$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa File: c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa (raw, json) Hash identifier: AoKQvPY3UAZMj35NrFwbbBXkx9/ck/JkqJZbLgk9vXU= Subject key identifier: 0D:4B:61:CA:74:6A:B7:81:D9:61:BC:80:45:7E:35:3A:BA:84:96:13 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849244E8A019DA37C34E842A000 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 206264 IP address blocks: 172.94.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:8a:01:9d:a3:7c:34:e8:42:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=7700f3cc-1dd9-4b00-bc7d-e58ba1273170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bf:f1:3a:83:37:f7:d8:b2:8e:39:ae:7b:b2: b8:48:ae:86:be:e3:b4:11:fd:e6:2b:86:0d:2d:19: 80:6c:fa:1c:a7:b5:94:84:72:75:23:36:eb:58:74: a4:08:77:48:48:a8:cc:13:aa:a9:33:ff:a3:ae:96: 1c:bb:6b:70:01:36:ec:80:7a:62:7d:f9:a1:0c:ae: 91:0a:14:16:3c:27:a4:0c:47:5b:cc:04:7d:0d:46: 1f:93:04:e5:2a:4a:65:fb:bf:cb:21:e0:bf:dd:de: 82:90:28:85:82:ed:11:37:0e:9e:08:69:73:3d:f1: e6:b4:68:4c:72:57:dd:8a:3c:97:e6:50:fd:28:04: bc:dc:5b:6d:ca:6a:cb:80:a2:f5:ff:8a:95:3a:c2: fb:a9:94:af:b3:40:23:f7:ec:d6:3a:19:02:5a:c5: b6:4a:85:04:51:c3:cf:72:f6:91:60:b0:d5:87:a2: f6:9f:9a:88:44:8e:a8:8d:00:52:a9:6f:07:14:55: 36:42:22:79:4a:bf:53:6f:4d:84:4d:06:5e:8b:e2: c0:37:2a:f1:23:f3:33:0e:e3:dc:90:4a:aa:2d:5a: 74:25:d1:fb:bd:69:fc:e6:e2:45:5f:14:39:a5:f0: 38:09:db:62:c1:72:85:bc:a8:ac:e6:f6:31:71:4e: 90:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4B:61:CA:74:6A:B7:81:D9:61:BC:80:45:7E:35:3A:BA:84:96:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:41:22:66:c7:8c:fc:b5:85:85:6c:b2:ee:74:62:d0:04:1a: 9b:13:53:be:5b:86:d9:ba:8c:52:59:8a:56:86:e4:60:0d:8a: ff:5d:20:ea:75:5c:1d:0f:02:06:26:f5:e4:8f:ff:99:18:c1: 71:4d:49:25:22:6d:9a:81:9e:52:b9:b1:3c:5d:e4:64:46:31: 6e:86:e0:c7:c2:c2:0b:2e:9f:ce:16:ee:de:9a:87:a7:68:fb: 7b:76:ad:66:28:61:56:8e:93:f4:6b:e3:d0:15:c8:c7:ba:d9: a5:06:5d:1d:63:36:96:3d:13:1e:ba:1d:1d:ea:ad:da:99:d1: b2:23:b2:13:2c:2e:2f:ad:0e:af:75:13:bf:c3:b4:b4:f8:e4: 5f:70:8b:bd:b5:c3:6f:b9:e5:3d:a8:72:bd:4c:82:03:b1:39: 9a:20:b1:b1:62:59:2d:fc:e7:58:7c:fd:11:2e:01:00:af:4e: 38:30:a3:73:ea:1d:2f:43:6d:35:93:00:3d:a0:95:c8:e0:85: 5f:29:53:b0:3b:35:ef:68:b1:72:2c:60:31:dc:ef:9e:c6:16: 88:1e:e9:ac:9c:4e:02:f4:01:c8:3d:33:b1:46:2c:2f:ea:3b: 27:f9:3f:2f:ff:03:ed:3b:32:79:0d:50:20:6b:d2:7e:39:a9: c6:a0:03:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTooBnaN8NOhCoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NzcwMGYzY2MtMWRkOS00YjAwLWJjN2QtZTU4YmExMjczMTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7/xOoM399iyjjmue7K4SK6GvuO0Ef3mK4YN LRmAbPocp7WUhHJ1IzbrWHSkCHdISKjME6qpM/+jrpYcu2twATbsgHpiffmhDK6R ChQWPCekDEdbzAR9DUYfkwTlKkpl+7/LIeC/3d6CkCiFgu0RNw6eCGlzPfHmtGhM clfdijyX5lD9KAS83FttymrLgKL1/4qVOsL7qZSvs0Aj9+zWOhkCWsW2SoUEUcPP cvaRYLDVh6L2n5qIRI6ojQBSqW8HFFU2QiJ5Sr9Tb02ETQZei+LANyrxI/MzDuPc kEqqLVp0JdH7vWn85uJFXxQ5pfA4CdtiwXKFvKis5vYxcU6QdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1LYcp0areB2WG8gEV+NTq6hJYTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzhmNWM1ZTEtMTczMC0z YWM2LThkOTUtNGU5NDc0ZjczODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhBImbHjPy1hYVssu50YtAEGpsTU75bhtm6jFJZilaG5GANiv9dIOp1 XB0PAgYm9eSP/5kYwXFNSSUibZqBnlK5sTxd5GRGMW6G4MfCwgsun84W7t6ah6do +3t2rWYoYVaOk/Rr49AVyMe62aUGXR1jNpY9Ex66HR3qrdqZ0bIjshMsLi+tDq91 E7/DtLT45F9wi721w2+55T2ocr1MggOxOZogsbFiWS3851h8/REuAQCvTjgwo3Pq HS9DbTWTAD2glcjghV8pU7A7Ne9osXIsYDHc757GFoge6aycTgL0Acg9M7FGLC/q Oyf5Py//A+07MnkNUCBr0n45qcagA3Q= -----END CERTIFICATE-----Generated at Sat Apr 5 18:32:21 2025 by rpki-client