$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1cdabc01-7589-33c3-bfe7-6ab8ecfd771d.roa File: 1cdabc01-7589-33c3-bfe7-6ab8ecfd771d.roa (raw, json) Hash identifier: ODHYot925xeHUuhBGuIS8wXTGA0cOtQe4M7Ll8WtuuA= Subject key identifier: 06:68:F9:6F:2E:A1:6C:CE:88:DC:4C:F7:90:49:B2:64:29:87:8D:1F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858489E6B6F2C7AF33AA4D4A25700 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1cdabc01-7589-33c3-bfe7-6ab8ecfd771d.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 3223 IP address blocks: 172.94.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:6f:2c:7a:f3:3a:a4:d4:a2:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=65589ae9-b55f-4612-b89c-2e7db8827301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ff:77:17:0c:b6:8b:33:0c:be:1b:6c:9d:ec: 94:7c:0e:7e:67:e5:c6:b7:eb:93:e2:d7:19:ed:b8: a9:49:63:8f:f5:61:f2:12:d1:61:6f:0b:77:2e:0d: a4:2d:db:e7:37:cb:53:af:94:bf:35:80:93:15:02: 7b:b7:5e:f4:e9:d8:ef:52:a8:0a:3e:d0:f0:9f:62: a5:eb:dc:02:2a:bc:17:4f:5b:0d:09:bf:f0:72:c6: c9:37:23:b1:84:20:8e:49:d4:96:f7:bf:ae:eb:23: 5a:8f:e8:67:08:29:54:62:ad:14:5a:b1:fe:48:35: 2f:09:7d:59:53:21:26:bd:c5:b9:f1:16:7a:b9:5c: f7:a5:72:e9:cb:d0:64:d2:20:01:f3:e1:6d:df:97: e2:c4:03:ad:df:26:f2:83:7c:07:ae:03:92:e5:b6: 7a:9a:15:04:7a:48:e5:68:37:2f:d1:54:83:9a:92: 3a:bf:0e:d2:12:9e:10:46:67:16:cc:d1:cd:74:82: 69:67:21:0f:1a:23:f6:cd:b8:1d:46:ed:5b:c2:53: 16:d8:62:5f:35:33:09:08:0f:a7:8c:3b:40:a9:d8: fc:37:05:1a:ed:48:70:6f:ee:c7:d3:61:2f:31:b6: ce:78:5b:5a:b0:b1:50:18:3f:f9:0a:85:87:ce:14: 51:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:68:F9:6F:2E:A1:6C:CE:88:DC:4C:F7:90:49:B2:64:29:87:8D:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1cdabc01-7589-33c3-bfe7-6ab8ecfd771d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ec:e8:b9:19:fe:8d:7c:c0:ea:bf:cb:74:ec:40:1b:91:2c: f3:c2:8e:51:74:8b:d6:a6:26:2a:42:98:bf:6e:03:9f:8b:9d: 16:d5:bf:91:1c:18:b4:85:55:08:83:5f:09:12:ba:36:3b:76: 8a:4d:fc:de:7a:4b:2c:bb:9e:db:46:e1:85:d8:b2:c8:82:1f: c3:60:df:c7:df:b9:9f:1d:8a:3a:bf:1c:7d:f7:91:ae:e3:dd: b7:6d:15:4d:bb:01:4a:66:01:ef:2c:1a:b5:44:98:ff:43:3c: 68:3a:29:35:8a:bd:1f:fa:36:34:64:79:d9:7e:ac:20:40:eb: 53:fe:5e:9d:e0:55:f8:fb:6b:bc:d5:09:ee:3e:47:f9:a3:2f: 52:32:19:29:50:a0:e8:e7:39:84:b3:ca:4e:34:14:9b:4e:10: cd:2c:dd:a6:8b:d9:b1:43:ee:8e:63:ba:ef:0a:00:11:be:1d: 62:d3:26:95:4b:2e:bd:1a:ce:77:96:21:58:f0:79:8f:51:ba: 51:61:e9:9f:e8:08:ea:d5:32:58:31:b9:f9:21:ee:a5:55:09: 7d:59:09:52:c6:ef:aa:f3:40:3d:1c:56:36:ce:bf:72:bd:ef: 5d:a8:98:35:e5:32:02:6a:0d:51:26:9d:a4:a1:7a:ce:c6:84: a6:36:ef:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea28sevM6pNSiVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NjU1ODlhZTktYjU1Zi00NjEyLWI4OWMtMmU3ZGI4ODI3MzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf93Fwy2izMMvhtsneyUfA5+Z+XGt+uT4tcZ 7bipSWOP9WHyEtFhbwt3Lg2kLdvnN8tTr5S/NYCTFQJ7t1706djvUqgKPtDwn2Kl 69wCKrwXT1sNCb/wcsbJNyOxhCCOSdSW97+u6yNaj+hnCClUYq0UWrH+SDUvCX1Z UyEmvcW58RZ6uVz3pXLpy9Bk0iAB8+Ft35fixAOt3ybyg3wHrgOS5bZ6mhUEekjl aDcv0VSDmpI6vw7SEp4QRmcWzNHNdIJpZyEPGiP2zbgdRu1bwlMW2GJfNTMJCA+n jDtAqdj8NwUa7Uhwb+7H02EvMbbOeFtasLFQGD/5CoWHzhRRswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZo+W8uoWzOiNxM95BJsmQph40fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWNkYWJjMDEtNzU4OS0z M2MzLWJmZTctNmFiOGVjZmQ3NzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7s6LkZ/o18wOq/y3TsQBuRLPPCjlF0i9amJipCmL9uA5+LnRbVv5Ec GLSFVQiDXwkSujY7dopN/N56Syy7nttG4YXYssiCH8Ng38ffuZ8dijq/HH33ka7j 3bdtFU27AUpmAe8sGrVEmP9DPGg6KTWKvR/6NjRkedl+rCBA61P+Xp3gVfj7a7zV Ce4+R/mjL1IyGSlQoOjnOYSzyk40FJtOEM0s3aaL2bFD7o5juu8KABG+HWLTJpVL Lr0azneWIVjweY9RulFh6Z/oCOrVMlgxufkh7qVVCX1ZCVLG76rzQD0cVjbOv3K9 712omDXlMgJqDVEmnaShes7GhKY278s= -----END CERTIFICATE-----Generated at Sat Apr 5 13:20:18 2025 by rpki-client