$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2c0db4a6-1513-35d3-ac4d-0112a3da3c2a.roa File: 2c0db4a6-1513-35d3-ac4d-0112a3da3c2a.roa (raw, json) Hash identifier: uh+6tebAgzJClPd6Lyw93R0HKcWZBS8IUHxn72qsdYw= Subject key identifier: 4B:76:86:C3:A7:02:17:1E:42:F3:15:A2:74:1E:5E:AC:8B:86:53:A8 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848DDF8B5DF1E4E147953EEB500 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2c0db4a6-1513-35d3-ac4d-0112a3da3c2a.roa Signing time: Thu 13 Feb 2025 08:21:39 +0000 ROA not before: Thu 13 Feb 2025 08:21:39 +0000 ROA not after: Wed 14 May 2025 07:21:39 +0000 asID: 197450 IP address blocks: 172.94.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dd:f8:b5:df:1e:4e:14:79:53:ee:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 13 08:21:39 2025 GMT Not After : May 14 07:21:39 2025 GMT Subject: CN=e0235dea-85fe-410a-b24a-c1fdc3c3cc35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:42:ad:a9:b8:35:64:c8:db:74:4c:4f:ff: cf:39:a4:aa:75:2c:d9:8d:7b:d8:fe:61:2e:a0:dd: 26:82:d6:31:ea:58:85:85:a5:2f:19:3d:00:c6:ab: 36:b6:e2:ac:41:f8:46:5e:59:46:8f:fb:c9:dc:35: a3:e2:26:8a:e3:9b:fc:7c:6a:69:11:42:56:72:de: de:30:b3:b3:90:a8:2e:1a:4b:65:58:27:32:e3:87: e1:48:d8:30:01:5d:07:dc:cd:05:27:66:31:38:15: 4e:83:da:86:0f:ad:09:c3:75:f0:0e:4f:67:53:a5: 60:c6:b2:10:f3:54:7a:fb:44:ce:01:fd:78:e2:da: 91:2d:6d:0e:4b:66:30:29:fc:70:31:9b:a5:98:13: 58:01:4c:65:88:fb:46:87:98:b2:5e:e1:ca:31:b8: bc:04:12:48:49:85:5f:ab:50:5f:73:de:18:8e:19: f4:e7:cd:0e:59:0f:87:4c:10:e3:94:71:d4:00:f4: 99:7e:a0:d5:7e:a2:16:10:0a:32:d5:cb:9f:18:9b: ab:17:9d:29:cf:13:a5:37:43:f9:4b:eb:1c:9c:c2: 08:79:ae:20:38:e1:38:9b:df:fb:39:19:9f:fa:67: d8:7c:d4:c6:3c:14:30:31:f0:ca:bb:2c:cb:ae:b9: 46:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:76:86:C3:A7:02:17:1E:42:F3:15:A2:74:1E:5E:AC:8B:86:53:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2c0db4a6-1513-35d3-ac4d-0112a3da3c2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:6e:e4:21:fa:ff:0c:6e:07:3d:62:20:f4:f6:ab:ac:4f:42: c3:ba:e2:7e:e6:24:a8:26:98:3f:cf:df:9f:44:48:e0:f0:e5: da:92:65:d5:bb:b3:24:f5:a9:3e:dc:41:04:eb:31:72:cb:46: 8b:a0:30:99:b5:2f:0f:19:b8:62:0c:21:a3:e3:12:4b:c1:80: 4b:59:3e:44:c3:a8:83:3f:cb:40:95:3d:61:d6:61:72:20:91: 5e:a8:76:1c:56:47:fb:72:89:85:bf:ae:42:6e:f2:d1:44:b1: 22:c7:d4:93:59:e9:30:09:a9:73:1b:fd:a6:48:da:ca:15:2a: 66:c7:26:16:41:33:88:bf:27:cb:ff:ab:82:b3:bf:97:54:3e: 31:df:3e:fd:0f:02:06:e8:eb:8b:a0:15:94:6a:59:e9:28:b9: e3:39:fa:e8:b2:fc:ba:2c:3b:31:b5:97:b2:30:0d:fd:5f:9e: d8:5e:6a:49:52:63:64:86:6e:e7:8f:21:bf:4d:8e:84:cf:93: 96:63:28:fe:20:5d:38:bc:db:d6:26:e4:3b:4b:e7:c4:f7:67: d7:10:5e:72:40:72:9e:ba:4b:72:15:7c:35:27:f5:ad:c6:91: 85:6b:cf:b5:2f:03:87:34:7c:84:db:2f:28:9a:b2:83:8f:5f: 31:dc:31:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjd+LXfHk4UeVPutQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIxMzA4MjEzOVoXDTI1MDUxNDA3MjEzOVowLzEtMCsGA1UEAxMk ZTAyMzVkZWEtODVmZS00MTBhLWIyNGEtYzFmZGMzYzNjYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqFCram4NWTI23RMT//POaSqdSzZjXvY/mEu oN0mgtYx6liFhaUvGT0Axqs2tuKsQfhGXllGj/vJ3DWj4iaK45v8fGppEUJWct7e MLOzkKguGktlWCcy44fhSNgwAV0H3M0FJ2YxOBVOg9qGD60Jw3XwDk9nU6VgxrIQ 81R6+0TOAf144tqRLW0OS2YwKfxwMZulmBNYAUxliPtGh5iyXuHKMbi8BBJISYVf q1Bfc94Yjhn0580OWQ+HTBDjlHHUAPSZfqDVfqIWEAoy1cufGJurF50pzxOlN0P5 S+scnMIIea4gOOE4m9/7ORmf+mfYfNTGPBQwMfDKuyzLrrlGiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEt2hsOnAhceQvMVonQeXqyLhlOoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmMwZGI0YTYtMTUxMy0z NWQzLWFjNGQtMDExMmEzZGEzYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF55MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARu5CH6/wxuBz1iIPT2q6xPQsO64n7mJKgmmD/P359ESODw5dqSZdW7 syT1qT7cQQTrMXLLRougMJm1Lw8ZuGIMIaPjEkvBgEtZPkTDqIM/y0CVPWHWYXIg kV6odhxWR/tyiYW/rkJu8tFEsSLH1JNZ6TAJqXMb/aZI2soVKmbHJhZBM4i/J8v/ q4Kzv5dUPjHfPv0PAgbo64ugFZRqWekoueM5+uiy/LosOzG1l7IwDf1fntheaklS Y2SGbuePIb9NjoTPk5ZjKP4gXTi829Ym5DtL58T3Z9cQXnJAcp66S3IVfDUn9a3G kYVrz7UvA4c0fITbLyiasoOPXzHcMQQ= -----END CERTIFICATE-----Generated at Mon Apr 7 02:22:12 2025 by rpki-client