$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa File: 08340f91-5c11-3164-9641-ece7f93755e1.roa (raw, json) Hash identifier: wvK3eH3gC9AEvKBVXUvO1LGy9onIP2igDwV5NNTNvdo= Subject key identifier: 2B:B8:F8:22:00:35:6F:72:54:36:F8:4E:9A:1E:82:02:22:EE:6E:3E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584929E3CDA9F600ADC18879BF00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 9009 IP address blocks: 172.94.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:cd:a9:f6:00:ad:c1:88:79:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=f824aa25-0d9f-4848-a114-679a4c5b5ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:48:3a:14:07:ad:57:ee:b4:23:b2:60:d8: fb:46:82:d5:f3:f2:54:2b:df:53:45:72:77:0e:a9: 1a:31:fd:51:86:eb:0e:4f:17:f8:1e:9b:56:0c:34: 5c:02:ea:c1:d5:10:36:1e:8d:f9:cf:a4:7c:2b:e2: ab:13:48:b1:a2:76:00:4c:df:34:94:f6:d6:ac:4b: 99:46:81:17:02:59:e6:3a:22:22:1f:c9:51:37:98: 3d:d0:bf:e1:62:c9:cf:59:5f:1e:61:78:c2:b6:1a: 72:56:4e:b5:f2:8f:23:e6:e7:1b:d3:8e:f8:5c:fa: 25:99:5a:7a:36:b6:59:3f:50:8a:e9:f0:eb:92:04: 59:cc:20:3e:77:35:c9:5d:de:33:f7:e5:38:7b:51: 8b:1c:60:12:9c:90:f3:14:7e:27:7a:fa:91:c3:6a: 73:c8:84:ca:14:fc:b9:dc:c6:6e:b2:f3:42:b8:3d: 40:8f:00:e2:e5:7e:c5:e6:21:01:46:88:2d:16:c8: ad:31:7b:05:aa:ca:be:c4:9d:b3:f0:e6:0a:aa:6b: 23:41:0d:44:4d:c4:d4:ba:16:41:7e:0f:24:aa:b6: 8b:6b:82:8e:76:9e:09:4c:08:99:87:93:7a:e9:01: 13:0b:ba:56:e5:9b:ec:5c:25:b6:7a:95:08:79:58: de:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B8:F8:22:00:35:6F:72:54:36:F8:4E:9A:1E:82:02:22:EE:6E:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08340f91-5c11-3164-9641-ece7f93755e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:1a:33:18:c2:d6:77:b1:11:c7:10:dd:16:a3:4f:17:b4:c8: 91:cd:b8:60:24:3e:42:8f:89:3b:25:d2:a8:c9:63:86:33:98: d4:4e:74:ae:3d:cc:15:a4:9d:37:5f:dd:eb:a3:d4:74:f6:c2: 93:73:56:7e:03:ab:0a:e8:5a:4a:da:53:04:fc:fa:b1:fd:9a: 4a:af:7e:fc:52:2f:13:bb:9b:12:28:90:d1:f3:9d:57:00:ac: 35:85:21:cf:76:34:bb:ea:ec:16:bb:dc:5d:ad:37:80:ba:10: 4d:21:99:94:1a:83:ac:72:bf:c1:20:f2:c7:58:e9:59:d8:ee: 78:81:fa:5f:52:af:a6:05:44:d1:ed:54:04:db:41:ce:67:f8: a8:7d:51:37:04:11:4a:0f:59:a2:f6:46:23:46:46:49:89:26: 2f:86:3d:ff:8c:53:a5:fa:62:36:62:43:03:be:83:06:91:f7: 30:4c:53:60:db:9a:69:79:24:d4:80:6f:ae:3f:e1:94:d5:0a: fd:61:c7:9a:46:a6:dc:d4:a5:b0:4b:fd:ba:29:d7:f3:3a:40: b9:cf:18:96:cb:9a:64:19:9e:51:20:2b:ca:0a:b6:1a:75:4a: 66:a2:1f:5f:fb:21:fc:f2:fa:08:e6:a0:b6:4b:6a:07:06:62: 4d:b6:d1:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkp482p9gCtwYh5vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk ZjgyNGFhMjUtMGQ5Zi00ODQ4LWExMTQtNjc5YTRjNWI1Y2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiNIOhQHrVfutCOyYNj7RoLV8/JUK99TRXJ3 DqkaMf1RhusOTxf4HptWDDRcAurB1RA2Ho35z6R8K+KrE0ixonYATN80lPbWrEuZ RoEXAlnmOiIiH8lRN5g90L/hYsnPWV8eYXjCthpyVk618o8j5ucb0474XPolmVp6 NrZZP1CK6fDrkgRZzCA+dzXJXd4z9+U4e1GLHGASnJDzFH4nevqRw2pzyITKFPy5 3MZusvNCuD1AjwDi5X7F5iEBRogtFsitMXsFqsq+xJ2z8OYKqmsjQQ1ETcTUuhZB fg8kqraLa4KOdp4JTAiZh5N66QETC7pW5ZvsXCW2epUIeVjegQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCu4+CIANW9yVDb4TpoeggIi7m4+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDgzNDBmOTEtNWMxMS0z MTY0LTk2NDEtZWNlN2Y5Mzc1NWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoaMxjC1nexEccQ3RajTxe0yJHNuGAkPkKPiTsl0qjJY4YzmNROdK49 zBWknTdf3euj1HT2wpNzVn4DqwroWkraUwT8+rH9mkqvfvxSLxO7mxIokNHznVcA rDWFIc92NLvq7Ba73F2tN4C6EE0hmZQag6xyv8Eg8sdY6VnY7niB+l9Sr6YFRNHt VATbQc5n+Kh9UTcEEUoPWaL2RiNGRkmJJi+GPf+MU6X6YjZiQwO+gwaR9zBMU2Db mml5JNSAb64/4ZTVCv1hx5pGptzUpbBL/bop1/M6QLnPGJbLmmQZnlEgK8oKthp1 SmaiH1/7Ifzy+gjmoLZLagcGYk220WU= -----END CERTIFICATE-----Generated at Sat Apr 26 16:35:39 2025 by rpki-client