$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/903f3150-8c22-338c-b68e-6ae7cf33b7b5.roa File: 903f3150-8c22-338c-b68e-6ae7cf33b7b5.roa (raw, json) Hash identifier: HmMdgk2CYTUq5Fa8HYexwxlRV7aGA4qu1aWR7uvUU+8= Subject key identifier: 06:01:3B:2B:FC:38:77:66:3A:04:E8:70:97:32:C5:15:4E:9B:8D:E9 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584863CB0FD69A79B06F69D48240 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/903f3150-8c22-338c-b68e-6ae7cf33b7b5.roa Signing time: Tue 31 Dec 2024 14:00:53 +0000 ROA not before: Tue 31 Dec 2024 14:00:53 +0000 ROA not after: Mon 31 Mar 2025 13:00:53 +0000 asID: 396356 IP address blocks: 172.94.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:63:cb:0f:d6:9a:79:b0:6f:69:d4:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Dec 31 14:00:53 2024 GMT Not After : Mar 31 13:00:53 2025 GMT Subject: CN=1431dcf2-db99-4f39-9aa1-7b527d1be839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2e:59:b0:ad:07:60:a1:91:c7:c3:e6:b3:86: 43:c7:d1:73:07:29:13:01:f0:47:32:6a:d5:84:b5: ce:0d:20:e3:6e:8d:a4:a2:4b:eb:6a:1e:47:a5:41: e6:6f:ec:21:e0:71:3e:53:7d:7f:b8:c1:72:c5:46: 63:53:8e:8d:f0:43:05:81:41:72:32:dc:36:d4:dc: 11:8e:ac:40:87:12:85:17:73:50:42:e4:ba:d2:70: fc:46:ea:de:d3:cd:38:bc:f2:2b:8f:6d:89:8e:79: b0:8a:76:27:0e:96:11:d8:18:c1:fe:c4:71:2d:7f: fa:ee:d7:aa:2d:9d:27:9f:a9:82:5c:54:50:0c:16: 15:f6:8c:62:8d:dd:e4:49:5e:17:6a:4f:9e:a9:cc: 0b:83:c6:2c:b1:e7:5b:99:bd:ff:82:4c:ec:f1:dc: 73:b6:70:6f:e1:69:cb:0b:57:cd:6e:3a:6e:df:bd: 73:3d:b7:3f:2a:96:22:b7:b8:65:0c:9b:64:1d:b2: 98:99:b8:12:52:61:4b:a1:aa:93:71:fc:c0:0d:cd: 2a:3e:8e:d6:ad:13:23:ae:f0:c2:de:61:b1:3f:9d: ae:21:d1:8e:b1:e7:e7:c7:4e:47:91:1e:f9:a9:6f: e4:23:d7:48:4c:16:e8:69:c5:c9:08:f6:77:85:08: 56:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:01:3B:2B:FC:38:77:66:3A:04:E8:70:97:32:C5:15:4E:9B:8D:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/903f3150-8c22-338c-b68e-6ae7cf33b7b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:bd:3b:16:d0:b1:af:32:77:5e:82:a4:e9:05:0e:80:27:3c: e0:40:b2:02:4e:f5:5a:6d:96:15:10:cb:44:81:2b:81:37:62: 63:06:e4:72:e8:66:d0:67:62:fe:e2:aa:b9:a0:6e:3e:ce:55: 42:da:52:f7:5f:72:4c:30:84:bc:b6:c1:46:53:6f:ca:c4:e8: df:76:3b:ed:2f:4d:80:51:6a:ce:49:e8:50:21:57:ca:21:eb: 97:fb:d3:ec:7c:a1:4d:e4:22:f0:6e:56:aa:b1:3c:62:22:67: 36:79:b4:a3:0b:2e:f0:70:ef:0e:71:c1:46:e9:fa:b2:e4:37: 0c:be:c4:b4:85:41:ee:02:97:d1:17:e3:58:f9:15:3c:7b:47: 42:8b:e4:53:f3:19:cf:c8:60:ab:c6:96:9a:fc:b0:3f:83:c5: 36:51:08:4f:15:7c:9e:e6:ff:18:c9:b5:31:96:91:15:00:8a: 96:ea:2f:a7:0a:64:03:d5:de:78:f7:30:66:fe:24:8c:06:d7: b5:01:13:a3:2c:11:5e:75:26:49:46:5c:c4:17:f3:ea:74:c3: 6b:10:03:6c:12:d8:00:0c:06:a0:8a:9a:d6:59:b6:b0:b7:d9: 09:19:82:e4:91:9c:c3:3c:1e:52:43:29:a6:52:86:d5:01:84: 56:6e:ca:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjyw/Wmnmwb2nUgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk MTQzMWRjZjItZGI5OS00ZjM5LTlhYTEtN2I1MjdkMWJlODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy5ZsK0HYKGRx8Pms4ZDx9FzBykTAfBHMmrV hLXODSDjbo2kokvrah5HpUHmb+wh4HE+U31/uMFyxUZjU46N8EMFgUFyMtw21NwR jqxAhxKFF3NQQuS60nD8Rure0804vPIrj22JjnmwinYnDpYR2BjB/sRxLX/67teq LZ0nn6mCXFRQDBYV9oxijd3kSV4Xak+eqcwLg8Yssedbmb3/gkzs8dxztnBv4WnL C1fNbjpu371zPbc/KpYit7hlDJtkHbKYmbgSUmFLoaqTcfzADc0qPo7WrRMjrvDC 3mGxP52uIdGOsefnx05HkR75qW/kI9dITBboacXJCPZ3hQhW4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYBOyv8OHdmOgTocJcyxRVOm43pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTAzZjMxNTAtOGMyMi0z MzhjLWI2OGUtNmFlN2NmMzNiN2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa9OxbQsa8yd16CpOkFDoAnPOBAsgJO9VptlhUQy0SBK4E3YmMG5HLo ZtBnYv7iqrmgbj7OVULaUvdfckwwhLy2wUZTb8rE6N92O+0vTYBRas5J6FAhV8oh 65f70+x8oU3kIvBuVqqxPGIiZzZ5tKMLLvBw7w5xwUbp+rLkNwy+xLSFQe4Cl9EX 41j5FTx7R0KL5FPzGc/IYKvGlpr8sD+DxTZRCE8VfJ7m/xjJtTGWkRUAipbqL6cK ZAPV3nj3MGb+JIwG17UBE6MsEV51JklGXMQX8+p0w2sQA2wS2AAMBqCKmtZZtrC3 2QkZguSRnMM8HlJDKaZShtUBhFZuyt4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:41 2025 by rpki-client