$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89f842fa-8888-3ca7-a825-fbb5e4f282d9.roa File: 89f842fa-8888-3ca7-a825-fbb5e4f282d9.roa (raw, json) Hash identifier: ov40WYEZIJS8zwZ4JeiAhDfqAMXOatSWYS10HuYcgrE= Subject key identifier: 0D:47:BB:5A:86:6D:FE:A9:AC:47:F5:E8:38:EF:28:53:D4:65:DF:10 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848EB3109B39D71A15A93546C80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89f842fa-8888-3ca7-a825-fbb5e4f282d9.roa Signing time: Tue 18 Feb 2025 02:00:38 +0000 ROA not before: Tue 18 Feb 2025 02:00:38 +0000 ROA not after: Mon 19 May 2025 01:00:38 +0000 asID: 53356 IP address blocks: 172.94.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:eb:31:09:b3:9d:71:a1:5a:93:54:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 18 02:00:38 2025 GMT Not After : May 19 01:00:38 2025 GMT Subject: CN=bacf1d11-d58f-4085-970f-5dec1e83197d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:61:62:30:9b:90:26:cb:c1:88:3c:36:1e:79: 2b:8e:12:cf:65:dd:1b:02:d0:81:4a:23:af:17:14: b0:1b:f2:7e:7d:23:9c:1b:53:0e:5c:da:e6:65:8e: 55:46:a9:7c:78:1e:63:fe:27:fd:17:32:a0:20:52: e0:3f:b8:c0:3a:72:a2:e0:4a:08:f2:a2:fe:70:b1: 19:b9:e7:e7:28:5a:fc:a9:7e:c6:db:ae:eb:8e:d1: 82:23:5d:c8:7d:a2:bf:75:23:8e:6d:62:6e:8b:75: ae:12:95:51:21:6a:59:c0:33:86:b8:2c:95:d0:15: f0:64:1c:aa:26:cc:85:41:d2:7b:fd:62:fb:b9:0b: 01:d7:4d:5e:b9:9b:0e:d4:e5:87:ff:b5:bd:89:84: 60:55:68:4a:0d:d0:82:5c:6f:0d:4e:6d:ea:44:09: e2:9a:44:97:92:df:63:06:6a:c9:3e:bb:1d:19:27: 69:6b:a0:a7:65:15:75:de:ce:03:0d:29:b3:36:b3: c7:e4:25:31:4e:d9:ab:a7:a1:a3:fc:78:57:c3:dc: b4:c3:93:7d:38:45:5d:3f:e7:3a:6f:88:f5:1d:ae: b2:1e:34:0b:05:5b:db:61:35:1d:46:e7:82:a5:2b: 30:14:25:5f:98:02:97:4b:65:92:6e:02:8e:8b:03: 65:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:47:BB:5A:86:6D:FE:A9:AC:47:F5:E8:38:EF:28:53:D4:65:DF:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/89f842fa-8888-3ca7-a825-fbb5e4f282d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:77:41:4c:83:82:07:07:ac:9d:ce:1c:76:d3:48:fb:d0:b1: dc:1b:ee:78:8b:bf:af:0d:4d:b2:25:5e:36:2a:2f:3d:7e:81: 01:8b:2d:05:e3:57:83:f0:0f:0e:a0:af:b0:98:b1:2c:96:01: 40:b8:92:47:b0:5d:09:3a:2b:57:fe:49:bf:9d:d8:84:08:f1: 32:84:88:95:5e:fd:54:f8:a6:a4:c2:e4:de:ef:8e:3b:07:1a: 5a:42:bd:22:b9:c1:2b:78:36:0e:ea:79:c5:e5:3c:2f:25:6d: 56:c1:72:15:ef:9b:40:2f:7c:9a:07:1b:26:af:71:5f:ce:a6: 8f:14:87:40:c4:86:86:6d:b0:80:06:55:34:5b:4b:3c:90:6c: 1b:1d:95:63:52:27:dc:f7:4e:3c:19:37:96:6d:ef:19:67:b4: 34:24:41:19:be:61:c1:5e:fb:f6:1d:94:6e:6e:9b:9e:53:f8: 17:b4:64:13:00:78:2d:21:1a:4a:ce:6c:f0:cd:e8:bc:9e:bc: c0:f6:dc:76:5f:5b:88:03:ca:01:47:0b:95:c4:1f:36:e1:7c: 46:21:94:dd:75:2b:f9:cf:b9:40:0d:ec:40:68:0e:80:18:d4: 7c:c6:df:22:9b:5d:35:d7:81:b9:6d:2d:51:17:70:6c:15:0e: 02:51:64:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjrMQmznXGhWpNUbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIxODAyMDAzOFoXDTI1MDUxOTAxMDAzOFowLzEtMCsGA1UEAxMk YmFjZjFkMTEtZDU4Zi00MDg1LTk3MGYtNWRlYzFlODMxOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmFiMJuQJsvBiDw2HnkrjhLPZd0bAtCBSiOv FxSwG/J+fSOcG1MOXNrmZY5VRql8eB5j/if9FzKgIFLgP7jAOnKi4EoI8qL+cLEZ uefnKFr8qX7G267rjtGCI13IfaK/dSOObWJui3WuEpVRIWpZwDOGuCyV0BXwZByq JsyFQdJ7/WL7uQsB101euZsO1OWH/7W9iYRgVWhKDdCCXG8NTm3qRAnimkSXkt9j BmrJPrsdGSdpa6CnZRV13s4DDSmzNrPH5CUxTtmrp6Gj/HhXw9y0w5N9OEVdP+c6 b4j1Ha6yHjQLBVvbYTUdRueCpSswFCVfmAKXS2WSbgKOiwNljQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1Hu1qGbf6prEf16DjvKFPUZd8QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODlmODQyZmEtODg4OC0z Y2E3LWE4MjUtZmJiNWU0ZjI4MmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHh3QUyDggcHrJ3OHHbTSPvQsdwb7niLv68NTbIlXjYqLz1+gQGLLQXj V4PwDw6gr7CYsSyWAUC4kkewXQk6K1f+Sb+d2IQI8TKEiJVe/VT4pqTC5N7vjjsH GlpCvSK5wSt4Ng7qecXlPC8lbVbBchXvm0AvfJoHGyavcV/Opo8Uh0DEhoZtsIAG VTRbSzyQbBsdlWNSJ9z3TjwZN5Zt7xlntDQkQRm+YcFe+/YdlG5um55T+Be0ZBMA eC0hGkrObPDN6LyevMD23HZfW4gDygFHC5XEHzbhfEYhlN11K/nPuUAN7EBoDoAY 1HzG3yKbXTXXgbltLVEXcGwVDgJRZFI= -----END CERTIFICATE-----Generated at Sun Apr 27 00:16:24 2025 by rpki-client