$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5409c5cd-2c89-3be0-a0be-b78de6f87761.roa File: 5409c5cd-2c89-3be0-a0be-b78de6f87761.roa (raw, json) Hash identifier: /52jTrfZx05OdIYyL+ffRsgoZevkjwTUq2DAB8372mo= Subject key identifier: 12:44:ED:F9:D0:D1:46:BB:BC:59:E1:91:85:C0:91:3A:D6:B8:C8:43 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848D3765755D2700D1A9E8126C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5409c5cd-2c89-3be0-a0be-b78de6f87761.roa Signing time: Sun 09 Feb 2025 14:00:51 +0000 ROA not before: Sun 09 Feb 2025 14:00:51 +0000 ROA not after: Sat 10 May 2025 13:00:51 +0000 asID: 53356 IP address blocks: 172.94.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d3:76:57:55:d2:70:0d:1a:9e:81:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 9 14:00:51 2025 GMT Not After : May 10 13:00:51 2025 GMT Subject: CN=bc08ff02-aa9c-4b3c-860a-da0f611228c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2a:39:2a:9b:9b:a9:e2:76:19:a7:63:31:e3: 78:d7:c5:b5:fe:6b:07:e0:1a:81:12:73:be:1f:c6: f1:71:fe:1e:98:e0:60:99:35:a9:d6:e5:cf:8c:45: f9:3a:72:f7:51:9b:94:a6:f7:d2:6c:08:6a:5b:ce: 97:7c:01:82:99:e0:97:b7:74:8b:83:31:be:11:b2: 48:d3:17:b9:d2:11:82:45:07:0f:bf:5b:41:94:71: 16:d4:3d:4d:7e:17:4a:bf:79:df:f7:1d:b6:91:41: 5e:08:82:9f:05:4a:04:75:51:3d:22:18:cd:e6:52: 1b:b0:53:02:73:18:0e:e3:c1:87:4a:42:79:e8:01: a6:4f:7b:d8:a6:24:e5:cf:f7:71:9a:61:ed:c6:ad: 46:9f:67:39:63:88:01:cb:2d:f9:80:74:86:b6:16: 8e:d5:b1:50:7f:5c:72:6d:44:b6:a6:7c:3b:92:4f: a0:80:b5:7b:6b:89:fc:49:73:b5:ab:00:27:6d:4e: e8:47:77:e4:20:1b:5b:46:9e:50:fb:e9:35:63:09: 0c:e4:35:dc:fd:74:1a:4b:79:80:80:45:2b:a4:a7: 1a:77:27:93:df:56:58:4a:a6:5c:4c:69:25:fa:5a: c9:91:d2:71:7a:41:e1:4a:73:f1:48:cb:ec:8b:35: 7b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:44:ED:F9:D0:D1:46:BB:BC:59:E1:91:85:C0:91:3A:D6:B8:C8:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5409c5cd-2c89-3be0-a0be-b78de6f87761.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:fa:b0:51:1d:ca:37:ee:5b:21:03:ef:04:df:72:c1:19:70: 38:78:8d:8b:8a:e1:45:53:36:c6:1a:67:56:81:70:08:77:52: 41:10:72:04:75:ed:a7:fc:ce:bc:f6:0d:55:f5:bd:67:f5:d4: 04:d3:a0:5d:1c:1e:6d:f5:33:f2:e3:42:9b:a9:69:88:96:c7: 22:ce:a1:04:72:ce:60:e9:47:9d:fd:45:3a:4e:56:27:cf:4e: ec:c3:56:62:a6:04:1c:2b:c8:5e:b4:c3:b5:0b:d1:0d:68:50: 2a:d8:89:4a:cd:75:01:b7:12:25:a4:5b:8b:cf:bb:26:67:4c: c1:d7:58:6c:b1:5f:6b:45:03:89:cf:d9:d4:de:05:bc:40:c5: 1f:a8:bd:d1:00:19:e9:c2:df:64:f5:b8:37:b5:d7:44:8c:4a: d1:bd:ab:75:99:5f:48:4a:0c:f0:f7:14:18:f3:38:e5:15:2a: f1:cc:3b:fd:9c:ed:43:2b:ec:8d:8b:0e:4e:25:53:5c:dd:9e: 1d:ee:b8:a3:39:94:c9:63:f4:90:42:af:03:d1:30:2f:8a:2a: 8b:09:27:3b:6b:78:cb:6c:03:ae:51:56:12:36:c8:bd:46:26: 2f:0d:a7:28:e4:d9:0f:e7:1f:3d:c0:cd:8f:97:6f:a8:51:ef: c3:74:bd:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjTdldV0nANGp6BJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk YmMwOGZmMDItYWE5Yy00YjNjLTg2MGEtZGEwZjYxMTIyOGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3io5KpubqeJ2GadjMeN418W1/msH4BqBEnO+ H8bxcf4emOBgmTWp1uXPjEX5OnL3UZuUpvfSbAhqW86XfAGCmeCXt3SLgzG+EbJI 0xe50hGCRQcPv1tBlHEW1D1NfhdKv3nf9x22kUFeCIKfBUoEdVE9IhjN5lIbsFMC cxgO48GHSkJ56AGmT3vYpiTlz/dxmmHtxq1Gn2c5Y4gByy35gHSGthaO1bFQf1xy bUS2pnw7kk+ggLV7a4n8SXO1qwAnbU7oR3fkIBtbRp5Q++k1YwkM5DXc/XQaS3mA gEUrpKcadyeT31ZYSqZcTGkl+lrJkdJxekHhSnPxSMvsizV7hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJE7fnQ0Ua7vFnhkYXAkTrWuMhDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTQwOWM1Y2QtMmM4OS0z YmUwLWEwYmUtYjc4ZGU2Zjg3NzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABX6sFEdyjfuWyED7wTfcsEZcDh4jYuK4UVTNsYaZ1aBcAh3UkEQcgR1 7af8zrz2DVX1vWf11ATToF0cHm31M/LjQpupaYiWxyLOoQRyzmDpR539RTpOVifP TuzDVmKmBBwryF60w7UL0Q1oUCrYiUrNdQG3EiWkW4vPuyZnTMHXWGyxX2tFA4nP 2dTeBbxAxR+ovdEAGenC32T1uDe110SMStG9q3WZX0hKDPD3FBjzOOUVKvHMO/2c 7UMr7I2LDk4lU1zdnh3uuKM5lMlj9JBCrwPRMC+KKosJJztreMtsA65RVhI2yL1G Ji8Npyjk2Q/nHz3AzY+Xb6hR78N0vQA= -----END CERTIFICATE-----Generated at Sat Apr 26 19:56:57 2025 by rpki-client