$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b2b59981-e68e-385b-9e67-4a9271825459.roa File: b2b59981-e68e-385b-9e67-4a9271825459.roa (raw, json) Hash identifier: q1UFX+kjutnWVbtVQyi4Y91oBJ6vvbpYm+O7noRnyAc= Subject key identifier: BF:E4:26:F2:99:80:EC:03:6E:E0:33:FE:34:BB:8B:21:8A:CF:D6:A5 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848FD56B74CFC8CC8B5B8F87980 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b2b59981-e68e-385b-9e67-4a9271825459.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 3223 IP address blocks: 172.94.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:b7:4c:fc:8c:c8:b5:b8:f8:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=ca33186e-bba3-4c93-9644-d96ef34b8b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5e:8d:f4:73:25:77:f9:48:b1:11:ec:28:88: 0a:70:27:b0:3d:65:ee:4c:69:66:68:fc:a0:aa:71: b5:34:77:82:25:47:16:01:4a:15:d6:0f:27:85:63: c2:1c:17:15:8d:5b:c4:3c:54:2c:bb:5e:57:6f:71: 71:6d:f1:68:8f:f3:cf:3a:3d:d2:7e:6e:a6:93:dc: c3:0b:94:7f:0c:28:09:0c:fc:db:da:15:f5:c5:b7: b3:33:50:af:dd:e4:f9:91:d8:ac:dc:e8:97:57:0f: 65:f7:0b:74:30:2e:22:9e:7a:48:cc:35:31:c5:02: 56:6f:84:cf:0a:d7:bf:3a:e9:42:7b:8c:d0:a8:a9: 9e:f1:d1:47:6f:ba:66:6d:53:0b:a6:14:5a:b6:5c: 35:6d:d7:11:11:54:83:02:5f:1b:c3:18:08:51:95: c2:58:87:71:b4:b3:d0:bc:3f:0a:b3:d9:3f:a6:28: e1:42:f9:50:1e:d4:e7:bd:2c:68:45:02:18:39:de: 03:da:8d:5c:a9:b1:7e:56:e9:12:77:7d:ce:bb:a9: d1:29:44:1d:05:44:db:13:e7:a9:a8:ad:64:cf:c2: 0d:49:e4:90:1e:2d:db:49:65:52:56:5a:02:67:a3: 9f:19:1c:72:b0:4e:b0:8d:69:44:d6:95:f9:dc:a4: f5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E4:26:F2:99:80:EC:03:6E:E0:33:FE:34:BB:8B:21:8A:CF:D6:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b2b59981-e68e-385b-9e67-4a9271825459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:26:53:46:c7:e1:b2:c3:d0:6e:0d:bf:ef:f9:20:cb:18:b2: ed:6c:35:a3:60:2f:72:26:54:15:73:de:1d:93:c0:11:a4:fb: 37:4d:fd:a6:b5:c8:35:3c:85:0e:bb:3e:95:97:c4:f9:3c:2d: 86:f1:5a:42:18:4c:fa:29:3a:40:42:b0:27:63:77:5f:c3:9a: 5a:a5:a1:d8:51:fa:ec:9d:1e:17:55:92:c3:f3:a0:f9:6f:f5: 1d:dd:82:15:54:1e:3e:d5:3e:a7:fe:65:e9:3d:60:93:46:1b: f0:ab:2e:62:1a:71:3e:98:2b:d3:ac:c7:b8:da:6a:90:c7:42: e8:d8:93:c2:2a:bc:56:58:5f:1f:e8:90:f5:f5:66:41:13:d9: 4b:3f:cd:87:fd:88:9a:08:dd:30:83:0b:e7:89:27:2c:ce:04: 49:e1:d7:73:92:b9:8e:f0:7a:16:dc:58:7e:99:7b:07:ee:bd: 49:f7:94:61:c6:58:5b:9a:42:51:a1:ee:34:cf:b4:5d:f1:68: ea:ca:09:3e:72:6b:25:bb:74:40:bd:71:ed:0d:3f:ea:06:61: 07:81:a1:00:cb:0c:0a:2f:42:3f:cd:e6:7e:8c:3e:88:53:13: 87:de:c4:e4:b3:2b:9d:29:d4:a0:c6:4b:e7:96:32:f3:a2:16: c4:a6:f8:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VrdM/IzItbj4eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2EzMzE4NmUtYmJhMy00YzkzLTk2NDQtZDk2ZWYzNGI4YjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgF6N9HMld/lIsRHsKIgKcCewPWXuTGlmaPyg qnG1NHeCJUcWAUoV1g8nhWPCHBcVjVvEPFQsu15Xb3FxbfFoj/PPOj3Sfm6mk9zD C5R/DCgJDPzb2hX1xbezM1Cv3eT5kdis3OiXVw9l9wt0MC4innpIzDUxxQJWb4TP Cte/OulCe4zQqKme8dFHb7pmbVMLphRatlw1bdcREVSDAl8bwxgIUZXCWIdxtLPQ vD8Ks9k/pijhQvlQHtTnvSxoRQIYOd4D2o1cqbF+VukSd33Ou6nRKUQdBUTbE+ep qK1kz8INSeSQHi3bSWVSVloCZ6OfGRxysE6wjWlE1pX53KT1XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/kJvKZgOwDbuAz/jS7iyGKz9alMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjJiNTk5ODEtZTY4ZS0z ODViLTllNjctNGE5MjcxODI1NDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8mU0bH4bLD0G4Nv+/5IMsYsu1sNaNgL3ImVBVz3h2TwBGk+zdN/aa1 yDU8hQ67PpWXxPk8LYbxWkIYTPopOkBCsCdjd1/DmlqlodhR+uydHhdVksPzoPlv 9R3dghVUHj7VPqf+Zek9YJNGG/CrLmIacT6YK9Osx7jaapDHQujYk8IqvFZYXx/o kPX1ZkET2Us/zYf9iJoI3TCDC+eJJyzOBEnh13OSuY7wehbcWH6ZewfuvUn3lGHG WFuaQlGh7jTPtF3xaOrKCT5yayW7dEC9ce0NP+oGYQeBoQDLDAovQj/N5n6MPohT E4fexOSzK50p1KDGS+eWMvOiFsSm+H0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:27:31 2025 by rpki-client