$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6057ef7b-5b34-3d50-820b-5115e319967d.roa File: 6057ef7b-5b34-3d50-820b-5115e319967d.roa (raw, json) Hash identifier: 8SiytrzA+nHtCk5MVlhdjAyVteUvSGnufaQEkqB1mJg= Subject key identifier: 07:5A:C1:C7:52:E4:3F:95:BC:71:0C:B9:C9:93:C7:DA:D6:46:B5:7B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584944693F62758DDC150A161780 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6057ef7b-5b34-3d50-820b-5115e319967d.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 9009 IP address blocks: 172.94.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:3f:62:75:8d:dc:15:0a:16:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=c0a8c794-9ff7-498f-8547-c51a46119b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:45:ff:ba:45:fa:9b:d9:a1:fd:f3:d4:dc:a9: a8:21:4c:fb:bc:39:ef:5e:73:6b:76:4a:12:cb:03: 16:ca:e3:16:25:11:38:5b:c1:5f:99:62:bd:a4:5e: 18:17:13:7c:41:48:2b:95:cc:d9:ed:01:6b:3c:62: f0:12:55:80:6b:ed:7c:18:08:f8:fc:38:fc:41:50: 89:b9:92:fc:d0:e6:e8:14:8e:91:79:4e:0a:78:1f: 0c:fd:fe:44:e6:6b:92:e0:12:5c:11:75:5d:10:2c: f9:a7:a4:d4:02:64:2a:cb:ee:43:c8:e3:45:4c:aa: 2b:72:54:27:c3:42:6c:2e:93:b0:80:e6:73:15:23: d5:d8:b8:1e:1c:59:db:47:96:ac:6c:ed:a6:52:64: 2c:75:2c:fd:c0:5f:9f:56:10:6e:89:5e:1d:ee:8b: 5c:7d:0f:46:7f:a4:b0:dd:67:c7:2d:cf:ce:aa:cc: 35:0b:ba:7b:a0:35:68:ab:1f:46:fc:78:f8:78:9c: 43:54:14:41:5a:96:76:03:44:52:e8:7b:59:54:4c: c5:a1:f7:38:a9:26:0a:7c:b6:f3:a7:76:7a:96:ef: c6:50:42:c0:c5:96:8a:84:a1:b7:51:90:bb:d4:31: db:3b:2d:6a:72:2e:30:45:a9:5c:2f:2d:56:1f:eb: 05:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5A:C1:C7:52:E4:3F:95:BC:71:0C:B9:C9:93:C7:DA:D6:46:B5:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6057ef7b-5b34-3d50-820b-5115e319967d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:00:11:10:98:70:97:58:fc:a0:c8:9a:04:bd:81:b6:02:bf: 9e:46:c4:f1:05:27:18:f5:1e:50:43:32:34:cb:72:fc:08:98: 66:a5:74:69:89:3e:6b:06:17:87:18:1f:82:4f:63:39:c1:2f: fd:80:de:67:8d:c3:dc:ef:81:8d:75:31:fa:b7:a7:6b:93:55: a1:35:95:d1:57:13:8a:a9:9d:ce:95:e9:77:2a:72:21:0b:2f: b6:34:72:b9:18:95:e9:f9:20:cc:93:97:da:f6:aa:31:a0:1d: e0:3c:78:21:03:b0:8c:50:ae:42:f2:d1:87:e8:13:d8:15:c9: d2:84:1e:50:fb:60:91:31:bc:7c:43:83:d1:6a:c9:86:a3:98: 79:03:28:9e:ef:79:6f:24:24:e2:59:44:a7:60:0d:d2:b1:ff: 48:98:ab:40:0b:cb:ac:93:07:65:50:df:79:41:84:ea:59:91: 5f:a0:d0:b6:66:c1:d1:e0:37:53:b1:44:21:19:8a:9a:b9:95: c1:cc:27:37:03:f2:e4:01:0a:f0:50:b2:8e:9e:e6:13:93:b5: 7c:e3:58:71:da:42:1d:27:88:89:3d:bf:72:6d:3e:dd:5b:62: 4d:95:42:7f:e9:9c:3f:1f:dc:cd:60:4a:c8:83:13:97:e2:f2: b7:51:4c:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaT9idY3cFQoWF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk YzBhOGM3OTQtOWZmNy00OThmLTg1NDctYzUxYTQ2MTE5YjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEX/ukX6m9mh/fPU3KmoIUz7vDnvXnNrdkoS ywMWyuMWJRE4W8FfmWK9pF4YFxN8QUgrlczZ7QFrPGLwElWAa+18GAj4/Dj8QVCJ uZL80OboFI6ReU4KeB8M/f5E5muS4BJcEXVdECz5p6TUAmQqy+5DyONFTKorclQn w0JsLpOwgOZzFSPV2LgeHFnbR5asbO2mUmQsdSz9wF+fVhBuiV4d7otcfQ9Gf6Sw 3WfHLc/Oqsw1C7p7oDVoqx9G/Hj4eJxDVBRBWpZ2A0RS6HtZVEzFofc4qSYKfLbz p3Z6lu/GUELAxZaKhKG3UZC71DHbOy1qci4wRalcLy1WH+sFgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdawcdS5D+VvHEMucmTx9rWRrV7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjA1N2VmN2ItNWIzNC0z ZDUwLTgyMGItNTExNWUzMTk5NjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF57MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIAERCYcJdY/KDImgS9gbYCv55GxPEFJxj1HlBDMjTLcvwImGaldGmJ PmsGF4cYH4JPYznBL/2A3meNw9zvgY11Mfq3p2uTVaE1ldFXE4qpnc6V6XcqciEL L7Y0crkYlen5IMyTl9r2qjGgHeA8eCEDsIxQrkLy0YfoE9gVydKEHlD7YJExvHxD g9FqyYajmHkDKJ7veW8kJOJZRKdgDdKx/0iYq0ALy6yTB2VQ33lBhOpZkV+g0LZm wdHgN1OxRCEZipq5lcHMJzcD8uQBCvBQso6e5hOTtXzjWHHaQh0niIk9v3JtPt1b Yk2VQn/pnD8f3M1gSsiDE5fi8rdRTP8= -----END CERTIFICATE-----Generated at Fri Apr 11 22:58:54 2025 by rpki-client