$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4e14254d-55fc-35e4-8793-8e34aa78e99e.roa File: 4e14254d-55fc-35e4-8793-8e34aa78e99e.roa (raw, json) Hash identifier: h/EPnCZGHfsO2U/BHcvqJnH5MJm5ZreFyLtV3bGiNfY= Subject key identifier: C1:3B:B1:D6:A2:6D:B2:D8:29:C2:08:9D:F1:B1:75:A7:E8:39:E4:3B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858494733ECA701DC638CADDC8128 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4e14254d-55fc-35e4-8793-8e34aa78e99e.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 212238 IP address blocks: 172.94.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:ec:a7:01:dc:63:8c:ad:dc:81:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=401c8d02-ed0b-4cdd-8825-5d95d7fd333b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:db:cc:d6:b4:9c:8f:a2:b8:16:f8:14:8e:db: 21:79:45:de:7a:e7:18:d6:4a:04:19:ab:54:cb:be: 9f:57:8b:cb:c3:8c:54:fd:c9:b5:99:7e:4f:cb:45: cb:21:91:74:6c:a9:3e:d5:90:3c:b9:4b:e3:77:7b: 24:66:97:57:a3:14:b9:ad:12:18:94:d4:d5:5e:91: cb:93:d4:2f:73:0e:39:7a:54:85:7d:4c:a9:48:a1: 42:26:6d:31:d9:7e:83:79:50:0f:38:4e:bc:a1:93: cc:dc:59:71:49:dc:dd:fb:b6:2d:f1:38:22:c0:4a: 6d:ee:18:9d:49:1e:cb:86:2e:50:15:8d:71:50:d1: 26:94:08:c6:69:90:32:14:23:25:03:b3:bb:a7:b7: 57:a6:76:09:0a:3e:0b:ab:0f:9a:08:57:14:9a:84: 7c:5d:8c:37:ce:54:c0:01:14:89:e1:39:67:7c:85: 61:6d:ff:98:b7:dd:9c:79:a4:2c:31:cf:46:92:56: 6c:55:c3:d2:cd:0a:20:1f:c2:79:df:b5:eb:c9:98: bd:19:93:5f:0c:06:16:d3:d6:0c:75:83:f3:88:b6: 30:3d:98:46:5c:25:4d:77:8a:e3:a7:c3:2d:a2:a7: d5:76:aa:0a:47:57:01:bb:24:46:42:04:ca:85:84: 46:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3B:B1:D6:A2:6D:B2:D8:29:C2:08:9D:F1:B1:75:A7:E8:39:E4:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4e14254d-55fc-35e4-8793-8e34aa78e99e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:31:0d:18:e1:14:c9:aa:c2:e5:aa:66:8d:24:e5:17:42:1a: 13:67:3e:c2:2c:ab:12:c0:df:ad:8e:83:db:4e:86:1f:7a:1b: 93:0a:af:41:38:52:cd:1e:a9:18:5f:3e:55:d3:fc:f7:80:2a: 36:ec:42:72:ef:a7:66:07:42:78:72:21:37:ce:47:78:8a:60: 34:77:41:26:7f:cc:66:2c:5b:09:c9:d8:96:62:9a:0f:b5:f4: 0b:ee:35:78:f3:ed:4e:fe:58:e0:05:4b:46:24:25:bc:7d:9d: 0a:73:c8:25:0e:db:71:a8:b0:b1:bf:d4:f2:20:97:14:d2:bb: db:8e:d0:14:90:b3:b6:77:9f:01:50:a7:b1:e5:3c:12:b0:ba: b7:ce:a4:8b:24:12:3c:2d:7e:ec:c4:8f:58:5d:18:ca:3b:de: 3f:2e:f8:86:f3:88:6d:9e:32:8c:04:0b:9c:8d:7c:59:6d:1a: d3:f1:08:7e:32:a6:e1:15:04:f4:bb:99:00:b6:5b:5d:87:40: 83:64:fe:62:30:fd:6f:be:19:6a:15:5f:77:93:96:53:10:63: 98:01:c2:b4:ac:17:13:1e:5f:9c:f8:64:f6:c0:2a:ad:01:f8: bc:8e:59:6c:3a:86:3f:6f:b9:2b:c9:8a:dd:4e:e2:2b:fb:2e: c2:a1:f5:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+ynAdxjjK3cgSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk NDAxYzhkMDItZWQwYi00Y2RkLTg4MjUtNWQ5NWQ3ZmQzMzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtvM1rScj6K4FvgUjtsheUXeeucY1koEGatU y76fV4vLw4xU/cm1mX5Py0XLIZF0bKk+1ZA8uUvjd3skZpdXoxS5rRIYlNTVXpHL k9Qvcw45elSFfUypSKFCJm0x2X6DeVAPOE68oZPM3FlxSdzd+7Yt8TgiwEpt7hid SR7Lhi5QFY1xUNEmlAjGaZAyFCMlA7O7p7dXpnYJCj4Lqw+aCFcUmoR8XYw3zlTA ARSJ4TlnfIVhbf+Yt92ceaQsMc9GklZsVcPSzQogH8J537XryZi9GZNfDAYW09YM dYPziLYwPZhGXCVNd4rjp8MtoqfVdqoKR1cBuyRGQgTKhYRGlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFME7sdaibbLYKcIInfGxdafoOeQ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGUxNDI1NGQtNTVmYy0z NWU0LTg3OTMtOGUzNGFhNzhlOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYxDRjhFMmqwuWqZo0k5RdCGhNnPsIsqxLA362Og9tOhh96G5MKr0E4 Us0eqRhfPlXT/PeAKjbsQnLvp2YHQnhyITfOR3iKYDR3QSZ/zGYsWwnJ2JZimg+1 9AvuNXjz7U7+WOAFS0YkJbx9nQpzyCUO23GosLG/1PIglxTSu9uO0BSQs7Z3nwFQ p7HlPBKwurfOpIskEjwtfuzEj1hdGMo73j8u+IbziG2eMowEC5yNfFltGtPxCH4y puEVBPS7mQC2W12HQINk/mIw/W++GWoVX3eTllMQY5gBwrSsFxMeX5z4ZPbAKq0B +LyOWWw6hj9vuSvJit1O4iv7LsKh9SQ= -----END CERTIFICATE-----Generated at Sat Apr 26 14:55:37 2025 by rpki-client