$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/df89be0d-0757-3109-b9c3-31260baf8eba.roa File: df89be0d-0757-3109-b9c3-31260baf8eba.roa (raw, json) Hash identifier: MSPfnZLLyorXse9DBgveNsKPABymR/+SFAU9WIiwIF4= Subject key identifier: 27:64:CA:38:88:B7:D7:D5:54:67:BF:B9:A2:B0:FC:16:33:3C:DF:34 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858485B6B0137CAEBF10CCCC93840 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/df89be0d-0757-3109-b9c3-31260baf8eba.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 45671 IP address blocks: 172.94.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6b:01:37:ca:eb:f1:0c:cc:c9:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=4e7ee4ba-9af3-480f-b377-f9f9d135c5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:45:a2:65:66:a8:1f:39:1b:ce:bb:bf:a5: d7:4c:59:21:42:92:ac:1e:ed:30:63:57:95:1d:fe: 0c:84:58:8b:01:be:94:01:14:37:6d:c7:c7:92:5c: 2e:2b:3b:e0:04:84:ea:10:8b:84:d8:71:2a:03:82: ee:7b:f6:37:e8:58:f2:8a:b6:9d:f7:f5:9e:53:8b: e1:1c:2a:5e:8f:dd:be:23:93:f5:53:97:49:6a:12: eb:14:c7:a4:3f:ba:bf:21:9b:2c:75:54:c6:cc:2d: 62:37:06:d0:88:e6:7d:e1:1a:26:1a:36:e0:23:03: 96:7d:12:8b:22:bd:90:f2:0e:58:21:a9:4d:90:35: 67:77:2c:a9:11:78:b6:17:55:8a:76:e8:69:b5:3b: 39:af:b7:f6:79:dd:4b:af:00:6e:ec:54:26:b0:b6: 47:be:29:08:f4:14:dc:7a:d1:23:cd:3b:fe:67:27: 86:0d:b5:ae:fc:13:2b:04:66:bf:86:5d:cb:77:d3: dd:e5:f4:d0:95:60:bf:80:ca:1c:c7:75:7a:56:c1: 22:33:7d:13:4b:af:cc:ec:9c:e4:2b:96:f8:4e:23: 47:fd:72:c5:4b:55:d3:1c:3d:63:6d:8a:6b:f2:16: fe:0a:11:1b:47:62:8a:da:94:37:8c:f2:28:51:9d: 7d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:64:CA:38:88:B7:D7:D5:54:67:BF:B9:A2:B0:FC:16:33:3C:DF:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/df89be0d-0757-3109-b9c3-31260baf8eba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:33:e9:de:1a:b3:4c:21:6c:e7:5a:db:40:44:e1:d8:6a:97: 93:d2:3c:22:d0:40:d3:7d:d9:da:0a:54:3e:1c:f5:04:2f:4c: d4:10:d3:7a:11:fa:71:4f:80:30:53:ae:ba:f5:7d:b4:74:be: af:61:a1:c9:22:b2:42:66:8a:96:db:69:2a:2b:e8:03:04:34: d9:40:7e:53:68:a4:aa:b1:fe:fa:24:0c:0c:1a:e7:23:ec:5c: 71:d8:77:39:84:97:eb:e2:6d:45:a6:f3:6d:02:9f:d2:97:83: 6f:b6:65:3d:b0:1b:5f:27:04:e3:85:65:a9:e1:e1:9b:d5:b1: 86:10:96:4e:50:3c:33:7b:c7:2d:6f:fb:11:9c:c8:e4:ec:98: 60:58:67:bf:5b:d2:91:ee:af:ff:63:33:54:b9:c5:1c:07:c0: 9f:42:34:a7:e1:25:38:d7:a0:f5:c9:ca:ff:c8:8f:90:62:be: f9:b5:62:ac:9c:5b:0e:08:f5:8a:7d:ab:c0:ba:7c:56:f6:59: a2:9f:5d:af:f3:60:da:6e:44:7f:a3:3b:ce:5f:62:da:b5:fc: f7:69:36:f0:e3:b5:b1:92:56:33:c3:be:cf:2a:34:fd:90:7c: 0a:08:23:4d:3a:60:f5:14:8b:9f:06:1b:00:35:9f:4d:20:3d: 3f:f8:38:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbawE3yuvxDMzJOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk NGU3ZWU0YmEtOWFmMy00ODBmLWIzNzctZjlmOWQxMzVjNWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod1FomVmqB85G867v6XXTFkhQpKsHu0wY1eV Hf4MhFiLAb6UARQ3bcfHklwuKzvgBITqEIuE2HEqA4Lue/Y36Fjyirad9/WeU4vh HCpej92+I5P1U5dJahLrFMekP7q/IZssdVTGzC1iNwbQiOZ94RomGjbgIwOWfRKL Ir2Q8g5YIalNkDVndyypEXi2F1WKduhptTs5r7f2ed1LrwBu7FQmsLZHvikI9BTc etEjzTv+ZyeGDbWu/BMrBGa/hl3Ld9Pd5fTQlWC/gMocx3V6VsEiM30TS6/M7Jzk K5b4TiNH/XLFS1XTHD1jbYpr8hb+ChEbR2KK2pQ3jPIoUZ19yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdkyjiIt9fVVGe/uaKw/BYzPN80MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGY4OWJlMGQtMDc1Ny0z MTA5LWI5YzMtMzEyNjBiYWY4ZWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcz6d4as0whbOda20BE4dhql5PSPCLQQNN92doKVD4c9QQvTNQQ03oR +nFPgDBTrrr1fbR0vq9hockiskJmipbbaSor6AMENNlAflNopKqx/vokDAwa5yPs XHHYdzmEl+vibUWm820Cn9KXg2+2ZT2wG18nBOOFZanh4ZvVsYYQlk5QPDN7xy1v +xGcyOTsmGBYZ79b0pHur/9jM1S5xRwHwJ9CNKfhJTjXoPXJyv/Ij5Bivvm1Yqyc Ww4I9Yp9q8C6fFb2WaKfXa/zYNpuRH+jO85fYtq1/PdpNvDjtbGSVjPDvs8qNP2Q fAoII006YPUUi58GGwA1n00gPT/4OK0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:02:19 2025 by rpki-client