$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4e539be2-7865-3404-81ad-0b1f6b861383.roa File: 4e539be2-7865-3404-81ad-0b1f6b861383.roa (raw, json) Hash identifier: g2MktqRJKZlxcnGiWb/DYNGIQ0TUja0Xy9cPBIk5/aQ= Subject key identifier: 91:93:86:98:62:2D:24:17:53:AD:DA:CA:E6:20:B4:07:FA:E5:2A:24 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848E6386A74286275098491C480 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4e539be2-7865-3404-81ad-0b1f6b861383.roa Signing time: Sun 16 Feb 2025 07:16:29 +0000 ROA not before: Sun 16 Feb 2025 07:16:29 +0000 ROA not after: Sat 17 May 2025 06:16:29 +0000 asID: 213676 IP address blocks: 172.94.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e6:38:6a:74:28:62:75:09:84:91:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 16 07:16:29 2025 GMT Not After : May 17 06:16:29 2025 GMT Subject: CN=ca99bdea-adec-4256-b1aa-0f969f74dc01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f5:22:bb:a5:91:fb:10:fa:f4:9b:12:40:01: 9d:57:07:ab:83:64:c0:4c:1d:87:ab:8d:10:78:01: 9a:2d:c4:71:45:57:a2:0a:ed:1e:d8:97:ef:04:b1: e6:56:e5:ee:8d:8f:44:97:9a:d4:11:e5:35:5c:11: 5f:61:fa:8a:a8:d7:66:39:b8:78:95:10:46:ef:74: 6c:e0:ee:ff:a1:59:33:13:c1:85:10:38:fe:83:27: 1f:6c:4f:ef:a6:78:9e:fb:09:68:c3:0a:d0:93:25: 88:41:44:29:a6:3f:b2:69:fb:14:37:70:81:a4:59: 43:1f:0e:e0:7d:a8:68:21:5f:76:01:ba:ae:51:f8: 22:2b:61:0d:02:4c:6d:54:a7:cd:d8:46:be:6b:d4: 0c:f9:50:11:2c:5d:f2:07:c1:97:f9:a1:ab:55:83: fa:66:f2:86:a7:51:5b:b9:ef:ae:1c:f1:4e:6c:3f: 24:13:9a:2e:a3:25:09:e1:bc:21:55:1a:37:37:3b: 0f:63:7d:80:e2:ca:cc:77:59:dc:f9:6f:75:08:79: ae:c6:89:06:1c:c0:7b:ea:4e:0b:a6:06:82:a8:92: e4:64:33:0f:67:87:bf:b2:5e:16:05:ef:f0:05:33: 9e:65:78:5b:22:fb:0b:60:e4:33:74:08:31:ea:3e: 84:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:93:86:98:62:2D:24:17:53:AD:DA:CA:E6:20:B4:07:FA:E5:2A:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4e539be2-7865-3404-81ad-0b1f6b861383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:5a:86:dc:b6:6e:c4:12:f9:79:29:fe:cc:bc:96:98:26:68: 35:5d:c7:c2:3e:c8:f3:71:55:08:b4:15:09:ee:bb:0b:ea:0e: 8c:67:b4:98:11:50:b5:66:2e:d8:97:4c:b4:67:f3:72:0e:c6: 9f:a7:77:ca:e6:87:9b:07:d7:12:07:0f:54:5e:7f:cc:e0:17: 70:d5:21:6a:10:7f:e1:f9:c3:93:a5:2e:f9:58:e2:09:d4:d6: 73:95:4c:d4:42:65:2f:be:a9:7d:ee:f6:4d:3e:ac:58:be:c5: 7a:86:73:d1:9f:ff:9e:a1:52:a6:63:ae:15:e6:43:85:fd:6e: b7:7c:63:6e:db:d9:33:4e:eb:fb:88:7c:e1:a5:5b:99:13:ad: 29:16:48:f4:84:cb:55:dd:e4:0d:dd:16:5b:82:29:20:c7:9a: 39:11:22:af:18:a6:9f:77:1e:90:3e:f8:50:9b:9c:38:a0:a8: ba:30:94:52:d8:1a:0c:a7:5c:17:d2:93:ec:16:22:67:44:a3: 6c:73:68:41:a6:c6:b6:c6:f9:70:18:dc:30:6c:77:24:a4:fa: 67:16:87:cd:a2:b5:9d:dd:d0:68:f3:f4:04:c1:e3:6b:c8:56: 0e:13:e1:a3:6d:51:a1:e4:df:d5:64:7a:6c:82:31:b5:03:29: b0:8d:24:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjmOGp0KGJ1CYSRxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIxNjA3MTYyOVoXDTI1MDUxNzA2MTYyOVowLzEtMCsGA1UEAxMk Y2E5OWJkZWEtYWRlYy00MjU2LWIxYWEtMGY5NjlmNzRkYzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/Uiu6WR+xD69JsSQAGdVwerg2TATB2Hq40Q eAGaLcRxRVeiCu0e2JfvBLHmVuXujY9El5rUEeU1XBFfYfqKqNdmObh4lRBG73Rs 4O7/oVkzE8GFEDj+gycfbE/vpnie+wlowwrQkyWIQUQppj+yafsUN3CBpFlDHw7g fahoIV92AbquUfgiK2ENAkxtVKfN2Ea+a9QM+VARLF3yB8GX+aGrVYP6ZvKGp1Fb ue+uHPFObD8kE5ouoyUJ4bwhVRo3NzsPY32A4srMd1nc+W91CHmuxokGHMB76k4L pgaCqJLkZDMPZ4e/sl4WBe/wBTOeZXhbIvsLYOQzdAgx6j6EfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGThphiLSQXU63ayuYgtAf65SokMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGU1MzliZTItNzg2NS0z NDA0LTgxYWQtMGIxZjZiODYxMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpahty2bsQS+Xkp/sy8lpgmaDVdx8I+yPNxVQi0FQnuuwvqDoxntJgR ULVmLtiXTLRn83IOxp+nd8rmh5sH1xIHD1Ref8zgF3DVIWoQf+H5w5OlLvlY4gnU 1nOVTNRCZS++qX3u9k0+rFi+xXqGc9Gf/56hUqZjrhXmQ4X9brd8Y27b2TNO6/uI fOGlW5kTrSkWSPSEy1Xd5A3dFluCKSDHmjkRIq8Ypp93HpA++FCbnDigqLowlFLY GgynXBfSk+wWImdEo2xzaEGmxrbG+XAY3DBsdySk+mcWh82itZ3d0Gjz9ATB42vI Vg4T4aNtUaHk39VkemyCMbUDKbCNJKI= -----END CERTIFICATE-----Generated at Sat Feb 22 04:56:14 2025 by rpki-client