YfmlJaH1FWrsc9IzWopO+4rgN7offT Yv1tHKunO6pvvydW9qBcyOTAak3Gvhc= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:42 2025 by rpki-client