$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6bc6d89e-dfb8-3c5a-b3ec-b958b89fded6.roa File: 6bc6d89e-dfb8-3c5a-b3ec-b958b89fded6.roa (raw, json) Hash identifier: DLbLsFPv4ETWpo6hOhBsqv0QvqUJNH2t7LEyl+boE8M= Subject key identifier: F9:80:B5:DA:2B:A2:04:5D:B1:5F:79:C9:E0:A6:75:8C:5E:45:1E:99 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849A1EF69917B76586B3C986B00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6bc6d89e-dfb8-3c5a-b3ec-b958b89fded6.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 43260 IP address blocks: 172.94.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:69:91:7b:76:58:6b:3c:98:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=4fbaea7b-807c-4c66-9bbd-fa3e800ed11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:5a:2c:d3:77:38:c3:0d:ad:7a:af:47:c1: d5:90:00:7d:ce:ea:42:b4:47:bf:10:52:84:47:85: a4:07:af:4e:bc:78:c6:3d:d0:ac:c1:a9:28:7e:78: e5:80:64:28:c3:17:3a:9a:74:5b:22:e7:6f:a3:e9: db:50:dd:a8:1d:7e:6c:5c:d0:f9:7d:8c:2b:3e:6f: cd:0f:8f:d3:54:10:9a:55:4a:6e:a2:7f:8a:d2:90: e7:95:40:35:05:5b:d9:48:9c:46:c1:6b:d7:dd:a2: f9:6a:f8:0b:76:35:ce:1b:e6:a2:cc:b0:dc:dc:91: b0:92:46:04:61:81:86:96:54:06:06:06:6d:f4:44: 29:5e:14:1f:34:81:e6:d3:3f:00:76:40:e9:46:cb: f7:0e:0c:a6:18:db:72:c6:db:18:03:65:af:b6:75: ce:ab:f0:1c:e7:8e:d7:68:96:d1:68:84:a8:be:82: 0b:78:69:57:ac:5d:ad:19:00:75:5e:1a:f9:31:0b: d1:e1:d1:15:42:75:9b:69:49:c7:37:c6:ef:ed:96: 30:fe:e2:89:1d:77:36:e0:f7:8d:c2:69:be:88:6a: 46:86:c4:87:c9:63:58:4d:3b:e8:0d:68:97:5f:ab: 6e:08:2c:35:b3:58:8f:a5:cf:4b:98:61:43:29:08: a4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:80:B5:DA:2B:A2:04:5D:B1:5F:79:C9:E0:A6:75:8C:5E:45:1E:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/6bc6d89e-dfb8-3c5a-b3ec-b958b89fded6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:cb:b3:06:dc:d9:64:70:fb:83:ff:f3:73:83:7a:2c:1d:be: 16:f9:aa:35:11:b5:8f:5e:c4:93:4b:a9:00:94:0b:50:78:46: 1a:8b:8d:ec:d6:58:5f:07:dc:1d:cc:f1:c2:8d:ea:97:1e:35: 8e:0a:c0:2a:c5:fa:37:fc:19:4c:b2:f3:f0:91:85:1b:af:43: 0a:d5:9b:5d:f0:64:11:0a:96:a5:5d:57:bb:ec:d5:38:11:b2: c9:2c:1a:8a:ca:b5:57:d4:c1:c4:02:ea:66:03:29:00:18:cb: e4:f4:72:05:90:78:e5:82:93:88:7c:5f:b5:42:05:c3:60:48: 30:56:dd:71:51:5f:a6:33:2a:e6:b1:66:7a:2f:3a:6f:a5:e9: a7:2e:55:16:7b:42:6e:b0:82:eb:c5:41:7f:44:6b:7c:6c:d1: f2:1b:c8:ba:ce:a3:09:be:e7:41:4a:0d:ac:aa:e2:6f:9a:48: 4c:bc:93:20:12:66:ae:70:74:be:e9:57:10:4c:95:bd:71:90: 50:03:3a:8b:e8:ab:97:e3:ce:5a:20:ae:6d:f3:8e:fa:45:a2: 4a:b0:e1:2f:cb:7f:c5:3f:de:23:1c:bc:a9:cc:50:b1:c8:b4: bb:d3:ef:3a:b9:1e:ad:f6:74:62:7d:61:5f:b8:32:54:8a:0d: a9:be:d5:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh72mRe3ZYazyYawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NGZiYWVhN2ItODA3Yy00YzY2LTliYmQtZmEzZTgwMGVkMTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZdaLNN3OMMNrXqvR8HVkAB9zupCtEe/EFKE R4WkB69OvHjGPdCswakofnjlgGQowxc6mnRbIudvo+nbUN2oHX5sXND5fYwrPm/N D4/TVBCaVUpuon+K0pDnlUA1BVvZSJxGwWvX3aL5avgLdjXOG+aizLDc3JGwkkYE YYGGllQGBgZt9EQpXhQfNIHm0z8AdkDpRsv3DgymGNtyxtsYA2WvtnXOq/Ac547X aJbRaISovoILeGlXrF2tGQB1Xhr5MQvR4dEVQnWbaUnHN8bv7ZYw/uKJHXc24PeN wmm+iGpGhsSHyWNYTTvoDWiXX6tuCCw1s1iPpc9LmGFDKQikRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmAtdorogRdsV95yeCmdYxeRR6ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNmJjNmQ4OWUtZGZiOC0z YzVhLWIzZWMtYjk1OGI4OWZkZWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7Lswbc2WRw+4P/83ODeiwdvhb5qjURtY9exJNLqQCUC1B4RhqLjezW WF8H3B3M8cKN6pceNY4KwCrF+jf8GUyy8/CRhRuvQwrVm13wZBEKlqVdV7vs1TgR ssksGorKtVfUwcQC6mYDKQAYy+T0cgWQeOWCk4h8X7VCBcNgSDBW3XFRX6YzKuax ZnovOm+l6acuVRZ7Qm6wguvFQX9Ea3xs0fIbyLrOowm+50FKDayq4m+aSEy8kyAS Zq5wdL7pVxBMlb1xkFADOovoq5fjzlogrm3zjvpFokqw4S/Lf8U/3iMcvKnMULHI tLvT7zq5Hq32dGJ9YV+4MlSKDam+1UY= -----END CERTIFICATE-----Generated at Sat Apr 26 18:40:09 2025 by rpki-client