$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/acf3baa7-dbc1-3afc-af90-183681c6f600.roa File: acf3baa7-dbc1-3afc-af90-183681c6f600.roa (raw, json) Hash identifier: Ivqw7CQOOP1i86fiyXBJVLaZS00ItLgMMFkZyOXOtvQ= Subject key identifier: CA:60:AD:E6:4A:0C:50:D0:4F:95:55:B8:32:BD:77:07:E7:EF:C5:10 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848E9CBEF6EC265E883B573F400 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/acf3baa7-dbc1-3afc-af90-183681c6f600.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 9009 IP address blocks: 172.94.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:ef:6e:c2:65:e8:83:b5:73:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=b58598d4-0068-481e-9072-7bf7b56dff01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:62:d4:73:02:06:e7:6f:a8:86:e3:fe:95:3f: 0a:ea:ba:86:37:3f:cf:be:bd:4f:04:20:94:23:ec: 4e:3e:77:0f:4c:0b:94:bf:a5:12:13:a0:17:91:ad: c1:7a:fb:a7:34:cf:d5:37:7d:b1:79:29:f2:4e:2a: 82:21:aa:34:b9:e1:cb:09:e1:15:37:e7:1c:09:5c: fc:2e:49:2e:a2:cb:41:0b:56:61:07:95:d1:1c:06: f6:80:5a:8d:2f:41:10:a6:b2:5e:05:e9:62:9a:18: 84:06:5d:91:3e:38:f5:99:48:2d:e1:19:f3:b0:41: 32:79:9a:38:c6:3d:85:6a:c9:40:04:c6:00:b0:ea: ae:06:02:f9:6c:70:d8:36:66:24:f4:8e:63:a4:a6: cc:aa:c1:b9:87:9d:e3:b5:ca:b0:4e:7a:70:e4:04: 96:89:fd:95:e7:db:51:fa:08:69:e9:29:40:42:69: de:7d:aa:5c:7c:90:3d:8a:01:30:2d:c6:82:fa:4e: 05:75:dd:89:cf:cb:d4:4a:be:53:6b:2b:ba:d0:10: eb:df:c8:a4:3a:bd:04:c1:24:bf:6f:b2:b7:8a:ea: b3:a6:4d:94:ca:a2:7b:b2:8e:42:d4:ef:91:1f:79: 95:d7:ac:6b:94:01:78:ce:82:3b:e1:d5:19:a3:4a: 10:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:60:AD:E6:4A:0C:50:D0:4F:95:55:B8:32:BD:77:07:E7:EF:C5:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/acf3baa7-dbc1-3afc-af90-183681c6f600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:76:7a:79:55:92:82:af:30:09:bb:ae:5c:27:e6:f3:e3:f8: fe:9b:e8:cb:16:59:2e:28:4d:8e:b2:b4:ad:fb:7b:06:cd:88: 03:42:73:56:67:79:45:0d:40:cd:d1:99:0f:74:9a:3d:94:f3: 80:a6:78:72:9f:47:09:0c:c1:ca:7c:80:63:f0:85:9a:a5:f1: 4f:5e:a8:7d:05:6f:bf:dc:3f:76:f1:b0:34:d2:3d:f5:c9:6e: b3:3a:b9:31:1f:5c:7c:0f:bc:4d:3c:d1:6a:07:0b:07:89:53: 93:af:9f:f6:c1:e9:d6:a9:35:61:fe:17:85:bc:ee:e8:9c:09: a3:74:72:03:fe:1a:44:cc:55:7e:f1:02:f0:f5:d4:02:79:88: 60:1d:fe:a5:f8:97:78:0d:b6:00:08:c6:17:28:83:20:78:df: cb:b3:e9:f3:a0:b6:fa:b9:a9:e6:87:c4:59:9c:7a:b7:34:79: 09:a2:38:0f:77:92:1b:50:0a:4e:c4:a4:ba:a9:2d:15:a1:6d: 50:ac:c1:9b:2f:d0:6e:1f:d1:c9:c5:1d:8f:0c:de:bb:10:69: 01:14:6d:64:5c:06:41:82:75:0a:43:74:3a:41:f6:8b:7e:04: 6a:67:55:19:54:6a:a6:ad:9b:54:0c:38:3d:9b:9b:1f:9d:86: 5b:2b:31:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+9uwmXog7Vz9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk YjU4NTk4ZDQtMDA2OC00ODFlLTkwNzItN2JmN2I1NmRmZjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWLUcwIG52+ohuP+lT8K6rqGNz/Pvr1PBCCU I+xOPncPTAuUv6USE6AXka3BevunNM/VN32xeSnyTiqCIao0ueHLCeEVN+ccCVz8 LkkuostBC1ZhB5XRHAb2gFqNL0EQprJeBelimhiEBl2RPjj1mUgt4RnzsEEyeZo4 xj2FaslABMYAsOquBgL5bHDYNmYk9I5jpKbMqsG5h53jtcqwTnpw5ASWif2V59tR +ghp6SlAQmnefapcfJA9igEwLcaC+k4Fdd2Jz8vUSr5Tayu60BDr38ikOr0EwSS/ b7K3iuqzpk2UyqJ7so5C1O+RH3mV16xrlAF4zoI74dUZo0oQpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpgreZKDFDQT5VVuDK9dwfn78UQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWNmM2JhYTctZGJjMS0z YWZjLWFmOTAtMTgzNjgxYzZmNjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGp2enlVkoKvMAm7rlwn5vPj+P6b6MsWWS4oTY6ytK37ewbNiANCc1Zn eUUNQM3RmQ90mj2U84CmeHKfRwkMwcp8gGPwhZql8U9eqH0Fb7/cP3bxsDTSPfXJ brM6uTEfXHwPvE080WoHCweJU5Ovn/bB6dapNWH+F4W87uicCaN0cgP+GkTMVX7x AvD11AJ5iGAd/qX4l3gNtgAIxhcogyB438uz6fOgtvq5qeaHxFmcerc0eQmiOA93 khtQCk7EpLqpLRWhbVCswZsv0G4f0cnFHY8M3rsQaQEUbWRcBkGCdQpDdDpB9ot+ BGpnVRlUaqatm1QMOD2bmx+dhlsrMZM= -----END CERTIFICATE-----Generated at Sat Apr 12 01:54:11 2025 by rpki-client