$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/759913cc-b395-39e2-80ab-8a5ae18118af.roa File: 759913cc-b395-39e2-80ab-8a5ae18118af.roa (raw, json) Hash identifier: qgdzW2lJgkOI4EZwkVwnsTrRvJncPXnxPrqziopAgxQ= Subject key identifier: D9:E5:EF:3E:65:BE:E7:C9:4B:F6:39:4F:F8:60:1B:75:44:0A:39:CE Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858493C092F000852403FA840CAA0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/759913cc-b395-39e2-80ab-8a5ae18118af.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 206264 IP address blocks: 172.94.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:2f:00:08:52:40:3f:a8:40:ca:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=ea57b169-6063-4d65-a756-4a5d3b8e4178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:11:2e:ff:aa:74:e0:ed:ef:c0:d9:84:be:2c: 13:97:ce:ec:1c:d6:0d:a8:c8:09:9d:46:2e:b5:1c: f1:3b:eb:93:d6:89:6f:c3:1f:65:6c:5a:28:01:0a: 55:2d:de:a7:86:a1:34:2c:ec:45:2b:c3:57:e2:9b: de:f7:2e:40:f4:94:33:b2:d9:50:c1:e8:e3:68:76: 49:6c:9e:1e:5d:cd:bc:2d:cd:6f:da:79:de:01:6a: dc:1b:f9:a5:91:0b:77:d6:f7:9d:a8:cd:f2:06:e1: ca:7c:d2:c5:a9:9e:b7:dc:8e:8c:c3:f3:01:1e:9f: 5f:9f:78:0e:a5:28:df:d7:a2:d1:e0:e4:69:c4:ee: ff:c9:9d:a1:6d:7e:93:08:d7:e4:31:15:57:88:6a: 44:96:f4:07:99:02:8d:50:85:f2:1b:a8:c2:f6:29: 4f:e4:81:50:23:ea:c8:e9:ca:54:c6:66:e8:f9:be: 39:48:c9:78:b8:ff:1b:91:32:7b:63:72:c9:4d:f2: 21:1f:17:28:c7:da:bf:25:cf:85:37:2d:64:1d:34: 3e:b2:c1:cf:f3:51:f8:e1:cf:dd:83:df:e6:d5:fe: 4b:33:62:b5:56:54:ac:c2:76:b3:f9:9b:0a:f8:7b: bc:e7:b7:06:63:36:d9:1a:5b:2b:13:ee:81:8a:cf: 89:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E5:EF:3E:65:BE:E7:C9:4B:F6:39:4F:F8:60:1B:75:44:0A:39:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/759913cc-b395-39e2-80ab-8a5ae18118af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:db:9b:d9:09:09:ee:01:78:c1:60:ec:5f:b1:d9:15:eb:7f: a7:0a:1b:67:4a:7f:7a:cd:b0:51:b0:73:b1:df:9d:67:4c:a4: f1:06:6e:d1:7b:7a:f5:72:18:3e:8e:60:6a:09:e2:63:cd:cd: b7:74:18:8d:cb:b0:93:97:d6:95:4c:9e:0a:a2:c8:20:9d:0c: 5e:ee:c8:cf:1b:12:88:2c:c8:c9:b5:ee:73:68:dc:1e:67:20: eb:f4:dc:b5:68:1b:a4:a3:59:be:ea:b1:ed:14:6a:31:68:7e: a0:22:94:78:4e:24:af:1f:53:57:e6:f3:ef:0d:b9:ab:aa:96: a0:4c:7c:af:45:80:c0:3a:e7:fe:b0:66:14:e8:53:c6:63:e5: 71:6f:d1:94:34:ba:65:a3:0d:44:08:4c:5c:c0:a1:5d:f3:b1: 72:75:80:81:aa:e9:db:67:d1:a9:b5:23:3f:5c:87:8a:dc:a8: fc:bd:3c:21:f4:51:ea:0c:52:54:bc:7d:3a:c6:22:f4:aa:9f: 1f:30:a2:0d:46:8a:c7:27:6f:68:85:69:51:98:1f:3d:98:fa: f4:73:2f:63:ce:1d:51:d2:b8:bf:48:a5:df:55:12:8b:d8:60: 03:9d:d1:7e:4c:d8:48:77:64:4d:00:6a:7b:81:0e:79:48:60: b7:1f:c5:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CS8ACFJAP6hAyqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZWE1N2IxNjktNjA2My00ZDY1LWE3NTYtNGE1ZDNiOGU0MTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjREu/6p04O3vwNmEviwTl87sHNYNqMgJnUYu tRzxO+uT1olvwx9lbFooAQpVLd6nhqE0LOxFK8NX4pve9y5A9JQzstlQwejjaHZJ bJ4eXc28Lc1v2nneAWrcG/mlkQt31vedqM3yBuHKfNLFqZ633I6Mw/MBHp9fn3gO pSjf16LR4ORpxO7/yZ2hbX6TCNfkMRVXiGpElvQHmQKNUIXyG6jC9ilP5IFQI+rI 6cpUxmbo+b45SMl4uP8bkTJ7Y3LJTfIhHxcox9q/Jc+FNy1kHTQ+ssHP81H44c/d g9/m1f5LM2K1VlSswnaz+ZsK+Hu857cGYzbZGlsrE+6Bis+J7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnl7z5lvufJS/Y5T/hgG3VECjnOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzU5OTEzY2MtYjM5NS0z OWUyLTgwYWItOGE1YWUxODExOGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPbm9kJCe4BeMFg7F+x2RXrf6cKG2dKf3rNsFGwc7HfnWdMpPEGbtF7 evVyGD6OYGoJ4mPNzbd0GI3LsJOX1pVMngqiyCCdDF7uyM8bEogsyMm17nNo3B5n IOv03LVoG6SjWb7qse0UajFofqAilHhOJK8fU1fm8+8NuauqlqBMfK9FgMA65/6w ZhToU8Zj5XFv0ZQ0umWjDUQITFzAoV3zsXJ1gIGq6dtn0am1Iz9ch4rcqPy9PCH0 UeoMUlS8fTrGIvSqnx8wog1Giscnb2iFaVGYHz2Y+vRzL2POHVHSuL9Ipd9VEovY YAOd0X5M2Eh3ZE0AanuBDnlIYLcfxYc= -----END CERTIFICATE-----Generated at Sat Apr 5 18:50:06 2025 by rpki-client