$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02a72700-abb9-3c55-b4f4-e68d71a71217.roa File: 02a72700-abb9-3c55-b4f4-e68d71a71217.roa (raw, json) Hash identifier: KqS19Lb1JIpyFPaCGnNYGFqdUVTN+MeKJS6b4kZ+4Qc= Subject key identifier: 50:E3:81:D1:F1:59:1C:8C:22:0B:2C:86:F2:AF:44:AB:5E:9A:13:9F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849C0A4CE6DDD5436254C3C9C00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02a72700-abb9-3c55-b4f4-e68d71a71217.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 9009 IP address blocks: 172.94.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:ce:6d:dd:54:36:25:4c:3c:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=4a9da024-e292-4678-83f0-339699e88ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:82:f2:08:93:17:ca:ff:39:c8:a4:77:9b:11: 0b:3d:93:1d:5c:92:cb:82:0a:2f:f3:1f:cf:ee:cc: 6e:19:90:99:02:9b:67:c3:b2:a7:ec:c4:fa:6d:4b: eb:9f:7c:7f:53:e2:04:e3:81:39:2a:55:78:f3:ff: de:7b:2f:15:46:84:a3:c9:20:7e:8b:ab:60:5f:43: 0a:14:7d:f5:d3:5a:05:4a:7a:d9:d4:23:99:78:62: 33:85:4a:6f:be:cb:0e:ca:dc:06:2e:86:dc:6b:d6: 86:99:9c:5f:7a:f9:ac:de:ef:d4:5f:10:e5:2f:31: 93:af:38:da:42:b3:d6:1a:0a:93:8f:5f:50:bd:f5: 2d:aa:0a:71:f9:e2:d9:37:82:df:37:a0:ac:21:b3: 5b:35:43:58:fe:b0:7f:40:70:f7:13:c6:f9:fc:86: c7:07:a6:28:5e:f0:8a:34:13:8c:09:04:ce:4f:42: c3:7d:a1:5d:5c:a0:b0:08:22:a0:18:0a:a3:e7:d3: c2:6e:6c:68:e3:48:d9:48:62:85:20:0a:84:e4:79: 09:ba:6b:7e:60:7f:0d:84:3c:e1:44:5a:e6:6c:0e: a4:92:8c:b1:bb:50:29:1d:d9:56:ec:62:50:0a:59: 0e:dd:57:e4:fc:99:68:23:0b:fa:dc:66:48:46:87: 4a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E3:81:D1:F1:59:1C:8C:22:0B:2C:86:F2:AF:44:AB:5E:9A:13:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/02a72700-abb9-3c55-b4f4-e68d71a71217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:5a:ee:39:a9:75:96:68:cf:69:58:6c:f0:8c:55:2c:df:91: 1c:9e:08:2b:e5:c9:fc:2d:3a:c8:53:a2:25:c2:ed:b7:dc:4c: dc:d1:f2:20:7c:e9:fd:ca:11:c1:9a:19:b0:32:80:66:6a:e7: 07:c9:20:ef:53:91:0b:d3:8c:15:32:d9:6a:83:ae:75:5f:4f: cb:2f:77:27:5a:24:be:ec:a2:ca:93:d4:d9:72:55:1a:62:2a: e6:59:49:32:3a:bb:1b:1d:ae:66:a3:4f:15:43:d8:1e:52:56: c0:1f:cc:6c:4b:02:76:a5:3a:05:e1:c6:42:9d:0c:f8:6d:a1: 32:31:f1:85:4b:82:3b:db:ce:65:49:a1:45:3f:d0:70:9d:21: b1:96:1c:81:1a:71:90:9e:c8:58:01:2f:2d:eb:71:c2:f8:1a: 0d:15:14:9a:a1:12:49:96:19:9c:2f:04:17:4e:c7:c2:01:f8: 65:be:43:5d:73:86:5f:7f:b0:36:21:3a:f2:89:3c:c0:51:86: 39:ad:ab:ff:ba:65:a1:89:19:e8:ea:26:5b:b2:82:2b:77:f9: 35:80:35:88:33:e9:55:48:c8:1d:03:c6:0b:c4:95:da:b7:2b: 28:02:75:33:99:a9:4f:51:48:1b:58:61:2f:19:fa:e4:0a:c9: 65:44:de:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApM5t3VQ2JUw8nAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NGE5ZGEwMjQtZTI5Mi00Njc4LTgzZjAtMzM5Njk5ZTg4Y2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4LyCJMXyv85yKR3mxELPZMdXJLLggov8x/P 7sxuGZCZAptnw7Kn7MT6bUvrn3x/U+IE44E5KlV48//eey8VRoSjySB+i6tgX0MK FH3101oFSnrZ1COZeGIzhUpvvssOytwGLobca9aGmZxfevms3u/UXxDlLzGTrzja QrPWGgqTj19QvfUtqgpx+eLZN4LfN6CsIbNbNUNY/rB/QHD3E8b5/IbHB6YoXvCK NBOMCQTOT0LDfaFdXKCwCCKgGAqj59PCbmxo40jZSGKFIAqE5HkJumt+YH8NhDzh RFrmbA6kkoyxu1ApHdlW7GJQClkO3Vfk/JloIwv63GZIRodKswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDjgdHxWRyMIgsshvKvRKtemhOfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDJhNzI3MDAtYWJiOS0z YzU1LWI0ZjQtZTY4ZDcxYTcxMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF41MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVa7jmpdZZoz2lYbPCMVSzfkRyeCCvlyfwtOshToiXC7bfcTNzR8iB8 6f3KEcGaGbAygGZq5wfJIO9TkQvTjBUy2WqDrnVfT8svdydaJL7sosqT1NlyVRpi KuZZSTI6uxsdrmajTxVD2B5SVsAfzGxLAnalOgXhxkKdDPhtoTIx8YVLgjvbzmVJ oUU/0HCdIbGWHIEacZCeyFgBLy3rccL4Gg0VFJqhEkmWGZwvBBdOx8IB+GW+Q11z hl9/sDYhOvKJPMBRhjmtq/+6ZaGJGejqJluygit3+TWANYgz6VVIyB0DxgvEldq3 KygCdTOZqU9RSBtYYS8Z+uQKyWVE3lQ= -----END CERTIFICATE-----Generated at Sat May 10 10:31:37 2025 by rpki-client