$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa File: 5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa (raw, json) Hash identifier: DWceSPNIPs3yxCx3J8TM2wScGyxS+TEpZ9VxXQZBjfQ= Subject key identifier: B9:07:01:B4:81:61:5E:91:0C:3B:86:DB:F8:E7:40:05:A7:4F:7B:59 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858494733EC893781C45FCF48A500 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 212238 IP address blocks: 172.94.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:ec:89:37:81:c4:5f:cf:48:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=451e8a03-87e7-4ef7-b244-6060ec30e91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:88:c1:4a:36:3a:31:2e:a9:7b:db:b4:74:e7: 82:54:13:83:fe:97:b7:b8:f2:44:f6:58:4c:d6:7b: fd:14:a8:39:14:20:79:c9:ab:33:eb:82:48:c3:e8: ae:46:9d:e8:e6:ae:d3:de:74:9d:01:99:68:78:95: 59:0e:09:5e:6d:0e:be:5a:80:08:92:f3:7a:81:72: 53:38:89:de:e7:87:40:89:72:48:01:2a:10:4f:8e: 23:19:98:c5:86:f9:f3:06:77:4b:32:fd:8c:c5:a4: 1d:02:0a:4a:7d:f6:8d:0e:e3:b3:36:72:05:be:c2: 16:48:d5:f2:02:86:7d:ce:ce:2f:48:6d:d4:28:22: 64:81:80:aa:04:bf:9f:fa:9a:31:83:14:39:6d:46: 9a:f4:85:87:a9:2d:68:0d:10:dd:9e:9a:18:92:3c: b3:dc:b8:df:81:3e:43:01:93:e6:6d:51:47:0e:96: 02:d0:ec:36:6f:a4:1d:23:1c:ee:f4:8d:7b:2f:e4: ad:49:47:b0:de:2c:93:b4:49:e7:76:f9:03:97:11: 62:40:89:73:ef:49:5a:59:d2:c6:b6:50:39:85:e3: 03:70:4c:4a:71:51:c1:0d:30:20:83:1d:c4:d4:da: 3c:76:08:46:3e:0f:76:df:d4:0e:3b:63:af:0a:bd: a5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:07:01:B4:81:61:5E:91:0C:3B:86:DB:F8:E7:40:05:A7:4F:7B:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5ca571b1-4907-324c-8104-bed6cc0fdfbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:19:55:db:92:0c:62:dd:da:ec:3f:d9:73:a2:ae:f9:12:78: e7:18:92:46:1c:d2:d3:3d:58:3b:02:a9:2d:7d:af:ed:6f:dd: 5f:cb:9e:c2:e1:5b:34:4f:c8:17:d5:11:19:6c:b0:20:5a:58: 0d:88:96:72:b0:c5:bd:07:2f:20:f3:9f:f6:38:af:52:c6:2c: 2e:cd:65:1e:f0:c4:e6:55:94:9e:e7:27:53:2b:1b:f4:07:97: c8:9e:37:09:42:99:71:ac:64:1f:33:29:8d:83:b6:a3:75:96: cf:cc:20:43:d7:60:ce:87:ae:10:6f:2f:cb:b7:fa:ef:95:60: 1d:ed:07:f0:83:fb:49:20:2c:f1:94:e3:9f:f7:8d:13:d0:77: 76:85:ab:c3:cf:98:22:b9:d7:e9:d0:2b:49:34:33:19:95:38: 79:3a:35:c7:1a:61:50:9a:72:44:0a:eb:40:aa:dd:d8:7a:56: ba:0f:9f:28:91:79:a2:9f:41:41:0e:88:09:5c:66:96:09:28: 7a:66:cc:30:90:ca:8d:5a:85:c2:18:f7:90:04:fc:7f:82:c9: 72:6d:27:38:9f:cf:d1:b8:cc:0d:34:e7:2c:be:9f:3f:24:e8: 89:8c:55:f5:79:02:63:ff:87:f7:64:eb:7e:9f:c3:37:c7:e5: 6e:cd:bb:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+yJN4HEX89IpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk NDUxZThhMDMtODdlNy00ZWY3LWIyNDQtNjA2MGVjMzBlOTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYjBSjY6MS6pe9u0dOeCVBOD/pe3uPJE9lhM 1nv9FKg5FCB5yasz64JIw+iuRp3o5q7T3nSdAZloeJVZDglebQ6+WoAIkvN6gXJT OIne54dAiXJIASoQT44jGZjFhvnzBndLMv2MxaQdAgpKffaNDuOzNnIFvsIWSNXy AoZ9zs4vSG3UKCJkgYCqBL+f+poxgxQ5bUaa9IWHqS1oDRDdnpoYkjyz3LjfgT5D AZPmbVFHDpYC0Ow2b6QdIxzu9I17L+StSUew3iyTtEnndvkDlxFiQIlz70laWdLG tlA5heMDcExKcVHBDTAggx3E1No8dghGPg9239QOO2OvCr2lEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkHAbSBYV6RDDuG2/jnQAWnT3tZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNWNhNTcxYjEtNDkwNy0z MjRjLTgxMDQtYmVkNmNjMGZkZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAZVduSDGLd2uw/2XOirvkSeOcYkkYc0tM9WDsCqS19r+1v3V/LnsLh WzRPyBfVERlssCBaWA2IlnKwxb0HLyDzn/Y4r1LGLC7NZR7wxOZVlJ7nJ1MrG/QH l8ieNwlCmXGsZB8zKY2DtqN1ls/MIEPXYM6HrhBvL8u3+u+VYB3tB/CD+0kgLPGU 45/3jRPQd3aFq8PPmCK51+nQK0k0MxmVOHk6NccaYVCackQK60Cq3dh6VroPnyiR eaKfQUEOiAlcZpYJKHpmzDCQyo1ahcIY95AE/H+CyXJtJzifz9G4zA005yy+nz8k 6ImMVfV5AmP/h/dk636fwzfH5W7Nu2I= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:42 2025 by rpki-client