$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c338596f-f928-31bd-822b-5a78745be6b0.roa File: c338596f-f928-31bd-822b-5a78745be6b0.roa (raw, json) Hash identifier: 49UZqs/TI3Oi8iKV7nq/4CCIlalHtVfxSNnbFznM0ys= Subject key identifier: 0E:76:70:36:8D:19:6E:EA:7A:B3:4A:12:B0:2B:70:CD:C4:55:23:B8 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848F7C143EF1B763F42C68E2680 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c338596f-f928-31bd-822b-5a78745be6b0.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 60117 IP address blocks: 172.94.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:43:ef:1b:76:3f:42:c6:8e:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=38c00f8b-93a5-4da7-adc0-7ed9872cb948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:23:0f:54:10:6b:eb:8e:81:9f:e2:29:d1:a2: 0d:ca:a4:7b:5e:35:eb:79:f9:a2:5a:aa:fd:6f:0e: 17:c0:c9:c6:18:3e:c5:17:e0:63:83:4f:7c:4a:f8: f6:de:7e:e3:25:ef:88:50:74:d9:c7:8b:91:e9:fa: 2e:c8:1b:45:14:fb:a5:20:54:13:bb:eb:c4:53:c3: 96:a1:f5:68:06:c8:74:03:46:0e:7d:7a:46:ae:ec: 99:75:20:c3:e8:fc:f6:7f:1b:73:d2:54:4e:55:9c: 08:56:0a:ed:31:b2:ee:ef:fc:5b:64:61:b3:16:da: 9e:f2:a8:e1:84:f1:ff:ec:92:2f:92:99:a5:8d:c7: 41:28:ec:6f:98:17:37:c6:f8:11:ea:9d:32:99:1a: 58:2b:91:03:f2:dc:cd:c2:d2:46:01:fb:df:bc:e7: 57:24:dd:e2:72:57:10:ac:3b:e8:c0:be:f5:f3:c7: b0:9f:d2:47:88:d8:1d:2d:a3:6f:c2:8e:dc:5d:3c: 57:e3:b3:96:0c:b4:11:eb:96:43:99:e7:12:60:03: cf:5b:3b:b9:47:d3:9b:a0:50:08:43:70:74:e4:f2: 6d:c8:2e:78:e2:0e:9b:df:27:67:44:3b:47:02:c7: d6:03:b6:2d:c3:63:6a:23:23:7f:da:24:d4:a8:d4: 9f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:76:70:36:8D:19:6E:EA:7A:B3:4A:12:B0:2B:70:CD:C4:55:23:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c338596f-f928-31bd-822b-5a78745be6b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:68:37:2f:5f:f8:e4:be:69:ad:ab:94:40:d5:72:3a:88:a1: c1:9d:0a:43:92:53:48:59:92:8a:c5:f2:dc:f8:d5:8c:5c:52: 8a:a6:bc:a9:8b:37:55:3d:0f:fc:7d:04:cc:7d:9d:bc:78:30: 08:9b:56:21:26:10:44:40:42:65:65:32:11:b9:fe:08:23:8d: ba:86:5f:58:62:13:24:44:27:48:2d:9b:c3:26:6d:e0:c1:2d: 53:da:7c:e6:43:dd:57:1b:b1:49:ba:28:27:a0:fd:4b:48:07: aa:4f:00:6d:1b:04:f5:41:7f:c4:d1:18:3a:2a:0c:13:79:41: 4d:fc:bb:65:4b:f0:7f:8b:fc:8b:b5:ac:74:dd:3e:34:cb:6d: 2f:fe:a6:8a:f4:52:91:85:84:cb:85:6a:85:f1:54:60:1d:4a: 70:b2:ec:da:b5:3a:72:a5:a6:aa:75:f7:05:36:4f:d2:64:f2: 77:68:f7:da:fd:84:12:95:87:ca:2b:3e:76:8a:ef:8e:63:8c: 7e:32:97:fa:06:35:f9:7f:58:68:3e:fd:52:eb:d7:9b:cc:7d: 2b:2e:3c:d2:c3:7b:39:c8:e7:9d:c1:6a:bc:a2:8d:ad:7d:45: 67:64:c3:1d:46:12:c1:22:69:b0:24:85:84:0e:f2:db:e3:3b: 27:53:a9:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wUPvG3Y/QsaOJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk MzhjMDBmOGItOTNhNS00ZGE3LWFkYzAtN2VkOTg3MmNiOTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCMPVBBr646Bn+Ip0aINyqR7XjXrefmiWqr9 bw4XwMnGGD7FF+Bjg098Svj23n7jJe+IUHTZx4uR6fouyBtFFPulIFQTu+vEU8OW ofVoBsh0A0YOfXpGruyZdSDD6Pz2fxtz0lROVZwIVgrtMbLu7/xbZGGzFtqe8qjh hPH/7JIvkpmljcdBKOxvmBc3xvgR6p0ymRpYK5ED8tzNwtJGAfvfvOdXJN3iclcQ rDvowL7188ewn9JHiNgdLaNvwo7cXTxX47OWDLQR65ZDmecSYAPPWzu5R9OboFAI Q3B05PJtyC544g6b3ydnRDtHAsfWA7Ytw2NqIyN/2iTUqNSfpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA52cDaNGW7qerNKErArcM3EVSO4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzMzODU5NmYtZjkyOC0z MWJkLTgyMmItNWE3ODc0NWJlNmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF45MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpoNy9f+OS+aa2rlEDVcjqIocGdCkOSU0hZkorF8tz41YxcUoqmvKmL N1U9D/x9BMx9nbx4MAibViEmEERAQmVlMhG5/ggjjbqGX1hiEyREJ0gtm8MmbeDB LVPafOZD3VcbsUm6KCeg/UtIB6pPAG0bBPVBf8TRGDoqDBN5QU38u2VL8H+L/Iu1 rHTdPjTLbS/+por0UpGFhMuFaoXxVGAdSnCy7Nq1OnKlpqp19wU2T9Jk8ndo99r9 hBKVh8orPnaK745jjH4yl/oGNfl/WGg+/VLr15vMfSsuPNLDeznI553Baryija19 RWdkwx1GEsEiabAkhYQO8tvjOydTqfo= -----END CERTIFICATE-----Generated at Sat Apr 5 16:44:32 2025 by rpki-client