$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/444c752c-17be-3988-8d19-da817f43ea78.roa File: 444c752c-17be-3988-8d19-da817f43ea78.roa (raw, json) Hash identifier: 3b5ZK1UfFzmUE848TOqB4Uia3UeMOGLqwXiW2BCaCSE= Subject key identifier: 58:E8:97:CC:D6:CB:FC:9B:61:05:75:75:C3:CE:7E:68:57:46:47:9E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848D376576C961492EE93B67840 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/444c752c-17be-3988-8d19-da817f43ea78.roa Signing time: Sun 09 Feb 2025 14:00:51 +0000 ROA not before: Sun 09 Feb 2025 14:00:51 +0000 ROA not after: Sat 10 May 2025 13:00:51 +0000 asID: 53356 IP address blocks: 172.94.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d3:76:57:6c:96:14:92:ee:93:b6:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 9 14:00:51 2025 GMT Not After : May 10 13:00:51 2025 GMT Subject: CN=eaba9cf0-4aaf-47fb-bab5-f11847a5b965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:74:7e:cc:0e:cb:0a:4d:68:48:8d:8c:bb:ea: 9c:5c:4f:8e:41:7b:46:a0:4e:3e:bc:5c:bd:fe:55: 02:00:fb:6e:74:a6:a7:4e:59:f1:3d:01:9d:fc:c4: 9d:9d:db:1c:1b:26:48:4b:a5:a1:ff:6f:66:32:1b: 73:93:75:40:4d:b1:7b:83:ab:4c:97:29:6c:6d:38: 9a:c8:04:2f:39:3e:b7:4c:69:d3:f5:26:72:21:0d: 4b:2e:d9:1f:e7:71:f1:f0:66:57:77:9b:87:3c:ab: 14:fc:a8:39:1a:b1:4e:9e:1c:49:fe:fc:cf:f0:b8: e8:cc:f3:d0:8a:08:3f:36:39:a9:e3:07:01:9d:e5: cc:d8:9e:7b:4a:93:6d:c4:11:0a:ae:78:e6:08:6d: f0:2c:2e:91:e7:97:d0:1b:fa:ef:49:c6:5f:80:14: 81:bd:2c:09:55:cc:4a:f9:79:20:a3:91:d3:0c:3f: e5:4a:74:71:5e:be:62:ab:a5:3e:a8:16:31:4e:ee: e9:f3:7f:69:c1:e6:32:2d:30:6b:a6:82:db:25:c2: 18:a4:35:58:91:31:36:67:70:0e:23:9c:6e:9f:4f: 9a:98:a9:17:09:9a:37:db:ee:fe:53:4e:bb:35:16: 8f:8b:b8:d6:d4:61:1c:6a:48:c6:44:2a:f7:24:91: e2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E8:97:CC:D6:CB:FC:9B:61:05:75:75:C3:CE:7E:68:57:46:47:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/444c752c-17be-3988-8d19-da817f43ea78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:f9:65:63:dc:dc:5d:8c:28:1d:e1:8e:75:45:67:b2:94:37: 27:9e:f7:96:c8:9d:dd:82:93:d1:8f:05:f5:39:f4:71:0a:81: 82:69:40:e9:86:40:0a:92:8d:0d:d4:2c:60:4b:50:c6:8a:c3: 45:2e:f3:71:44:19:c5:06:33:e5:bf:cb:04:1e:28:d5:e0:6b: 49:dc:01:d8:c5:72:9b:30:4f:ff:3b:6d:68:95:bd:3b:0d:3d: bc:89:75:51:83:9c:91:1b:de:45:14:de:70:cd:44:2d:41:be: 44:39:d1:3f:b6:1b:dc:e3:37:b1:9c:da:57:23:bb:b9:5a:b2: c7:29:8f:23:e4:11:55:5c:ab:de:25:67:c0:9e:62:da:f7:d4: ab:07:be:18:c3:4b:56:c3:0e:a2:c0:1e:2d:f1:24:fc:be:8d: e0:89:cf:30:af:dc:6d:11:99:04:39:07:1a:9a:7d:a8:29:db: 94:71:23:d7:32:f6:c9:26:d7:66:4f:d6:7b:6b:c3:d4:73:fc: f1:1d:5f:92:94:5c:bc:1a:df:06:b3:df:b2:ef:6a:5e:f1:e8: b4:48:42:08:22:06:84:38:25:38:10:be:ab:e7:e3:bf:ea:3b: d8:40:cb:29:0a:34:0b:e3:4a:a0:00:a9:f5:0a:a2:2e:54:a3: 51:f4:86:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjTdldslhSS7pO2eEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk ZWFiYTljZjAtNGFhZi00N2ZiLWJhYjUtZjExODQ3YTViOTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3R+zA7LCk1oSI2Mu+qcXE+OQXtGoE4+vFy9 /lUCAPtudKanTlnxPQGd/MSdndscGyZIS6Wh/29mMhtzk3VATbF7g6tMlylsbTia yAQvOT63TGnT9SZyIQ1LLtkf53Hx8GZXd5uHPKsU/Kg5GrFOnhxJ/vzP8LjozPPQ igg/Njmp4wcBneXM2J57SpNtxBEKrnjmCG3wLC6R55fQG/rvScZfgBSBvSwJVcxK +Xkgo5HTDD/lSnRxXr5iq6U+qBYxTu7p839pweYyLTBrpoLbJcIYpDVYkTE2Z3AO I5xun0+amKkXCZo32+7+U067NRaPi7jW1GEcakjGRCr3JJHiwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjol8zWy/ybYQV1dcPOfmhXRkeeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDQ0Yzc1MmMtMTdiZS0z OTg4LThkMTktZGE4MTdmNDNlYTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADD5ZWPc3F2MKB3hjnVFZ7KUNyee95bInd2Ck9GPBfU59HEKgYJpQOmG QAqSjQ3ULGBLUMaKw0Uu83FEGcUGM+W/ywQeKNXga0ncAdjFcpswT/87bWiVvTsN PbyJdVGDnJEb3kUU3nDNRC1BvkQ50T+2G9zjN7Gc2lcju7lasscpjyPkEVVcq94l Z8CeYtr31KsHvhjDS1bDDqLAHi3xJPy+jeCJzzCv3G0RmQQ5Bxqafagp25RxI9cy 9skm12ZP1ntrw9Rz/PEdX5KUXLwa3waz37Lval7x6LRIQggiBoQ4JTgQvqvn47/q O9hAyykKNAvjSqAAqfUKoi5Uo1H0hjc= -----END CERTIFICATE-----Generated at Sat Apr 26 20:00:04 2025 by rpki-client