$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9575200-c843-3805-a2a1-6a268b2c9334.roa File: c9575200-c843-3805-a2a1-6a268b2c9334.roa (raw, json) Hash identifier: qFm5jtDEcXBEEFjLkijcbxHbKx6pGVSfevKvwT+hm7w= Subject key identifier: 7E:FB:3C:85:FC:85:4F:C1:04:A3:FF:B4:DE:8D:61:0D:5D:B8:1A:BA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858491D717D8DC55A57C4513575C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9575200-c843-3805-a2a1-6a268b2c9334.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 9009 IP address blocks: 172.94.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:7d:8d:c5:5a:57:c4:51:35:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=76831239-3bf6-4297-a3bc-53a7c4fdfb3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:93:8b:26:5c:47:21:d0:a7:d5:91:f4:39:2f: f6:61:e9:08:7e:5d:29:e4:38:49:7c:ca:7e:11:cf: c0:53:5e:22:ea:ba:7d:91:6b:78:63:db:a0:9d:ab: 4a:7f:27:cb:2e:aa:82:54:3d:1c:7b:ea:42:33:9d: 4a:82:8b:9d:71:39:90:6f:71:29:52:26:81:20:ad: f2:c6:2a:7a:cc:a0:c7:75:90:31:59:ba:eb:31:62: e1:1e:82:a2:fa:40:dc:2d:3f:7d:ba:83:5e:8c:68: 26:9d:5c:2b:08:bf:1c:e7:36:7a:ea:49:75:34:0c: d2:e1:65:f5:77:63:a6:d5:70:06:fd:5f:56:1e:e3: 91:54:de:fb:df:b0:2d:f0:0f:3c:60:21:b0:86:dc: b2:1b:f7:1f:7c:f7:76:95:20:9a:61:cc:eb:c2:ad: a2:e7:fb:ae:ef:e8:3e:00:51:57:4e:0e:d6:16:22: 10:22:c3:ff:15:3a:70:8e:10:0d:6f:8e:11:93:b2: 7d:91:75:24:2e:15:dc:b7:df:3f:a7:f5:16:7a:8e: 0f:86:37:b6:8e:4f:19:fe:b4:a1:bb:0a:33:62:3c: f9:9b:3e:5d:8e:82:74:ba:6a:61:a8:18:c9:3d:a2: 18:f1:d2:99:cf:ae:f1:8e:de:70:6d:a4:70:f9:5d: 52:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FB:3C:85:FC:85:4F:C1:04:A3:FF:B4:DE:8D:61:0D:5D:B8:1A:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c9575200-c843-3805-a2a1-6a268b2c9334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a9:78:99:a8:3c:bb:f4:cb:75:7f:4b:e6:96:de:ee:3d:f4: 72:2c:fb:43:0e:85:4d:4b:b5:e1:5c:68:0f:3a:4a:c4:39:4a: a7:c1:f7:44:17:58:e8:8d:5e:ce:a4:62:98:22:1d:ab:6a:8d: 42:7d:f5:46:f5:6f:8e:a8:c8:69:87:27:34:2c:63:76:e5:0f: b4:4c:9c:6c:e9:f3:d2:2b:5e:4e:65:3b:87:e3:96:a0:23:28: 0e:1e:77:0c:f0:9e:d1:90:bb:f5:c8:25:51:51:e2:cb:62:27: d2:9c:f4:eb:cc:d5:1c:1a:c8:4f:cd:5f:80:c0:53:0c:00:60: bd:a9:8e:c3:f5:0a:37:64:97:64:f7:58:63:1f:51:d8:ec:8c: db:ae:46:87:1d:28:02:1f:65:19:1c:ec:93:fe:35:f3:40:99: ae:ff:04:d5:19:27:10:6b:8c:45:12:b0:31:77:55:43:59:da: 27:20:9f:7a:5f:8f:73:97:5d:bb:ab:90:fb:6c:af:50:dc:9d: ca:f5:d0:8c:78:5a:ac:6e:0c:f3:0b:32:c9:be:dc:2e:d5:8a: ef:59:2c:b8:bb:5b:cd:6a:37:1a:5a:3d:84:01:49:16:3c:49: 7e:60:52:a0:80:40:34:45:22:e1:1d:11:ae:f9:5f:1c:6e:32: 41:2a:6b:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcX2NxVpXxFE1dcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NzY4MzEyMzktM2JmNi00Mjk3LWEzYmMtNTNhN2M0ZmRmYjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZOLJlxHIdCn1ZH0OS/2YekIfl0p5DhJfMp+ Ec/AU14i6rp9kWt4Y9ugnatKfyfLLqqCVD0ce+pCM51KgoudcTmQb3EpUiaBIK3y xip6zKDHdZAxWbrrMWLhHoKi+kDcLT99uoNejGgmnVwrCL8c5zZ66kl1NAzS4WX1 d2Om1XAG/V9WHuORVN7737At8A88YCGwhtyyG/cffPd2lSCaYczrwq2i5/uu7+g+ AFFXTg7WFiIQIsP/FTpwjhANb44Rk7J9kXUkLhXct98/p/UWeo4Phje2jk8Z/rSh uwozYjz5mz5djoJ0umphqBjJPaIY8dKZz67xjt5wbaRw+V1SZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH77PIX8hU/BBKP/tN6NYQ1duBq6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzk1NzUyMDAtYzg0My0z ODA1LWEyYTEtNmEyNjhiMmM5MzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACpeJmoPLv0y3V/S+aW3u499HIs+0MOhU1LteFcaA86SsQ5SqfB90QX WOiNXs6kYpgiHatqjUJ99Ub1b46oyGmHJzQsY3blD7RMnGzp89IrXk5lO4fjlqAj KA4edwzwntGQu/XIJVFR4stiJ9Kc9OvM1RwayE/NX4DAUwwAYL2pjsP1Cjdkl2T3 WGMfUdjsjNuuRocdKAIfZRkc7JP+NfNAma7/BNUZJxBrjEUSsDF3VUNZ2icgn3pf j3OXXburkPtsr1Dcncr10Ix4WqxuDPMLMsm+3C7Viu9ZLLi7W81qNxpaPYQBSRY8 SX5gUqCAQDRFIuEdEa75XxxuMkEqa0s= -----END CERTIFICATE-----Generated at Sat Apr 26 20:24:53 2025 by rpki-client