$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ae3043f3-7de0-3c24-bf06-d427a55f5835.roa File: ae3043f3-7de0-3c24-bf06-d427a55f5835.roa (raw, json) Hash identifier: AODDXDBN3Ttepnin5LVJI8pH7/aLMZFOmWgD6MY6IrM= Subject key identifier: F6:96:79:51:80:CB:99:3F:3E:0D:08:4E:04:D7:91:18:58:5D:A5:58 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848FFA1456A6C641BCEDCCB3880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ae3043f3-7de0-3c24-bf06-d427a55f5835.roa Signing time: Tue 25 Feb 2025 09:42:57 +0000 ROA not before: Tue 25 Feb 2025 09:42:57 +0000 ROA not after: Mon 26 May 2025 08:42:57 +0000 asID: 329007 IP address blocks: 172.94.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ff:a1:45:6a:6c:64:1b:ce:dc:cb:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 25 09:42:57 2025 GMT Not After : May 26 08:42:57 2025 GMT Subject: CN=5e2930c0-91d8-47fe-b7c2-525453d9ed46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2d:a8:80:5c:d8:f2:d1:49:b4:b0:ad:b9:20: 81:a4:fb:34:45:1f:56:db:80:63:97:8c:c7:d0:7a: 81:a4:23:2d:bd:cc:d7:0b:03:c3:91:20:26:8f:c5: ac:47:01:bd:b7:94:85:64:0a:0a:98:2f:d2:48:54: 61:83:cb:43:80:b6:c1:17:9f:c1:d6:99:a3:17:1f: 69:11:15:ce:e2:27:86:27:35:77:e1:2e:e7:0f:83: c9:81:28:f8:5f:d7:b2:dd:61:ae:04:70:9e:a0:0a: 2a:67:02:db:8e:e1:d7:68:06:4d:c4:f9:30:69:a8: e8:cd:e3:b4:1c:c9:91:27:03:12:dc:7d:3d:96:25: 32:b5:fd:37:f3:72:fa:57:90:90:ab:42:49:ad:f5: ee:23:a9:20:4b:18:49:88:24:45:f9:ca:e3:e6:46: a0:34:46:ee:13:ce:77:c0:c1:ce:7f:1f:e0:7b:d5: 27:ad:17:f3:c8:eb:f6:e5:eb:62:37:01:4c:f4:3f: 15:4a:4c:b5:c7:5b:b4:d2:99:43:86:7e:29:4d:86: 53:d6:b4:6f:3c:7f:11:04:98:2d:8a:f8:0e:4e:ba: e2:99:5d:d1:91:40:bd:9b:56:c1:52:84:ab:39:c0: f5:60:42:76:0a:8e:02:f2:20:83:4c:44:fb:7a:36: 08:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:96:79:51:80:CB:99:3F:3E:0D:08:4E:04:D7:91:18:58:5D:A5:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ae3043f3-7de0-3c24-bf06-d427a55f5835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:37:06:57:bf:29:1d:91:9a:42:bc:41:ca:fc:b7:fe:b1:f4: 3e:37:b3:0a:a3:7c:7a:42:fe:e3:6b:bc:f4:fd:e7:95:f1:8f: 4e:6d:ce:f6:16:2d:28:6c:3d:d8:2e:e3:1a:e8:1f:8a:7a:bd: 47:d8:01:42:f4:b6:ef:c8:4d:81:08:86:1f:8d:8d:2d:b9:3c: ea:2b:c2:23:72:78:70:69:57:7e:39:89:b1:82:9f:1f:9b:c3: b2:53:9f:9a:67:88:fc:22:54:f4:f7:da:c9:91:3e:d3:8d:8b: 71:d1:d3:3f:22:a8:a7:60:74:ca:ac:79:84:3b:f7:f5:20:e2: 78:5c:ee:09:3c:dc:1a:99:45:9b:0c:b9:2f:95:e7:6e:a5:6d: 07:44:14:69:75:81:fd:3a:59:3a:9c:3b:cf:44:2b:a0:cf:25: 26:7c:53:93:4d:e1:99:a7:97:56:5b:a8:71:9f:98:0b:3b:c9: 1c:73:c1:94:f4:9d:72:6c:87:b0:f8:30:95:cf:d3:92:50:5f: c1:9b:d0:40:e6:34:f6:44:0f:ad:78:62:39:1a:e0:86:24:3c: 09:89:6e:80:58:ad:b2:2d:02:de:55:74:f7:25:ec:ba:f9:91: a3:59:55:c0:3f:fb:d2:87:f5:26:26:36:f7:96:45:83:dd:66: b5:07:36:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj/oUVqbGQbztzLOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIyNTA5NDI1N1oXDTI1MDUyNjA4NDI1N1owLzEtMCsGA1UEAxMk NWUyOTMwYzAtOTFkOC00N2ZlLWI3YzItNTI1NDUzZDllZDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy2ogFzY8tFJtLCtuSCBpPs0RR9W24Bjl4zH 0HqBpCMtvczXCwPDkSAmj8WsRwG9t5SFZAoKmC/SSFRhg8tDgLbBF5/B1pmjFx9p ERXO4ieGJzV34S7nD4PJgSj4X9ey3WGuBHCeoAoqZwLbjuHXaAZNxPkwaajozeO0 HMmRJwMS3H09liUytf0383L6V5CQq0JJrfXuI6kgSxhJiCRF+crj5kagNEbuE853 wMHOfx/ge9UnrRfzyOv25etiNwFM9D8VSky1x1u00plDhn4pTYZT1rRvPH8RBJgt ivgOTrrimV3RkUC9m1bBUoSrOcD1YEJ2Co4C8iCDTET7ejYIYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaWeVGAy5k/Pg0ITgTXkRhYXaVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWUzMDQzZjMtN2RlMC0z YzI0LWJmMDYtZDQyN2E1NWY1ODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF49MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACc3Ble/KR2RmkK8Qcr8t/6x9D43swqjfHpC/uNrvPT955Xxj05tzvYW LShsPdgu4xroH4p6vUfYAUL0tu/ITYEIhh+NjS25POorwiNyeHBpV345ibGCnx+b w7JTn5pniPwiVPT32smRPtONi3HR0z8iqKdgdMqseYQ79/Ug4nhc7gk83BqZRZsM uS+V526lbQdEFGl1gf06WTqcO89EK6DPJSZ8U5NN4Zmnl1ZbqHGfmAs7yRxzwZT0 nXJsh7D4MJXP05JQX8Gb0EDmNPZED614Yjka4IYkPAmJboBYrbItAt5VdPcl7Lr5 kaNZVcA/+9KH9SYmNveWRYPdZrUHNpQ= -----END CERTIFICATE-----Generated at Fri Apr 11 23:41:43 2025 by rpki-client