$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c396ee6-26db-3d90-a282-27a8d54f6a78.roa File: 3c396ee6-26db-3d90-a282-27a8d54f6a78.roa (raw, json) Hash identifier: 0rgAhVcbjMauU8PxOWt2Fte6E68Ps6pFNNd+PJYL8M8= Subject key identifier: 0F:EB:42:F3:3F:FA:64:D1:35:A7:F6:3A:EF:23:5E:F7:AE:10:0C:97 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849B1EA1B66FEA0C15612E3C980 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c396ee6-26db-3d90-a282-27a8d54f6a78.roa Signing time: Wed 30 Apr 2025 06:23:36 +0000 ROA not before: Wed 30 Apr 2025 06:23:36 +0000 ROA not after: Tue 29 Jul 2025 06:23:36 +0000 asID: 43260 IP address blocks: 172.94.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:ea:1b:66:fe:a0:c1:56:12:e3:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 30 06:23:36 2025 GMT Not After : Jul 29 06:23:36 2025 GMT Subject: CN=9557e04e-1b99-40ad-a2e7-d2d0c3811015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:04:37:42:b9:3d:a7:c1:8c:56:6d:e5:08: af:9e:30:e8:a2:69:57:5f:50:6d:8e:a8:a4:24:dc: 59:53:2a:2d:76:eb:76:0b:b9:4c:98:5a:54:9d:b6: 9b:08:1b:83:36:d4:52:a1:31:2e:f7:c7:2d:bd:06: b6:5c:5f:7a:ca:38:4f:aa:fd:8f:e3:86:0a:6b:8c: 60:f8:bc:95:8b:5c:87:3f:11:0b:74:44:50:26:e5: 20:b7:20:5b:9f:f7:91:c4:05:bb:7b:87:4c:1e:ff: 31:33:be:6b:f6:da:ff:2b:95:73:64:1c:5c:86:22: 3e:ae:94:5a:2a:50:93:e8:65:58:76:3c:57:63:7a: e9:a6:d4:41:45:82:d7:87:94:d7:51:d3:8f:3e:0c: 04:bd:91:87:8a:55:a4:a0:34:4a:f0:e6:48:d9:41: 00:8a:7e:eb:cf:00:db:a5:d5:65:c4:f2:a3:6a:cd: cf:87:0b:1d:65:2a:37:4c:dc:1d:26:87:6b:b8:03: 18:51:d6:eb:69:e8:d5:a2:39:0e:9d:95:e2:92:23: 38:cd:2c:00:02:49:c8:62:b1:1b:64:32:c8:d9:6c: b0:5f:1e:c3:3f:20:f9:eb:4a:00:5a:ae:52:c5:eb: d3:50:d1:2f:c2:13:c2:0a:0b:88:a3:c3:61:79:a3: ea:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:EB:42:F3:3F:FA:64:D1:35:A7:F6:3A:EF:23:5E:F7:AE:10:0C:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/3c396ee6-26db-3d90-a282-27a8d54f6a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e7:85:98:20:ae:d8:4b:5c:b9:c9:82:bb:69:6e:99:18:6e: 6e:8e:5e:d6:ee:ac:a2:7f:97:e1:3a:0b:ee:b7:3a:fd:09:26: 91:31:b0:ea:5d:ae:99:f8:58:01:53:af:66:b3:8a:3d:b7:d0: 75:54:06:80:1a:d8:24:f9:2d:65:8c:92:e3:cf:ec:48:1c:90: f5:93:a7:04:11:4e:77:32:5f:13:c5:34:06:53:63:b5:09:af: 4a:56:00:3a:43:7f:33:92:3d:66:6e:6e:52:d3:14:3a:01:a3: 35:50:cf:a2:f7:dd:6c:70:b3:f8:ee:ec:ff:b8:10:b8:9d:e9: 25:0c:1b:f8:de:ce:08:1a:2b:c3:95:7f:f2:e9:07:5e:21:20: 32:b1:f4:d6:a0:51:f5:49:5d:18:03:94:bb:c1:c2:cd:07:0b: 08:27:cc:83:c3:32:bb:b1:bb:90:91:aa:c2:cc:da:73:75:8c: ac:50:4e:b3:f7:18:df:0e:6a:ef:a7:94:e6:6d:c8:97:89:b1: 9c:b2:e4:2c:90:ac:1c:12:3c:e1:ab:55:b9:ac:e7:5f:f5:42: a4:54:63:e7:bc:64:56:d6:fd:f8:00:c7:5c:23:87:0e:66:df: 86:94:b5:d3:82:93:39:ae:32:14:e0:e5:ae:c6:9c:ca:66:50: bf:dd:2f:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmx6htm/qDBVhLjyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQzMDA2MjMzNloXDTI1MDcyOTA2MjMzNlowLzEtMCsGA1UEAxMk OTU1N2UwNGUtMWI5OS00MGFkLWEyZTctZDJkMGMzODExMDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk0EN0K5PafBjFZt5QivnjDoomlXX1Btjqik JNxZUyotdut2C7lMmFpUnbabCBuDNtRSoTEu98ctvQa2XF96yjhPqv2P44YKa4xg +LyVi1yHPxELdERQJuUgtyBbn/eRxAW7e4dMHv8xM75r9tr/K5VzZBxchiI+rpRa KlCT6GVYdjxXY3rpptRBRYLXh5TXUdOPPgwEvZGHilWkoDRK8OZI2UEAin7rzwDb pdVlxPKjas3PhwsdZSo3TNwdJodruAMYUdbraejVojkOnZXikiM4zSwAAknIYrEb ZDLI2WywXx7DPyD560oAWq5SxevTUNEvwhPCCguIo8NheaPq1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/rQvM/+mTRNaf2Ou8jXveuEAyXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvM2MzOTZlZTYtMjZkYi0z ZDkwLWEyODItMjdhOGQ1NGY2YTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITnhZggrthLXLnJgrtpbpkYbm6OXtburKJ/l+E6C+63Ov0JJpExsOpd rpn4WAFTr2azij230HVUBoAa2CT5LWWMkuPP7EgckPWTpwQRTncyXxPFNAZTY7UJ r0pWADpDfzOSPWZublLTFDoBozVQz6L33Wxws/ju7P+4ELid6SUMG/jezggaK8OV f/LpB14hIDKx9NagUfVJXRgDlLvBws0HCwgnzIPDMruxu5CRqsLM2nN1jKxQTrP3 GN8Oau+nlOZtyJeJsZyy5CyQrBwSPOGrVbms51/1QqRUY+e8ZFbW/fgAx1wjhw5m 34aUtdOCkzmuMhTg5a7GnMpmUL/dLzM= -----END CERTIFICATE-----Generated at Sat May 10 11:45:49 2025 by rpki-client