$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa File: a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa (raw, json) Hash identifier: EDlmQXt5uNpcaR6gOQwYumifld5i/kCjCjkvVxQDEyw= Subject key identifier: 9D:05:9F:5D:85:A7:2D:60:27:E9:8E:64:4D:57:19:A6:B5:18:75:95 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858491ED6E7C4A70EE80B0CB61680 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 40676 IP address blocks: 172.94.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e7:c4:a7:0e:e8:0b:0c:b6:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=b93c33de-16ca-41e2-b6bc-02c365520817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e4:e0:70:a2:51:47:df:d0:37:bc:ae:a1:fe: c3:4b:27:43:28:67:ca:95:00:d0:bc:07:4e:ca:d8: 9a:75:f9:0d:73:b9:c9:a8:64:3a:f5:76:b3:ae:58: 3e:71:e8:67:31:62:0f:e4:c2:aa:b1:56:b4:ed:e6: c0:68:6d:f4:e2:08:ba:41:cc:18:bb:40:56:3d:8e: 25:65:ab:92:1b:3f:01:90:94:b5:d0:2d:28:45:29: 5f:c7:4d:1f:db:02:59:09:fa:a3:d6:b5:c3:c6:e1: 65:24:79:a9:8b:5a:51:a9:26:5b:fa:61:ca:4e:91: 38:01:d4:f0:d2:ee:6f:ab:6c:31:03:5c:8b:3e:6b: 9f:9c:bb:c4:51:d2:83:19:0e:08:7f:15:ae:b1:93: 5f:e0:bf:2f:64:b9:70:22:3e:b2:2b:c2:fd:ae:ac: a1:f7:d1:54:f2:da:b7:1f:f7:f3:f3:da:26:9e:78: 0b:3e:f4:53:ba:db:55:d9:32:74:24:ec:0d:96:c2: 0c:79:d0:ce:05:2a:e4:ad:f2:82:01:ae:01:57:00: 95:83:52:3e:6d:3d:7e:68:39:8a:f8:d7:ba:95:a6: 28:67:8e:4e:20:ed:f7:83:41:c4:6a:f2:d7:7d:31: 96:d1:77:95:46:10:cc:2d:d8:07:6a:a9:1a:c5:b4: 99:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:05:9F:5D:85:A7:2D:60:27:E9:8E:64:4D:57:19:A6:B5:18:75:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a87ea3d4-8ef2-3ced-9dc8-aa23d266b310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:5c:11:be:41:65:c9:80:4a:d1:90:85:cb:01:c2:cb:8e:dc: 92:6f:11:75:e1:ea:f3:82:87:6c:20:5e:3f:fc:b2:eb:57:d8: 93:2b:4e:73:71:76:78:b3:7e:af:29:95:be:7d:4a:02:e5:ae: 28:2c:16:21:ac:91:c6:67:7e:b3:93:30:35:31:c2:94:24:16: a6:c4:c3:29:ce:ae:13:cf:57:fa:ae:6f:c2:1e:f6:c5:1d:b5: fb:26:44:4a:79:b4:a5:cf:85:11:58:e5:0a:1e:6f:cc:41:fc: 6d:83:28:89:92:52:27:17:6c:36:c1:4f:2e:a9:21:00:15:06: e8:50:4f:0a:5e:aa:ea:11:0f:03:2f:2d:18:f6:6f:1f:96:01: f8:b0:50:89:7e:29:ae:cf:1c:9b:3f:a8:81:d1:de:55:4e:31: ca:d4:de:eb:15:7a:5d:40:3d:ed:d1:18:02:6f:14:a6:33:fe: 0c:22:f6:cb:81:5a:ce:84:f1:07:dd:bc:54:bb:3f:48:0e:59: 84:92:9b:e7:bd:d3:af:1a:5a:4d:ef:20:cd:fe:6d:ae:01:84: aa:08:35:2e:0f:ce:f8:c1:fc:78:b4:b1:5a:23:0f:77:27:e8: 15:9a:f1:ac:8e:b6:87:10:51:3c:e1:5f:65:56:29:9a:0d:1c: 4d:88:04:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1ufEpw7oCwy2FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk YjkzYzMzZGUtMTZjYS00MWUyLWI2YmMtMDJjMzY1NTIwODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeTgcKJRR9/QN7yuof7DSydDKGfKlQDQvAdO ytiadfkNc7nJqGQ69Xazrlg+cehnMWIP5MKqsVa07ebAaG304gi6QcwYu0BWPY4l ZauSGz8BkJS10C0oRSlfx00f2wJZCfqj1rXDxuFlJHmpi1pRqSZb+mHKTpE4AdTw 0u5vq2wxA1yLPmufnLvEUdKDGQ4IfxWusZNf4L8vZLlwIj6yK8L9rqyh99FU8tq3 H/fz89omnngLPvRTuttV2TJ0JOwNlsIMedDOBSrkrfKCAa4BVwCVg1I+bT1+aDmK +Ne6laYoZ45OIO33g0HEavLXfTGW0XeVRhDMLdgHaqkaxbSZkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0Fn12Fpy1gJ+mOZE1XGaa1GHWVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTg3ZWEzZDQtOGVmMi0z Y2VkLTlkYzgtYWEyM2QyNjZiMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtcEb5BZcmAStGQhcsBwsuO3JJvEXXh6vOCh2wgXj/8sutX2JMrTnNx dnizfq8plb59SgLlrigsFiGskcZnfrOTMDUxwpQkFqbEwynOrhPPV/qub8Ie9sUd tfsmREp5tKXPhRFY5Qoeb8xB/G2DKImSUicXbDbBTy6pIQAVBuhQTwpequoRDwMv LRj2bx+WAfiwUIl+Ka7PHJs/qIHR3lVOMcrU3usVel1APe3RGAJvFKYz/gwi9suB Ws6E8QfdvFS7P0gOWYSSm+e9068aWk3vIM3+ba4BhKoINS4PzvjB/Hi0sVojD3cn 6BWa8ayOtocQUTzhX2VWKZoNHE2IBGI= -----END CERTIFICATE-----Generated at Fri Apr 11 21:41:47 2025 by rpki-client