$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41c2f58e-b9d8-3806-973c-7e6256c0f28f.roa File: 41c2f58e-b9d8-3806-973c-7e6256c0f28f.roa (raw, json) Hash identifier: 5hIrqV5IhqhLk7pRjX2RpRciSrNNXTEBh8fQ4RyD2YA= Subject key identifier: CD:9E:A5:71:E8:45:C6:97:FD:AF:FB:7A:94:91:9F:19:E4:BF:BF:61 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584902EC0E7D173888E7612FB780 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41c2f58e-b9d8-3806-973c-7e6256c0f28f.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 3223 IP address blocks: 192.253.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:0e:7d:17:38:88:e7:61:2f:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=474c5271-5499-404d-8499-c9088c2dfe14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:30:0a:2d:9d:64:9e:c8:4f:1e:ed:26:5c:0d: 66:b4:08:14:2a:4f:20:ed:13:a6:2a:3e:6d:0f:56: 2a:82:56:89:ae:42:d7:e7:bf:01:7b:c5:73:5d:2f: cb:67:b2:36:ef:2f:6f:85:16:42:bd:09:f4:20:34: c7:a6:26:bf:62:a9:27:7e:0e:26:cf:cc:ae:c0:76: 2b:a5:21:af:80:23:f3:1e:ed:c3:1f:51:27:f7:06: 23:e6:fb:a9:15:9b:06:33:50:fd:c3:a0:56:fa:d7: 44:74:8c:80:51:19:ce:4f:52:9c:1f:65:4b:af:52: 98:23:41:f0:3d:ff:00:08:c7:70:a4:dd:42:62:22: 00:fc:0b:b2:75:ba:84:aa:aa:7a:24:3a:e8:63:56: bb:d8:63:34:db:9b:1c:14:d8:d7:5c:50:27:6e:bd: 88:cc:54:84:30:9d:43:2c:4b:54:ee:e1:d8:19:d9: 50:a4:b3:4d:5f:7b:51:b8:63:71:98:b9:c8:00:fc: a2:44:67:0b:ca:42:f4:2c:6a:cb:f7:4c:99:9e:cc: 03:4a:92:28:4a:be:f5:ec:97:47:aa:9e:94:df:e8: ef:a9:24:83:58:f3:22:21:27:c8:aa:fa:c8:46:57: 73:22:91:c5:25:b6:df:12:68:5d:91:da:25:69:5a: 05:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9E:A5:71:E8:45:C6:97:FD:AF:FB:7A:94:91:9F:19:E4:BF:BF:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41c2f58e-b9d8-3806-973c-7e6256c0f28f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f6:af:56:00:e2:e5:ee:20:e3:c9:4f:a6:34:d1:03:51:14: b6:e2:e3:a9:99:72:bf:cf:e4:4a:5c:a9:1a:de:b7:ba:a7:00: e9:3f:58:3f:dd:c1:9e:22:28:1d:76:65:3a:00:2b:6d:10:0f: 01:b5:be:ae:02:06:55:44:72:30:d1:6f:26:2a:57:1c:6f:26: f1:36:13:51:0e:8a:c0:7f:b6:b3:be:e8:11:4a:e4:84:01:ca: 9c:b8:1a:67:8d:e0:8d:96:94:2c:2f:64:8a:fd:8b:2d:1d:2e: f8:aa:94:82:88:bc:ec:3c:6e:17:06:4a:71:d2:bf:7a:e2:5f: 1b:a7:03:d1:23:38:61:7a:f7:f1:03:55:dc:1a:7b:88:cb:30: be:d0:2b:cc:1c:45:79:f7:35:bc:98:ad:10:94:81:13:27:a3: 35:ed:b5:53:0e:31:0f:6d:51:40:95:f5:cb:d2:d1:5b:59:ee: c9:28:e6:c2:ee:e6:2e:5e:be:67:8c:6f:b0:bf:e1:b1:e3:d6: 0a:79:34:b3:ee:07:ca:e9:03:ab:59:d4:0c:64:a4:83:0f:80: 19:70:e0:f8:ae:2e:9a:15:f0:77:76:8f:f6:9c:86:50:82:3f: 1d:8c:bb:3b:1f:ec:00:cf:b5:5c:f3:ad:61:79:80:74:1c:ba: 5f:6e:16:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7A59FziI52Evt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk NDc0YzUyNzEtNTQ5OS00MDRkLTg0OTktYzkwODhjMmRmZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjAKLZ1knshPHu0mXA1mtAgUKk8g7ROmKj5t D1YqglaJrkLX578Be8VzXS/LZ7I27y9vhRZCvQn0IDTHpia/Yqknfg4mz8yuwHYr pSGvgCPzHu3DH1En9wYj5vupFZsGM1D9w6BW+tdEdIyAURnOT1KcH2VLr1KYI0Hw Pf8ACMdwpN1CYiIA/AuydbqEqqp6JDroY1a72GM025scFNjXXFAnbr2IzFSEMJ1D LEtU7uHYGdlQpLNNX3tRuGNxmLnIAPyiRGcLykL0LGrL90yZnswDSpIoSr717JdH qp6U3+jvqSSDWPMiISfIqvrIRldzIpHFJbbfEmhdkdolaVoFUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2epXHoRcaX/a/7epSRnxnkv79hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDFjMmY1OGUtYjlkOC0z ODA2LTk3M2MtN2U2MjU2YzBmMjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP31MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAv2r1YA4uXuIOPJT6Y00QNRFLbi46mZcr/P5EpcqRret7qnAOk/WD/d wZ4iKB12ZToAK20QDwG1vq4CBlVEcjDRbyYqVxxvJvE2E1EOisB/trO+6BFK5IQB ypy4GmeN4I2WlCwvZIr9iy0dLviqlIKIvOw8bhcGSnHSv3riXxunA9EjOGF69/ED Vdwae4jLML7QK8wcRXn3NbyYrRCUgRMnozXttVMOMQ9tUUCV9cvS0VtZ7sko5sLu 5i5evmeMb7C/4bHj1gp5NLPuB8rpA6tZ1AxkpIMPgBlw4PiuLpoV8Hd2j/achlCC Px2Muzsf7ADPtVzzrWF5gHQcul9uFvU= -----END CERTIFICATE-----Generated at Wed Apr 9 06:30:33 2025 by rpki-client