$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/91539a9a-9578-35fe-bac3-9397f6a439d5.roa File: 91539a9a-9578-35fe-bac3-9397f6a439d5.roa (raw, json) Hash identifier: C5lqsyUjRriWTwo06OdSitq9tVh7I+IY+wHbLTmFskw= Subject key identifier: 5C:69:E5:D9:B4:57:C1:DB:DD:CA:51:16:69:6D:56:83:BE:95:21:20 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848A1361A2E281DEA4EAF2CEA80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/91539a9a-9578-35fe-bac3-9397f6a439d5.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 7040 IP address blocks: 172.94.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:1a:2e:28:1d:ea:4e:af:2c:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=5b632b3e-ab78-45e5-b20f-8cf8d1060618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d0:06:94:ed:cf:bc:59:66:21:81:a0:49:97: a4:0e:db:2a:f7:6e:a6:7b:21:6a:5e:f1:81:da:92: 43:38:fe:cf:10:1b:c6:b7:23:1d:52:a4:73:f0:99: b7:43:57:76:2d:33:b1:0e:e7:07:e7:87:a5:49:49: b5:20:34:fe:22:f6:67:f3:7e:19:70:ea:ec:5d:65: b1:56:30:c1:13:a8:55:81:dc:66:a9:4a:01:44:fa: c9:e4:a8:b0:0a:60:c1:83:1f:fc:02:d7:cd:bb:fa: b4:8b:29:2d:c8:32:f3:ae:7b:1a:2e:83:f5:5d:c4: 16:36:6c:56:f0:8b:12:dc:bb:82:73:db:74:f2:23: 0d:3f:47:0c:91:65:d6:bc:d8:5c:e0:89:b1:62:88: 27:ea:ec:68:a7:90:81:b9:63:bb:2c:8f:fd:d4:56: cb:ac:45:7d:1a:72:85:1b:a0:e6:85:ad:18:60:0e: a3:ca:10:a8:2d:5b:c8:21:b5:1d:f2:69:dc:fc:69: 0e:57:27:06:6d:9e:55:2a:29:a3:83:5e:95:58:42: da:54:57:4d:88:3b:93:ae:92:2c:39:55:61:0f:2d: d6:03:3e:18:c0:f4:a3:d3:c5:1d:7d:f2:2e:ff:47: e7:71:a4:b3:41:ef:55:7e:af:c1:93:97:98:f3:9e: c9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:69:E5:D9:B4:57:C1:DB:DD:CA:51:16:69:6D:56:83:BE:95:21:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/91539a9a-9578-35fe-bac3-9397f6a439d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:24:c1:bd:ef:4d:72:59:67:b9:3c:78:2c:b5:53:64:44:b5: 41:dc:7c:6d:12:9a:05:93:0c:c3:82:e0:8b:ed:e1:5c:bf:d4: 9a:e3:00:78:e1:27:54:2a:c7:00:e4:5c:ec:72:b2:f4:eb:5f: fa:05:c8:c7:01:e4:5b:df:fc:7e:ad:d4:04:10:73:ac:a1:81: a0:89:51:1f:f9:75:2a:62:52:a1:97:21:9e:d6:d6:d7:62:10: b6:be:7b:1a:85:e1:eb:35:c2:79:89:be:7d:70:96:44:80:43: 04:b3:12:27:b1:51:18:78:2b:e3:a5:c7:2e:2f:27:76:aa:cd: 22:a4:61:67:0b:7b:21:34:b3:5d:9b:e5:79:a0:f1:e2:fb:7d: e1:df:2c:fb:46:85:9e:80:da:ac:3d:fe:b1:56:5a:ee:8e:36: 75:20:56:00:88:57:48:3f:f7:77:c1:41:34:94:25:b3:e8:5e: 60:e9:da:35:93:ec:78:f2:cc:ee:b1:fe:9b:dd:f0:8e:42:9b: a0:d5:fb:b6:0d:4c:7a:b2:16:5f:98:54:8f:f0:63:8f:5d:ed: 49:83:fa:3a:38:39:5d:c6:6d:79:e4:78:d7:88:41:22:eb:6e: 9c:5d:cf:e6:85:0a:0c:a7:5a:16:7b:0b:33:68:19:a0:4d:03: 40:ab:43:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhouKB3qTq8s6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NWI2MzJiM2UtYWI3OC00NWU1LWIyMGYtOGNmOGQxMDYwNjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNAGlO3PvFlmIYGgSZekDtsq926meyFqXvGB 2pJDOP7PEBvGtyMdUqRz8Jm3Q1d2LTOxDucH54elSUm1IDT+IvZn834ZcOrsXWWx VjDBE6hVgdxmqUoBRPrJ5KiwCmDBgx/8AtfNu/q0iyktyDLzrnsaLoP1XcQWNmxW 8IsS3LuCc9t08iMNP0cMkWXWvNhc4ImxYogn6uxop5CBuWO7LI/91FbLrEV9GnKF G6Dmha0YYA6jyhCoLVvIIbUd8mnc/GkOVycGbZ5VKimjg16VWELaVFdNiDuTrpIs OVVhDy3WAz4YwPSj08UdffIu/0fncaSzQe9Vfq/Bk5eY857JMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxp5dm0V8Hb3cpRFmltVoO+lSEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTE1MzlhOWEtOTU3OC0z NWZlLWJhYzMtOTM5N2Y2YTQzOWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUkwb3vTXJZZ7k8eCy1U2REtUHcfG0SmgWTDMOC4Ivt4Vy/1JrjAHjh J1QqxwDkXOxysvTrX/oFyMcB5Fvf/H6t1AQQc6yhgaCJUR/5dSpiUqGXIZ7W1tdi ELa+exqF4es1wnmJvn1wlkSAQwSzEiexURh4K+Olxy4vJ3aqzSKkYWcLeyE0s12b 5Xmg8eL7feHfLPtGhZ6A2qw9/rFWWu6ONnUgVgCIV0g/93fBQTSUJbPoXmDp2jWT 7HjyzO6x/pvd8I5Cm6DV+7YNTHqyFl+YVI/wY49d7UmD+jo4OV3GbXnkeNeIQSLr bpxdz+aFCgynWhZ7CzNoGaBNA0CrQ7A= -----END CERTIFICATE-----Generated at Fri Apr 11 23:23:37 2025 by rpki-client