$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0c2528f7-307a-3544-ae76-24eac6ee4f86.roa File: 0c2528f7-307a-3544-ae76-24eac6ee4f86.roa (raw, json) Hash identifier: hRTY8t7+lQWX/oxDpo+mqoLs8sSNDFrxh9rrhSV4n4o= Subject key identifier: 02:DB:D0:A1:C4:71:05:18:57:56:C3:26:36:AC:DF:B9:49:46:89:49 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849A1B287630C13F7C3D1FAAB00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0c2528f7-307a-3544-ae76-24eac6ee4f86.roa Signing time: Thu 24 Apr 2025 10:58:41 +0000 ROA not before: Thu 24 Apr 2025 10:58:41 +0000 ROA not after: Wed 23 Jul 2025 10:58:41 +0000 asID: 43260 IP address blocks: 172.94.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b2:87:63:0c:13:f7:c3:d1:fa:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 24 10:58:41 2025 GMT Not After : Jul 23 10:58:41 2025 GMT Subject: CN=9eacbb8f-d35d-4be8-9188-5cad0df5b031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0c:3e:09:94:2b:66:11:4b:20:0f:63:b5:a0: fe:c1:d6:7b:b3:1d:ab:66:ac:94:07:2d:46:2b:dd: 01:c5:b4:99:c2:9d:1a:76:a5:c6:47:6d:4e:2a:89: 89:d4:17:af:dd:04:4f:05:91:e4:46:3b:ce:88:9c: 0c:21:42:5a:a8:bf:81:b1:4a:93:43:56:0c:94:fe: 27:b6:94:df:13:bd:81:3b:e7:62:42:12:98:d1:76: bd:f5:dd:1c:fd:09:6e:12:0a:71:23:c6:90:1e:34: b6:3c:4c:b4:ff:d2:d0:ed:34:e4:81:93:39:85:3e: a2:16:e5:ee:c8:ac:3d:b0:f7:f9:3b:d9:68:57:0f: 5f:c6:5e:8b:21:6f:86:53:01:b5:23:b4:3f:86:5b: cb:ab:94:49:04:f8:34:97:29:4c:8d:f8:d3:f8:dd: fd:d7:f0:3b:af:42:6f:dd:77:aa:31:4e:e1:5f:da: 2e:90:54:d9:72:80:79:2a:dc:1d:ab:b8:12:19:70: b6:90:1f:2a:a4:fa:88:4c:9f:a5:02:75:a7:a7:7f: e5:8e:10:e5:d4:bc:58:68:06:60:4c:56:bc:0e:7e: 61:d5:fa:5a:14:2c:7b:d1:c9:ce:8f:ba:30:1c:30: f9:7b:ef:3a:a8:13:b5:ea:12:af:68:f6:10:8b:18: b8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DB:D0:A1:C4:71:05:18:57:56:C3:26:36:AC:DF:B9:49:46:89:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0c2528f7-307a-3544-ae76-24eac6ee4f86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:c0:4e:6e:05:22:d2:36:0c:60:7e:5f:e0:ab:96:51:3b:ac: e2:33:25:f6:ec:59:96:c1:41:82:18:6a:98:32:38:4c:cc:c7: e4:6b:dc:0a:53:46:cf:ea:b3:6f:d1:5f:ac:f0:8b:8e:2f:ff: 25:f1:78:8f:30:db:57:f0:79:82:d7:90:cc:f4:0f:9a:5e:a3: 4c:3a:93:f0:af:87:41:09:a9:8a:92:ad:46:a1:2b:71:64:71: 67:bf:22:26:f2:42:69:1e:de:5f:0d:ab:c2:fa:c5:72:22:6b: de:fb:74:ef:63:85:05:c1:7d:9e:d7:a1:ca:f8:45:46:6f:61: 5e:f0:0e:01:3a:66:7e:1c:09:bf:72:ec:bf:3a:b9:27:1f:13: 18:3c:26:2f:83:fc:b7:f0:be:93:42:09:2f:73:0a:e0:71:c4: 37:7c:e5:71:f3:bc:ae:b9:8b:e9:e1:c0:99:c4:f5:99:47:c6: e8:34:5c:3e:67:c8:61:1b:11:60:00:39:74:7f:58:cd:2e:ee: ce:a1:49:97:09:17:b6:de:18:55:0a:b4:da:c6:0b:e0:52:af: c2:db:e2:6e:32:8d:0f:8a:48:91:1a:20:9c:68:fd:5e:b7:e5: 38:3f:dc:61:9a:b8:71:c7:5d:0a:0f:82:a8:de:ac:da:2f:18: 10:76:64:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhsodjDBP3w9H6qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyNDEwNTg0MVoXDTI1MDcyMzEwNTg0MVowLzEtMCsGA1UEAxMk OWVhY2JiOGYtZDM1ZC00YmU4LTkxODgtNWNhZDBkZjViMDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQw+CZQrZhFLIA9jtaD+wdZ7sx2rZqyUBy1G K90BxbSZwp0adqXGR21OKomJ1Bev3QRPBZHkRjvOiJwMIUJaqL+BsUqTQ1YMlP4n tpTfE72BO+diQhKY0Xa99d0c/QluEgpxI8aQHjS2PEy0/9LQ7TTkgZM5hT6iFuXu yKw9sPf5O9loVw9fxl6LIW+GUwG1I7Q/hlvLq5RJBPg0lylMjfjT+N391/A7r0Jv 3XeqMU7hX9oukFTZcoB5Ktwdq7gSGXC2kB8qpPqITJ+lAnWnp3/ljhDl1LxYaAZg TFa8Dn5h1fpaFCx70cnOj7owHDD5e+86qBO16hKvaPYQixi4WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALb0KHEcQUYV1bDJjas37lJRolJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGMyNTI4ZjctMzA3YS0z NTQ0LWFlNzYtMjRlYWM2ZWU0Zjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF49MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHATm4FItI2DGB+X+CrllE7rOIzJfbsWZbBQYIYapgyOEzMx+Rr3ApT Rs/qs2/RX6zwi44v/yXxeI8w21fweYLXkMz0D5peo0w6k/Cvh0EJqYqSrUahK3Fk cWe/IibyQmke3l8Nq8L6xXIia977dO9jhQXBfZ7Xocr4RUZvYV7wDgE6Zn4cCb9y 7L86uScfExg8Ji+D/LfwvpNCCS9zCuBxxDd85XHzvK65i+nhwJnE9ZlHxug0XD5n yGEbEWAAOXR/WM0u7s6hSZcJF7beGFUKtNrGC+BSr8Lb4m4yjQ+KSJEaIJxo/V63 5Tg/3GGauHHHXQoPgqjerNovGBB2ZLk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:10:19 2025 by rpki-client