$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c5968279-9770-34e3-9871-db4912d08cbb.roa File: c5968279-9770-34e3-9871-db4912d08cbb.roa (raw, json) Hash identifier: On/iEjAZI9OTx0kGEMUDDmsjWPkFsnp17D/vrBv0VwQ= Subject key identifier: A5:CA:B0:FE:21:B3:FB:00:7C:C4:2D:E0:4C:1F:88:A9:EE:5C:2A:C5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858491ED6EAB9615EF35DE79DDB40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c5968279-9770-34e3-9871-db4912d08cbb.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 9009 IP address blocks: 172.94.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:ea:b9:61:5e:f3:5d:e7:9d:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=ea1d1d72-de36-4e1e-b74c-de552ed42640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9e:35:5e:ab:7f:a3:c4:01:ce:bb:3d:1a:45: 96:fc:20:b3:d1:22:a6:7e:d5:b2:81:d5:87:78:33: 26:4a:57:ee:5c:c6:e2:de:84:fa:12:b8:da:74:b2: d6:45:6d:30:d2:74:a7:3f:3c:bd:de:33:75:23:77: cd:67:60:a5:09:66:07:28:e8:91:7f:16:41:9c:fd: 2c:61:b9:eb:ad:03:ab:3a:e2:16:c4:3f:b1:f0:88: 67:c4:15:72:39:87:4d:88:34:31:6d:bf:cc:da:c2: 30:76:2e:fe:6d:ae:2d:ff:45:0b:73:33:33:04:8e: 36:18:fd:8a:e1:9b:27:26:9d:54:80:c7:62:30:02: e7:76:b9:a0:ca:8e:68:f5:37:f9:55:e8:1d:79:4f: bd:cb:cc:a3:a0:f0:92:19:e3:3a:7d:e4:99:67:07: 49:18:55:57:ce:eb:8b:ff:5d:84:a2:bc:92:44:07: e1:49:8b:4e:14:15:16:13:da:9f:c3:f3:b1:6e:43: c4:47:2b:0e:50:29:b5:5d:e0:2a:61:ea:6e:78:a6: d1:ef:29:db:1e:2a:eb:da:f0:b5:69:b5:b6:b2:40: 03:3f:ce:8f:68:cc:8a:92:04:03:d4:18:9d:16:c7: c6:3e:4d:a3:02:d0:72:af:f2:c5:fa:48:e7:37:a2: 29:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CA:B0:FE:21:B3:FB:00:7C:C4:2D:E0:4C:1F:88:A9:EE:5C:2A:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c5968279-9770-34e3-9871-db4912d08cbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:66:77:39:ce:a5:8b:46:cc:92:c9:bd:83:ef:6f:18:fb:31: dd:0a:de:78:e1:5d:7b:ce:11:03:ba:48:03:b4:54:b3:08:51: cd:9d:e4:2e:4a:ef:8c:c8:81:9a:65:2c:00:c7:b3:25:8d:79: 85:fd:9c:95:b5:6c:58:ae:52:34:f0:25:9b:97:4a:1e:c4:6e: fe:1e:3e:85:f3:0b:81:39:62:b2:7d:ab:74:5f:f7:e7:ee:af: 9f:03:ae:6d:39:12:44:60:bf:0e:60:23:88:e9:b5:a2:4d:89: 89:6f:e7:cb:7a:b4:df:e0:7c:90:f7:cc:fa:49:7f:d8:4c:a0: 08:45:0c:3b:e0:c4:f2:ef:a7:c0:ed:1c:71:c0:11:20:8d:95: 05:55:eb:13:b6:c5:3a:ab:4c:00:13:85:85:db:81:db:d5:ff: 85:11:42:1b:f4:59:0e:fb:46:44:b9:d9:53:fe:1f:fa:5d:78: b9:6b:e3:d2:a9:a3:8d:d4:ae:81:95:a2:7e:ad:b8:62:d7:38: 7b:4a:90:19:e6:a3:6e:80:34:dc:d6:0a:12:99:10:ac:d1:08: c7:9f:cc:ab:8b:40:c3:cd:07:92:92:1e:c6:7d:db:36:34:1f: b8:07:e5:31:d0:72:51:26:ce:27:1a:30:a3:48:01:e3:f6:9c: 11:19:e2:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uq5YV7zXeed20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk ZWExZDFkNzItZGUzNi00ZTFlLWI3NGMtZGU1NTJlZDQyNjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv541Xqt/o8QBzrs9GkWW/CCz0SKmftWygdWH eDMmSlfuXMbi3oT6ErjadLLWRW0w0nSnPzy93jN1I3fNZ2ClCWYHKOiRfxZBnP0s YbnrrQOrOuIWxD+x8IhnxBVyOYdNiDQxbb/M2sIwdi7+ba4t/0ULczMzBI42GP2K 4ZsnJp1UgMdiMALndrmgyo5o9Tf5VegdeU+9y8yjoPCSGeM6feSZZwdJGFVXzuuL /12EorySRAfhSYtOFBUWE9qfw/OxbkPERysOUCm1XeAqYepueKbR7ynbHirr2vC1 abW2skADP86PaMyKkgQD1BidFsfGPk2jAtByr/LF+kjnN6IpHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXKsP4hs/sAfMQt4EwfiKnuXCrFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzU5NjgyNzktOTc3MC0z NGUzLTk4NzEtZGI0OTEyZDA4Y2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRmdznOpYtGzJLJvYPvbxj7Md0K3njhXXvOEQO6SAO0VLMIUc2d5C5K 74zIgZplLADHsyWNeYX9nJW1bFiuUjTwJZuXSh7Ebv4ePoXzC4E5YrJ9q3Rf9+fu r58Drm05EkRgvw5gI4jptaJNiYlv58t6tN/gfJD3zPpJf9hMoAhFDDvgxPLvp8Dt HHHAESCNlQVV6xO2xTqrTAAThYXbgdvV/4URQhv0WQ77RkS52VP+H/pdeLlr49Kp o43UroGVon6tuGLXOHtKkBnmo26ANNzWChKZEKzRCMefzKuLQMPNB5KSHsZ92zY0 H7gH5THQclEmzicaMKNIAeP2nBEZ4kI= -----END CERTIFICATE-----Generated at Fri Apr 11 23:44:35 2025 by rpki-client