$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e6ff693-73d2-3f96-8db3-7727cb7e12d8.roa File: 1e6ff693-73d2-3f96-8db3-7727cb7e12d8.roa (raw, json) Hash identifier: Tx6aWPD4oTFPdMw2j4so6zXoesGvfDAZfJHq/Kj22Sg= Subject key identifier: 78:56:28:CE:D4:4E:12:E1:F5:CF:96:D7:82:2F:B8:9F:17:43:05:7A Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584944693FDFA4683E527846F6C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e6ff693-73d2-3f96-8db3-7727cb7e12d8.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 9009 IP address blocks: 172.94.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:3f:df:a4:68:3e:52:78:46:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=baca7e04-a7d5-46ed-8353-4e5743afa892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:14:7c:a8:e2:f8:e5:9a:50:d8:e4:91:a2:df: ee:4a:c2:3e:a3:c4:26:58:d4:32:b0:40:7a:eb:bf: a5:63:c8:7e:24:5e:4d:4b:b9:6a:6e:1e:ff:da:f1: 76:93:22:57:83:b2:25:90:a3:14:0c:9f:1a:8e:ac: 48:e4:a1:cc:67:1d:b3:a0:75:d7:a7:90:f1:d1:54: d3:82:b1:5b:47:dd:d3:af:48:7f:c5:ad:00:b6:39: 62:01:fd:1c:d5:4c:be:79:ac:82:2a:2c:06:64:dd: 93:d4:51:f6:a9:96:c9:02:2e:9b:44:41:7d:ae:5f: 54:0f:90:e2:7c:30:21:35:07:36:13:45:a0:1c:e1: 50:b5:2f:b8:99:34:59:52:43:86:77:72:fb:7d:26: 28:c7:22:68:6e:ab:94:8d:4a:75:df:78:39:22:75: a9:8c:c8:4c:1c:39:33:f6:66:0a:15:57:a5:51:51: eb:d7:2a:1c:e8:4a:44:34:1b:ed:26:fb:85:97:a2: 32:7c:1a:f1:29:60:1a:7b:8a:90:32:18:f9:14:1b: 96:ac:70:15:d1:a8:65:a2:62:4b:e3:f2:63:97:a4: 81:d4:e8:9a:9f:d7:c0:fd:eb:a9:3c:80:c5:a4:db: 71:55:68:36:fb:4d:a2:f1:36:83:ea:ef:25:42:f9: f7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:56:28:CE:D4:4E:12:E1:F5:CF:96:D7:82:2F:B8:9F:17:43:05:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e6ff693-73d2-3f96-8db3-7727cb7e12d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c8:a8:bb:ee:54:4d:07:9d:a0:8d:2a:b7:a8:96:2b:06:4f: 75:a5:38:22:74:c5:78:d4:4a:e6:7f:04:41:90:9c:5e:a9:67: 03:0e:eb:4f:cf:8e:f1:3a:82:5a:f1:69:a0:f4:2e:3c:a7:ba: 8c:0a:cd:85:ba:46:55:70:16:9b:12:02:f2:bf:86:b2:db:93: 3a:49:60:47:e1:67:42:ea:5e:8a:00:b2:65:7a:19:0d:a7:bf: d3:05:6f:56:4c:e2:22:48:e8:0e:0b:8e:1f:f3:86:94:58:7b: f3:20:78:6b:e5:dc:8d:93:2c:cc:62:48:96:86:d4:10:56:71: 33:86:54:12:c2:35:f6:15:e2:36:b6:08:c6:8a:a8:0c:30:6c: c2:76:0c:5b:07:a5:e6:62:d2:13:6b:99:80:87:b6:63:9c:f3: 0d:68:d2:43:dc:b3:5e:da:8a:91:c3:0e:fb:46:d1:03:30:99: 86:61:fd:d5:4a:07:8c:54:63:1f:a5:db:37:91:47:c4:31:56: 24:b9:08:a6:c6:46:e2:ac:71:7f:8b:6a:a4:c1:1c:29:dc:b9: 72:5b:b2:67:10:9e:b4:a7:35:05:26:67:85:dc:46:3b:78:b8: 3e:0a:bf:af:f9:ff:e9:5a:03:d8:d9:a1:85:e9:10:09:df:77: 58:68:b0:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaT/fpGg+UnhG9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk YmFjYTdlMDQtYTdkNS00NmVkLTgzNTMtNGU1NzQzYWZhODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRR8qOL45ZpQ2OSRot/uSsI+o8QmWNQysEB6 67+lY8h+JF5NS7lqbh7/2vF2kyJXg7IlkKMUDJ8ajqxI5KHMZx2zoHXXp5Dx0VTT grFbR93Tr0h/xa0AtjliAf0c1Uy+eayCKiwGZN2T1FH2qZbJAi6bREF9rl9UD5Di fDAhNQc2E0WgHOFQtS+4mTRZUkOGd3L7fSYoxyJobquUjUp133g5InWpjMhMHDkz 9mYKFVelUVHr1yoc6EpENBvtJvuFl6IyfBrxKWAae4qQMhj5FBuWrHAV0ahlomJL 4/Jjl6SB1Oian9fA/eupPIDFpNtxVWg2+02i8TaD6u8lQvn30wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhWKM7UThLh9c+W14IvuJ8XQwV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWU2ZmY2OTMtNzNkMi0z Zjk2LThkYjMtNzcyN2NiN2UxMmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITIqLvuVE0HnaCNKreolisGT3WlOCJ0xXjUSuZ/BEGQnF6pZwMO60/P jvE6glrxaaD0LjynuowKzYW6RlVwFpsSAvK/hrLbkzpJYEfhZ0LqXooAsmV6GQ2n v9MFb1ZM4iJI6A4Ljh/zhpRYe/MgeGvl3I2TLMxiSJaG1BBWcTOGVBLCNfYV4ja2 CMaKqAwwbMJ2DFsHpeZi0hNrmYCHtmOc8w1o0kPcs17aipHDDvtG0QMwmYZh/dVK B4xUYx+l2zeRR8QxViS5CKbGRuKscX+LaqTBHCncuXJbsmcQnrSnNQUmZ4XcRjt4 uD4Kv6/5/+laA9jZoYXpEAnfd1hosL0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:15:53 2025 by rpki-client