$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f393d880-9d6e-3953-a98b-12516ebc54b1.roa File: f393d880-9d6e-3953-a98b-12516ebc54b1.roa (raw, json) Hash identifier: wL8RAroc1eOez507or+ISdQ6nzqrkbZakKn8yowLElU= Subject key identifier: 99:D7:E4:F9:08:44:1E:FA:1F:D3:C7:34:6D:C9:0C:DF:77:EA:FF:54 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584930DE77F9DABA5200B5FEFB00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f393d880-9d6e-3953-a98b-12516ebc54b1.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 212238 IP address blocks: 172.94.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:77:f9:da:ba:52:00:b5:fe:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=7d28d1e9-bef0-467f-94b9-f18045d4d31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:16:f8:9d:42:ac:57:13:52:f6:45:f7:79:08: dd:3e:e0:38:bb:3a:25:26:3b:f1:3b:fc:89:00:3f: e7:75:29:32:eb:b8:57:02:ff:ca:24:54:65:e7:82: d8:11:a6:51:0c:df:6c:64:a4:4d:c7:54:19:8f:e8: 22:44:47:da:a6:59:54:00:c2:3f:6b:7a:50:0d:22: e8:2a:52:5a:c4:f4:54:a1:a9:b5:c2:fb:cd:a1:c7: 3d:f3:51:10:4a:18:ac:b2:d1:8b:36:08:91:eb:2d: 38:6b:32:52:85:1e:0e:04:89:df:da:93:3a:1a:bb: 11:91:6b:d7:ac:b7:f0:4a:00:9c:3e:a4:25:e7:c2: 97:f6:5b:64:7a:f5:e9:b2:c2:aa:4a:36:e4:c8:3e: 3b:78:72:c7:ba:97:fd:82:1f:81:e6:e5:98:93:e3: 34:6b:4b:55:f3:ae:95:47:35:1e:3b:d6:fb:5d:1f: 1a:3f:37:f2:7c:4f:87:91:99:40:dc:ef:8b:5d:8d: 1d:e4:6a:21:d2:8f:90:60:75:90:04:cc:48:a2:99: ec:8f:3f:e3:d6:0a:46:eb:fb:5f:c5:15:18:62:26: 12:ac:6f:6a:01:db:45:ea:12:6e:36:87:a6:a3:27: 35:34:f9:49:43:2a:62:76:03:36:d2:ee:28:50:48: 55:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D7:E4:F9:08:44:1E:FA:1F:D3:C7:34:6D:C9:0C:DF:77:EA:FF:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f393d880-9d6e-3953-a98b-12516ebc54b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:80:8e:0f:c2:9e:17:d5:f5:12:9c:4e:d8:54:a8:b9:7a:a4: 55:ae:39:fd:3d:bb:4e:59:dc:a2:a8:18:a3:7d:aa:e9:3c:b5: 32:53:f6:df:b0:3b:86:fb:11:9d:8f:71:35:cb:25:b4:3b:18: 79:84:53:c2:5e:5e:ba:9d:e0:e1:b4:7d:b6:1a:6b:8e:c8:c5: a3:09:50:42:c0:e2:cf:8f:9b:53:ae:8d:28:c1:45:a7:3e:28: 9f:f5:69:a5:ad:96:23:e4:2d:b0:0c:1f:63:ef:52:32:41:fd: b5:70:0f:67:30:33:f9:b8:7d:e9:c0:ca:54:e7:6b:c9:fa:5b: f6:7c:63:f6:53:61:64:0d:0e:1e:b2:36:2d:4b:d6:56:61:21: bb:09:e3:c1:d1:ae:b4:b9:ad:b7:8e:57:63:ec:5c:a6:15:d6: 99:1e:f7:a6:88:50:96:9a:8a:07:2a:90:29:3b:a1:75:f1:83: ec:2f:69:e7:ca:ab:a2:58:0c:6f:b0:62:5a:a6:ba:01:a8:fa: 43:7d:44:a5:8b:e3:b9:5a:16:ea:74:19:3d:1c:cf:d1:d8:6e: 22:b5:f4:f2:af:1c:15:36:42:8b:0d:22:41:c2:46:f3:ff:45: 23:6a:31:1a:26:d5:d2:ed:34:dd:a3:ca:2a:78:a5:ee:32:5b: 90:15:10:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nf52rpSALX++wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk N2QyOGQxZTktYmVmMC00NjdmLTk0YjktZjE4MDQ1ZDRkMzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRb4nUKsVxNS9kX3eQjdPuA4uzolJjvxO/yJ AD/ndSky67hXAv/KJFRl54LYEaZRDN9sZKRNx1QZj+giREfapllUAMI/a3pQDSLo KlJaxPRUoam1wvvNocc981EQShisstGLNgiR6y04azJShR4OBInf2pM6GrsRkWvX rLfwSgCcPqQl58KX9ltkevXpssKqSjbkyD47eHLHupf9gh+B5uWYk+M0a0tV866V RzUeO9b7XR8aPzfyfE+HkZlA3O+LXY0d5Goh0o+QYHWQBMxIopnsjz/j1gpG6/tf xRUYYiYSrG9qAdtF6hJuNoemoyc1NPlJQypidgM20u4oUEhVmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnX5PkIRB76H9PHNG3JDN936v9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjM5M2Q4ODAtOWQ2ZS0z OTUzLWE5OGItMTI1MTZlYmM1NGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGAjg/CnhfV9RKcTthUqLl6pFWuOf09u05Z3KKoGKN9quk8tTJT9t+w O4b7EZ2PcTXLJbQ7GHmEU8JeXrqd4OG0fbYaa47IxaMJUELA4s+Pm1OujSjBRac+ KJ/1aaWtliPkLbAMH2PvUjJB/bVwD2cwM/m4fenAylTna8n6W/Z8Y/ZTYWQNDh6y Ni1L1lZhIbsJ48HRrrS5rbeOV2PsXKYV1pke96aIUJaaigcqkCk7oXXxg+wvaefK q6JYDG+wYlqmugGo+kN9RKWL47laFup0GT0cz9HYbiK19PKvHBU2QosNIkHCRvP/ RSNqMRom1dLtNN2jyip4pe4yW5AVEKo= -----END CERTIFICATE-----Generated at Fri Apr 11 23:18:01 2025 by rpki-client