$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7a6ed6ad-6241-3559-aaa6-3744d57cdeea.roa File: 7a6ed6ad-6241-3559-aaa6-3744d57cdeea.roa (raw, json) Hash identifier: MSxlaHPS1EBw1+AuKASpnlI/gHxhFcwCbUZFkYvCNZM= Subject key identifier: 5D:C4:00:1A:AC:DA:E6:CE:F0:4E:32:6C:88:81:80:95:42:29:D7:2D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858496FAF0806DF416709CF891980 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7a6ed6ad-6241-3559-aaa6-3744d57cdeea.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 9009 IP address blocks: 172.94.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:08:06:df:41:67:09:cf:89:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=b26c0ef0-e64a-4c11-85c0-1b77523efffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f1:90:03:9a:e0:23:12:ce:bb:1d:b0:fb:29: d7:33:fc:1b:45:0d:c7:f5:a4:9b:62:13:5a:6e:cd: 7e:f6:78:0f:7c:4b:43:b7:8d:4f:5b:da:28:bb:48: c8:34:82:59:9c:bf:69:0e:73:b4:c3:e8:b4:21:0f: 0c:69:e1:69:be:db:98:26:d3:84:3c:45:b0:ec:4d: 09:a1:c5:a7:da:bf:aa:49:73:c1:50:21:6c:94:4b: d4:04:09:83:05:61:c5:87:9d:92:fe:7f:b6:0a:94: 5a:55:9f:60:7d:2a:92:8f:a6:51:a5:f5:ac:2c:2b: d6:72:73:72:92:02:3a:c1:87:27:30:01:4e:8d:35: 06:ed:85:82:06:4d:3e:de:68:aa:d7:7b:30:54:4f: 53:09:65:7a:57:d1:9d:56:69:82:18:de:e5:4e:47: 01:47:e5:c7:3e:0c:76:bb:0a:a5:6b:ac:b8:40:ba: f2:f5:21:a0:df:96:ce:0f:6a:5b:1d:54:c5:50:de: 51:64:1c:61:26:a4:2b:a8:67:0a:e4:38:04:75:67: aa:15:9e:0c:37:07:a3:56:34:f4:5c:e9:71:3b:41: 87:7a:e1:45:05:6b:77:19:38:34:ab:ef:98:5b:b0: 08:62:7a:63:12:c2:de:a9:50:9d:f3:ea:fc:9a:1a: 15:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C4:00:1A:AC:DA:E6:CE:F0:4E:32:6C:88:81:80:95:42:29:D7:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7a6ed6ad-6241-3559-aaa6-3744d57cdeea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:71:74:c9:34:64:0d:e5:75:a6:ff:48:7f:f9:fb:bc:1a:47: 8e:46:15:5c:0d:b2:40:14:97:e4:1e:86:97:41:7b:c2:e5:b5: c2:55:65:9d:21:d9:b6:86:80:d0:bd:44:4b:f8:df:c7:5d:51: 71:05:18:31:4f:ef:92:f4:f4:d0:75:9a:5e:33:b1:6c:90:c5: 4e:7b:02:b0:47:dd:0e:34:5a:7e:70:a3:1d:41:2f:f3:22:ee: 6c:e3:4f:db:8f:40:43:49:fb:e4:11:45:ce:51:bf:e8:55:dd: d5:f7:e1:84:d4:1b:ec:a3:a1:4a:26:a8:5e:a1:30:1b:83:81: 59:93:0f:2a:3e:87:55:4e:64:e4:f2:8a:34:5a:dc:e1:e3:f7: 33:86:44:9d:6c:fd:2c:3d:12:be:61:d8:6c:65:05:7c:cf:98: e4:c9:f9:9c:c7:c4:e3:2c:24:a2:5a:79:5a:69:01:34:5b:df: 0b:b8:ee:66:9b:18:86:4e:c9:ee:ea:a2:8a:4e:93:18:e2:0f: cc:86:ba:d1:d8:dd:c7:ab:c6:d5:47:25:e0:e0:c2:4f:3d:26: 6c:9b:58:67:5e:a6:5e:27:3d:c7:7c:85:a0:09:8a:06:84:f8: 61:12:c5:7a:21:77:ba:74:0c:31:57:c5:c1:74:f7:cc:72:0c: c6:b1:e6:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrwgG30FnCc+JGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk YjI2YzBlZjAtZTY0YS00YzExLTg1YzAtMWI3NzUyM2VmZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPGQA5rgIxLOux2w+ynXM/wbRQ3H9aSbYhNa bs1+9ngPfEtDt41PW9oou0jINIJZnL9pDnO0w+i0IQ8MaeFpvtuYJtOEPEWw7E0J ocWn2r+qSXPBUCFslEvUBAmDBWHFh52S/n+2CpRaVZ9gfSqSj6ZRpfWsLCvWcnNy kgI6wYcnMAFOjTUG7YWCBk0+3miq13swVE9TCWV6V9GdVmmCGN7lTkcBR+XHPgx2 uwqla6y4QLry9SGg35bOD2pbHVTFUN5RZBxhJqQrqGcK5DgEdWeqFZ4MNwejVjT0 XOlxO0GHeuFFBWt3GTg0q++YW7AIYnpjEsLeqVCd8+r8mhoV5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3EABqs2ubO8E4ybIiBgJVCKdctMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvN2E2ZWQ2YWQtNjI0MS0z NTU5LWFhYTYtMzc0NGQ1N2NkZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdxdMk0ZA3ldab/SH/5+7waR45GFVwNskAUl+QehpdBe8LltcJVZZ0h 2baGgNC9REv438ddUXEFGDFP75L09NB1ml4zsWyQxU57ArBH3Q40Wn5wox1BL/Mi 7mzjT9uPQENJ++QRRc5Rv+hV3dX34YTUG+yjoUomqF6hMBuDgVmTDyo+h1VOZOTy ijRa3OHj9zOGRJ1s/Sw9Er5h2GxlBXzPmOTJ+ZzHxOMsJKJaeVppATRb3wu47mab GIZOye7qoopOkxjiD8yGutHY3cerxtVHJeDgwk89JmybWGdepl4nPcd8haAJigaE +GESxXohd7p0DDFXxcF098xyDMax5ms= -----END CERTIFICATE-----Generated at Fri Apr 11 23:08:02 2025 by rpki-client