$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4fe0e1b4-eebf-3f46-841b-7291bad1d6f0.roa File: 4fe0e1b4-eebf-3f46-841b-7291bad1d6f0.roa (raw, json) Hash identifier: T7HGfFb7m+XI/aSSQ1DkRy8Jp3iVSjiiF4oHRe1t5Pw= Subject key identifier: D4:92:04:52:62:87:F9:79:58:F0:89:C6:A4:CC:48:A4:B7:DB:B7:F0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848D376579CDBD849C51CD11D00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4fe0e1b4-eebf-3f46-841b-7291bad1d6f0.roa Signing time: Sun 09 Feb 2025 14:00:51 +0000 ROA not before: Sun 09 Feb 2025 14:00:51 +0000 ROA not after: Sat 10 May 2025 13:00:51 +0000 asID: 53356 IP address blocks: 172.94.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d3:76:57:9c:db:d8:49:c5:1c:d1:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 9 14:00:51 2025 GMT Not After : May 10 13:00:51 2025 GMT Subject: CN=d2aa605a-486a-4b83-aef1-be2ae592f12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:05:db:57:de:9c:db:f2:de:bf:49:75:4c:5c: 43:ba:0c:64:4d:d2:10:41:81:59:c7:42:41:5b:0e: 66:01:5c:23:cd:5b:cd:3a:b1:5f:fe:bd:61:c0:55: 2b:ee:97:16:96:18:65:53:ef:d3:f5:36:36:4d:89: 5d:f1:26:16:09:86:16:2a:62:ae:ad:9f:fc:97:e2: 71:33:c0:79:f4:c2:d1:38:27:8c:5b:8d:4f:96:5c: 93:40:de:28:3f:7d:a6:50:41:db:60:9a:a9:ef:8a: 3e:44:05:ad:a5:e0:98:e9:c7:ac:38:da:4f:f6:a2: a8:40:e2:58:5e:e9:5c:84:1e:7f:75:a5:86:47:e6: d8:20:a9:28:e7:2f:46:2c:eb:a6:93:44:b4:77:3f: 45:52:6d:74:e2:6e:8a:af:d7:48:74:0c:bf:6f:3a: ac:5a:d9:7f:58:25:db:b9:a7:7a:6c:b8:e4:e5:c4: 47:4e:e9:86:33:d5:1b:96:14:60:82:31:d6:9d:4b: 49:21:a0:4d:78:46:c5:31:f5:84:c5:41:37:e4:30: c0:b2:c8:a0:c4:22:68:d9:44:25:6c:1d:84:1d:bd: 45:f1:57:73:6f:3f:f3:d2:b2:a6:60:44:88:62:a6: a9:5f:c3:a1:67:58:21:5d:de:40:75:f0:3d:da:25: b2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:92:04:52:62:87:F9:79:58:F0:89:C6:A4:CC:48:A4:B7:DB:B7:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4fe0e1b4-eebf-3f46-841b-7291bad1d6f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:37:9d:2c:ce:a0:47:53:ea:4d:82:d9:43:4e:aa:a6:41:b1: cf:70:47:94:46:4b:67:6d:0e:ec:57:98:f7:a2:d6:ba:e8:49: 13:9d:9d:86:a2:77:0d:e6:4d:25:e9:b7:ec:7e:05:6b:c2:df: ab:c8:31:62:3b:ed:18:6f:9c:98:b0:35:55:bb:4f:98:c6:11: ed:55:06:b2:f4:0a:c9:9a:1d:02:ed:79:e9:65:f7:b1:f0:74: f5:08:a3:97:57:f0:e0:44:8a:82:6b:03:51:ef:a4:e1:1f:6e: 04:23:a1:5e:09:b4:87:a9:19:d6:1c:d4:34:d2:e4:87:10:f1: d7:28:8c:55:33:c0:df:2e:9a:5c:c0:d4:83:29:86:35:43:38: 33:8d:c3:40:c9:68:b1:5e:92:e8:cd:48:58:a1:65:da:b8:6b: de:12:d8:9a:e0:39:33:c7:5d:ad:89:9c:44:fa:5f:eb:ed:70: 09:d2:65:a6:b0:f3:ef:45:1a:8f:41:44:ac:c7:9c:e0:24:28: e3:61:b7:fb:77:8c:49:98:bc:82:12:7a:19:6e:df:5f:ab:82: 1e:e9:25:01:b3:12:df:11:c7:96:0d:40:5b:39:b1:24:fe:73: 1a:20:d2:82:37:5b:c8:c7:20:06:33:28:96:d3:13:74:b6:e3: c2:85:30:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjTdlec29hJxRzRHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk ZDJhYTYwNWEtNDg2YS00YjgzLWFlZjEtYmUyYWU1OTJmMTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAXbV96c2/Lev0l1TFxDugxkTdIQQYFZx0JB Ww5mAVwjzVvNOrFf/r1hwFUr7pcWlhhlU+/T9TY2TYld8SYWCYYWKmKurZ/8l+Jx M8B59MLROCeMW41PllyTQN4oP32mUEHbYJqp74o+RAWtpeCY6cesONpP9qKoQOJY XulchB5/daWGR+bYIKko5y9GLOumk0S0dz9FUm104m6Kr9dIdAy/bzqsWtl/WCXb uad6bLjk5cRHTumGM9UblhRggjHWnUtJIaBNeEbFMfWExUE35DDAssigxCJo2UQl bB2EHb1F8Vdzbz/z0rKmYESIYqapX8OhZ1ghXd5AdfA92iWyqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSSBFJih/l5WPCJxqTMSKS327fwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGZlMGUxYjQtZWViZi0z ZjQ2LTg0MWItNzI5MWJhZDFkNmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACo3nSzOoEdT6k2C2UNOqqZBsc9wR5RGS2dtDuxXmPei1rroSROdnYai dw3mTSXpt+x+BWvC36vIMWI77RhvnJiwNVW7T5jGEe1VBrL0CsmaHQLteell97Hw dPUIo5dX8OBEioJrA1HvpOEfbgQjoV4JtIepGdYc1DTS5IcQ8dcojFUzwN8umlzA 1IMphjVDODONw0DJaLFekujNSFihZdq4a94S2JrgOTPHXa2JnET6X+vtcAnSZaaw 8+9FGo9BRKzHnOAkKONht/t3jEmYvIISehlu31+rgh7pJQGzEt8Rx5YNQFs5sST+ cxog0oI3W8jHIAYzKJbTE3S248KFMPk= -----END CERTIFICATE-----Generated at Sat Apr 26 20:59:55 2025 by rpki-client