$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/77385434-8c7c-334a-9982-322ebd13290d.roa File: 77385434-8c7c-334a-9982-322ebd13290d.roa (raw, json) Hash identifier: maChoV9hvj0qgldrJyA4AnFXf7Xjh757TMiTSfoo+EQ= Subject key identifier: B6:74:62:AE:D7:80:5B:F6:20:D9:4A:27:85:72:E7:48:91:89:D2:5D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848D376571777B58F8849312D40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/77385434-8c7c-334a-9982-322ebd13290d.roa Signing time: Sun 09 Feb 2025 14:00:51 +0000 ROA not before: Sun 09 Feb 2025 14:00:51 +0000 ROA not after: Sat 10 May 2025 13:00:51 +0000 asID: 53356 IP address blocks: 172.94.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d3:76:57:17:77:b5:8f:88:49:31:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 9 14:00:51 2025 GMT Not After : May 10 13:00:51 2025 GMT Subject: CN=17a7f251-310c-4328-8008-558cd68089c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:68:c9:e5:39:e6:84:cd:76:31:4f:2f:e4:e4: c3:71:bd:b4:50:59:37:e8:32:e0:89:58:4b:3f:d9: 34:f0:a9:84:c2:7a:6d:7a:21:12:94:c4:b7:37:22: 4d:c3:f8:b1:28:5a:50:b1:32:c4:ac:73:ac:bf:28: 7b:a7:87:13:d4:7f:55:6e:cf:6e:31:e9:ed:f3:f8: a5:aa:5e:23:6b:6e:7f:bc:b8:f2:aa:54:89:de:8a: 00:a5:21:cf:59:c9:a2:1f:66:d6:30:05:0a:5b:0f: ab:06:4f:91:a1:43:ef:61:b4:b0:92:e1:27:5f:63: 37:e1:e9:04:b6:45:6a:24:2c:6a:87:a8:39:d5:90: fc:c9:0c:76:ca:48:60:06:65:fe:02:56:29:dd:ac: 48:61:d0:0d:2d:d7:28:30:41:e7:36:2f:ab:9a:63: 85:28:40:a3:a5:a8:0e:6a:07:dd:dd:16:26:67:b8: ac:4b:f6:e3:09:94:23:b0:24:55:74:36:b6:ab:b1: 3d:2f:b2:9a:a4:1c:4d:e3:75:18:ad:75:7f:23:5f: 68:01:ea:94:65:10:54:f9:b6:17:81:70:99:48:45: 30:8c:b5:d5:d4:8a:42:d3:95:e1:ac:4b:e2:1f:49: c2:16:65:1d:3e:d8:f0:be:f9:56:b2:95:ec:ba:0b: fb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:74:62:AE:D7:80:5B:F6:20:D9:4A:27:85:72:E7:48:91:89:D2:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/77385434-8c7c-334a-9982-322ebd13290d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:3a:a2:a8:26:e3:a0:e0:15:6e:44:bf:55:72:3e:8a:4c:71: b2:fa:76:22:e6:e5:05:ec:e5:ad:fd:77:b7:5c:24:66:54:95: 01:b1:7b:88:9a:bb:49:95:e1:37:b2:f3:77:73:56:ee:bb:0b: de:b8:69:77:13:94:cf:ad:ca:98:d0:e4:01:b8:e4:81:ac:16: e3:ee:6e:bc:b1:6e:97:d3:81:81:96:e1:ee:58:bb:cc:23:b2: f6:a4:3e:cc:51:ee:72:bf:b2:e2:e4:36:f2:3e:00:6d:11:5f: 87:8a:05:c7:86:0e:1f:65:73:8e:bf:d1:f0:7c:84:ca:52:02: 16:34:24:b9:22:0c:76:1c:0a:4b:1a:9c:c8:49:99:79:b5:20: 81:f4:18:c1:03:41:c8:f3:7d:1c:8c:eb:d2:b5:8b:c5:d6:60: 1e:b0:b4:24:c8:57:88:92:6a:39:ac:75:17:b4:32:4e:1e:f5: da:dd:8f:79:4f:a0:31:56:1e:4d:a4:79:c2:26:b6:dc:c4:04: 74:a1:0f:fa:5c:aa:dd:0c:d6:9a:76:d7:1c:e1:05:25:aa:90: 60:4f:07:43:77:fc:7e:dd:1c:e1:1f:2e:a9:e1:94:22:9c:0b: 41:6e:a5:41:45:90:f7:f2:15:b4:08:2e:7b:7f:fe:fd:e8:d1: 70:15:32:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjTdlcXd7WPiEkxLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk MTdhN2YyNTEtMzEwYy00MzI4LTgwMDgtNTU4Y2Q2ODA4OWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmjJ5TnmhM12MU8v5OTDcb20UFk36DLgiVhL P9k08KmEwnpteiESlMS3NyJNw/ixKFpQsTLErHOsvyh7p4cT1H9Vbs9uMent8/il ql4ja25/vLjyqlSJ3ooApSHPWcmiH2bWMAUKWw+rBk+RoUPvYbSwkuEnX2M34ekE tkVqJCxqh6g51ZD8yQx2ykhgBmX+AlYp3axIYdANLdcoMEHnNi+rmmOFKECjpagO agfd3RYmZ7isS/bjCZQjsCRVdDa2q7E9L7KapBxN43UYrXV/I19oAeqUZRBU+bYX gXCZSEUwjLXV1IpC05XhrEviH0nCFmUdPtjwvvlWspXsugv7EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZ0Yq7XgFv2INlKJ4Vy50iRidJdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzczODU0MzQtOGM3Yy0z MzRhLTk5ODItMzIyZWJkMTMyOTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABU6oqgm46DgFW5Ev1VyPopMcbL6diLm5QXs5a39d7dcJGZUlQGxe4ia u0mV4Tey83dzVu67C964aXcTlM+typjQ5AG45IGsFuPubryxbpfTgYGW4e5Yu8wj svakPsxR7nK/suLkNvI+AG0RX4eKBceGDh9lc46/0fB8hMpSAhY0JLkiDHYcCksa nMhJmXm1IIH0GMEDQcjzfRyM69K1i8XWYB6wtCTIV4iSajmsdRe0Mk4e9drdj3lP oDFWHk2kecImttzEBHShD/pcqt0M1pp21xzhBSWqkGBPB0N3/H7dHOEfLqnhlCKc C0FupUFFkPfyFbQILnt//v3o0XAVMkE= -----END CERTIFICATE-----Generated at Sun Apr 27 03:53:46 2025 by rpki-client