$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa File: d3472d91-6027-3989-8e71-4dc7c885f1fa.roa (raw, json) Hash identifier: yia83a4c5YQwCV0a5zoYNkst2TD9+IpNoLD1HMPga8c= Subject key identifier: F5:73:5A:65:CB:63:BB:1C:5C:90:C8:5F:C8:82:53:3A:19:4D:91:E8 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848E9CBEFFD521E5136A44A7980 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 9009 IP address blocks: 172.94.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:ef:fd:52:1e:51:36:a4:4a:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=09ad85ca-6516-4575-88f8-eea1f335402c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:29:ee:12:59:c3:9c:67:bc:f2:4d:c2:01:b8: 65:b5:1f:2f:0a:f2:c6:28:40:d7:ad:0d:25:cc:b4: 30:e8:ca:de:ce:a6:d5:47:c4:a6:ce:46:73:a7:c9: 89:ed:83:0b:15:6c:11:34:61:b4:a4:52:7d:e9:3e: 45:6a:a9:07:16:24:5b:5f:7e:14:90:90:c4:12:71: e4:b8:a0:bd:27:c0:6a:20:9b:47:9a:19:2f:06:32: 45:8d:4e:90:16:06:ef:3b:5b:0e:e3:c0:e8:ec:91: e1:64:20:7d:c5:8c:02:73:4a:4b:e7:1e:58:46:19: 38:f8:3e:3e:f5:47:87:0e:23:e9:d2:40:96:50:ad: 4f:9c:e8:30:92:46:01:16:49:39:2f:59:af:2f:d6: 3e:bf:be:36:eb:a5:dc:84:8d:53:4d:ff:b7:d0:ee: a0:5b:78:53:84:bb:1c:49:12:54:12:ed:89:e8:f2: 05:b4:b8:6f:5c:6b:fc:1c:87:7a:6d:96:a2:d5:a6: 37:01:30:03:e7:13:ea:03:d1:2c:67:ae:30:9a:c4: 48:d5:09:a5:de:31:aa:82:7f:a5:45:55:30:72:a0: d2:fe:db:12:87:c9:39:9e:3b:f1:87:db:76:78:80: a3:d6:17:81:9a:6c:ab:aa:8d:20:38:40:8e:a3:29: 8c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:73:5A:65:CB:63:BB:1C:5C:90:C8:5F:C8:82:53:3A:19:4D:91:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:1b:40:27:63:f4:c2:74:27:84:86:61:66:8a:72:1e:fb:e3: b3:ab:93:03:24:9b:c6:9b:6e:97:69:18:aa:15:3b:9b:53:61: 6e:08:45:e8:56:64:39:69:fc:7a:2e:cb:bf:2a:26:9b:79:14: 71:2e:83:6e:b7:55:d9:9c:b0:22:64:66:07:01:86:9e:8c:8a: f1:26:df:ee:fe:31:96:04:e9:60:f8:85:77:21:f1:b3:13:5a: 8a:18:a7:c0:e1:01:98:96:07:cb:f9:31:53:5d:78:0b:44:48: f9:45:ea:15:80:a2:88:89:7b:70:2e:4e:74:54:ba:6b:57:3e: 83:8a:87:49:ae:6b:c4:c4:e0:4a:0b:ca:21:09:7e:73:25:7b: 2a:f3:20:01:90:17:74:28:53:7f:6e:9a:98:15:f6:ba:99:7e: 98:52:ae:fb:9a:8f:82:5b:9f:0e:88:77:05:90:73:5c:56:5f: d2:42:21:7c:46:5d:ce:59:0b:0c:60:4e:33:14:87:b2:7d:f7: 55:5b:37:10:e0:d3:ba:83:80:91:8a:66:32:f9:22:3e:89:49: 6c:ff:3a:2b:c5:62:9f:27:6d:bd:0d:c2:85:27:59:d7:4b:29: 47:7d:d4:69:82:85:d4:7e:44:68:b1:05:43:a8:42:14:75:d8: 0a:33:03:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+/9Uh5RNqRKeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk MDlhZDg1Y2EtNjUxNi00NTc1LTg4ZjgtZWVhMWYzMzU0MDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSnuElnDnGe88k3CAbhltR8vCvLGKEDXrQ0l zLQw6MrezqbVR8SmzkZzp8mJ7YMLFWwRNGG0pFJ96T5FaqkHFiRbX34UkJDEEnHk uKC9J8BqIJtHmhkvBjJFjU6QFgbvO1sO48Do7JHhZCB9xYwCc0pL5x5YRhk4+D4+ 9UeHDiPp0kCWUK1PnOgwkkYBFkk5L1mvL9Y+v74266XchI1TTf+30O6gW3hThLsc SRJUEu2J6PIFtLhvXGv8HId6bZai1aY3ATAD5xPqA9EsZ64wmsRI1Qml3jGqgn+l RVUwcqDS/tsSh8k5njvxh9t2eICj1heBmmyrqo0gOECOoymMBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVzWmXLY7scXJDIX8iCUzoZTZHoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDM0NzJkOTEtNjAyNy0z OTg5LThlNzEtNGRjN2M4ODVmMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUbQCdj9MJ0J4SGYWaKch7747OrkwMkm8abbpdpGKoVO5tTYW4IRehW ZDlp/Houy78qJpt5FHEug263VdmcsCJkZgcBhp6MivEm3+7+MZYE6WD4hXch8bMT WooYp8DhAZiWB8v5MVNdeAtESPlF6hWAooiJe3AuTnRUumtXPoOKh0mua8TE4EoL yiEJfnMleyrzIAGQF3QoU39umpgV9rqZfphSrvuaj4Jbnw6IdwWQc1xWX9JCIXxG Xc5ZCwxgTjMUh7J991VbNxDg07qDgJGKZjL5Ij6JSWz/OivFYp8nbb0NwoUnWddL KUd91GmChdR+RGixBUOoQhR12AozA8I= -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:12 2025 by rpki-client