$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1cdabc01-7589-33c3-bfe7-6ab8ecfd771d.roa File: 1cdabc01-7589-33c3-bfe7-6ab8ecfd771d.roa (raw, json) Hash identifier: DQs2avZ/mwR0Svlk3JE64eZhfKiOBWr1mQ2oR4XZNJU= Subject key identifier: 79:6A:2B:26:A0:41:B7:DC:90:4C:59:86:2F:6D:D4:C5:65:E0:57:FB Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858497DA474639B62D36D13962F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1cdabc01-7589-33c3-bfe7-6ab8ecfd771d.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 3223 IP address blocks: 172.94.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:74:63:9b:62:d3:6d:13:96:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=a395f406-f875-4929-b00b-f9f30fdfd1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7a:e8:2a:fa:5b:dd:26:e7:d7:25:a8:17:64: 05:51:8a:51:94:b8:10:77:17:72:77:b2:fd:40:a4: ab:ae:11:04:28:0d:71:dc:1c:29:28:ac:83:21:ba: 60:1e:68:d3:df:f3:aa:2c:7a:ab:6c:c0:3f:67:01: ca:f6:10:9b:5c:21:2c:11:87:67:dc:94:ab:a6:53: 80:2f:86:15:6b:aa:9e:31:9c:70:59:38:9d:1f:86: 67:bf:ea:fd:76:9a:28:99:14:ed:78:19:8c:54:a2: eb:74:c5:8c:5b:8b:2b:51:44:35:13:fc:8c:a1:2a: 28:d8:89:de:c0:a5:ce:0b:bf:eb:35:fd:0b:df:e3: 74:7e:26:a3:06:15:f8:7d:1f:c2:0b:51:a5:ff:0d: 86:9a:7d:7e:0e:3e:af:d6:70:1d:8b:b7:3c:a9:6a: eb:8a:47:36:ef:03:1f:9a:17:0b:2b:84:10:d0:32: 8e:3d:54:82:0a:95:43:9d:30:32:83:3a:34:1f:f9: e8:75:0c:a3:cf:d0:69:f3:16:4d:38:c0:dd:e2:55: f6:4e:d0:bf:aa:b7:d3:87:8b:8f:4c:c6:19:87:bf: d9:d4:8c:11:71:a0:fd:23:35:62:4e:6a:1f:46:f6: 9e:c9:c5:a9:8a:e4:40:24:76:6b:52:0f:10:40:a9: ed:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6A:2B:26:A0:41:B7:DC:90:4C:59:86:2F:6D:D4:C5:65:E0:57:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1cdabc01-7589-33c3-bfe7-6ab8ecfd771d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:45:15:54:bd:e0:5b:78:53:46:3d:aa:62:5f:d8:13:bf:a9: 53:38:97:11:89:11:0f:40:48:05:77:28:b0:b3:72:6e:28:2f: f5:20:41:63:66:73:e9:f6:cb:95:85:02:45:63:41:79:a3:68: 30:cb:60:5f:f8:13:64:8a:9e:5a:7b:ed:fd:d5:85:58:0f:f9: fb:a7:17:9e:27:8b:58:87:19:a6:6b:24:97:ad:cc:45:f3:dd: 0c:fd:a3:70:2d:65:bd:99:a1:7e:01:b7:15:19:af:8d:5b:61: 66:33:5a:38:82:12:23:34:5f:27:24:5c:55:7b:89:56:6d:a5: 12:6d:b4:6d:6e:49:2c:01:40:6f:e0:28:da:64:38:58:dc:f2: d1:1d:02:eb:9b:6d:84:1d:e1:4e:a3:70:76:4b:32:08:a0:d6: ea:9a:41:8b:72:ad:39:c9:db:10:2a:fc:42:e9:3c:ef:05:1e: 6e:c8:63:fe:cc:54:fd:f2:8a:b5:ce:ee:8b:f4:fe:b0:03:31: 8e:ab:82:70:7f:94:5d:ad:93:f4:8f:e5:d9:18:9b:c4:a3:8e: a0:f4:14:3b:7f:5e:00:11:85:c7:f8:9c:44:00:3a:c4:0b:d1: 41:8f:c2:a5:d6:dd:36:47:f3:be:6b:bf:b4:cf:cb:13:b2:67: 8c:26:ce:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pHRjm2LTbROWL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YTM5NWY0MDYtZjg3NS00OTI5LWIwMGItZjlmMzBmZGZkMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3roKvpb3Sbn1yWoF2QFUYpRlLgQdxdyd7L9 QKSrrhEEKA1x3BwpKKyDIbpgHmjT3/OqLHqrbMA/ZwHK9hCbXCEsEYdn3JSrplOA L4YVa6qeMZxwWTidH4Znv+r9dpoomRTteBmMVKLrdMWMW4srUUQ1E/yMoSoo2Ine wKXOC7/rNf0L3+N0fiajBhX4fR/CC1Gl/w2Gmn1+Dj6v1nAdi7c8qWrrikc27wMf mhcLK4QQ0DKOPVSCCpVDnTAygzo0H/nodQyjz9Bp8xZNOMDd4lX2TtC/qrfTh4uP TMYZh7/Z1IwRcaD9IzViTmofRvaeycWpiuRAJHZrUg8QQKntawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlqKyagQbfckExZhi9t1MVl4Ff7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWNkYWJjMDEtNzU4OS0z M2MzLWJmZTctNmFiOGVjZmQ3NzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBFFVS94Ft4U0Y9qmJf2BO/qVM4lxGJEQ9ASAV3KLCzcm4oL/UgQWNm c+n2y5WFAkVjQXmjaDDLYF/4E2SKnlp77f3VhVgP+funF54ni1iHGaZrJJetzEXz 3Qz9o3AtZb2ZoX4BtxUZr41bYWYzWjiCEiM0XyckXFV7iVZtpRJttG1uSSwBQG/g KNpkOFjc8tEdAuubbYQd4U6jcHZLMgig1uqaQYtyrTnJ2xAq/ELpPO8FHm7IY/7M VP3yirXO7ov0/rADMY6rgnB/lF2tk/SP5dkYm8SjjqD0FDt/XgARhcf4nEQAOsQL 0UGPwqXW3TZH875rv7TPyxOyZ4wmztQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:27:25 2025 by rpki-client