$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/43a4ca13-89c9-3560-85d2-f6355cc48f37.roa File: 43a4ca13-89c9-3560-85d2-f6355cc48f37.roa (raw, json) Hash identifier: LPNuQ6eyTtPZxD4eKIqI4SWqZsMPiFlTOxMDIxfStS8= Subject key identifier: 52:96:7D:3D:3A:97:A4:FB:90:02:F3:A6:8B:CF:E4:A0:EB:57:7A:AB Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849C28EB5C58BC000AE677A6E00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/43a4ca13-89c9-3560-85d2-f6355cc48f37.roa Signing time: Tue 06 May 2025 05:28:11 +0000 ROA not before: Tue 06 May 2025 05:28:11 +0000 ROA not after: Mon 04 Aug 2025 05:28:11 +0000 asID: 9009 IP address blocks: 172.94.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:8e:b5:c5:8b:c0:00:ae:67:7a:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 6 05:28:11 2025 GMT Not After : Aug 4 05:28:11 2025 GMT Subject: CN=c07fb9ea-db21-4c4d-a37f-b01f4de8dc3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:06:0c:87:fd:31:ac:7a:39:81:81:72:dc:20: d6:33:ff:08:b4:4b:53:71:ca:44:b4:a8:70:97:b1: f6:39:40:0e:dd:e0:db:04:f4:2c:4e:2a:f8:ca:21: 08:0c:dd:46:94:65:21:5a:d2:dd:a1:32:7b:50:cd: 47:33:79:39:b7:1f:95:03:c8:dd:74:bc:7a:a5:ae: c9:ca:51:b1:17:1a:06:78:e5:43:e0:65:cf:40:1b: 39:51:1c:cc:b4:59:20:a3:71:9d:f9:69:af:86:87: b5:bc:33:23:ab:96:d0:de:c9:1d:50:2e:a8:df:4d: 7c:36:12:35:5a:55:62:f4:21:c1:10:ec:31:68:48: e7:cc:53:52:6a:2e:85:1d:bb:10:25:a0:75:be:fc: be:de:7d:33:a1:5f:3f:31:3d:6b:04:1c:0c:42:89: 97:eb:db:42:cc:88:0d:38:a8:43:e8:a4:db:56:ae: 2e:c2:02:89:d7:cc:5d:76:44:5d:54:a0:46:7c:ad: ae:92:e0:c5:09:35:e8:19:62:dc:59:ab:02:8f:c3: 5f:79:c9:76:5d:4f:13:5d:a4:e9:ba:39:de:84:48: e2:28:33:8d:40:8c:7e:16:63:1a:0a:f9:d7:ff:c0: 3f:63:ef:fd:81:b6:94:7b:a0:4d:8a:88:8f:a2:74: 60:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:96:7D:3D:3A:97:A4:FB:90:02:F3:A6:8B:CF:E4:A0:EB:57:7A:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/43a4ca13-89c9-3560-85d2-f6355cc48f37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:81:97:82:18:eb:77:34:c3:ac:bb:ed:6e:b0:5c:0c:84:66: ec:4a:07:28:da:52:03:07:69:ce:b3:9e:32:32:00:b1:30:5f: 15:59:56:9c:a6:57:94:0b:60:6e:e4:5e:bc:da:05:21:77:67: ed:40:bf:83:a5:b5:da:20:5b:6b:51:12:a0:39:f0:d8:e8:36: 6c:81:bf:5c:ec:fa:4c:1d:a0:4b:c3:d0:bd:ba:b6:9f:58:c7: e6:9c:11:98:b1:cf:30:db:61:a2:7b:b4:6c:14:ad:66:ab:b8: 05:dc:ca:9d:1e:44:a4:e4:79:33:b7:68:1b:28:70:33:23:71: be:0a:11:47:de:17:f4:7a:b5:8e:15:51:f9:d1:f1:86:d8:cc: 1e:b0:59:35:09:26:60:68:a4:28:26:40:97:90:7c:b0:c4:06: bd:a7:79:4d:7d:de:dd:f4:a0:55:07:74:fa:0f:46:a0:d9:32: f6:f2:02:e9:f8:6b:3f:ef:06:13:89:72:62:cb:78:30:f4:72: bc:d0:57:4f:cc:9c:51:0b:89:09:09:7b:2b:fc:1e:a0:b1:fd: 9a:2d:d3:27:a9:02:fb:2c:cd:5b:75:52:7d:de:c0:6a:28:58: 64:41:86:57:9f:35:40:f2:4e:23:36:df:6d:00:95:47:58:66: 37:9e:a9:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCjrXFi8AArmd6bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUwNjA1MjgxMVoXDTI1MDgwNDA1MjgxMVowLzEtMCsGA1UEAxMk YzA3ZmI5ZWEtZGIyMS00YzRkLWEzN2YtYjAxZjRkZThkYzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gYMh/0xrHo5gYFy3CDWM/8ItEtTccpEtKhw l7H2OUAO3eDbBPQsTir4yiEIDN1GlGUhWtLdoTJ7UM1HM3k5tx+VA8jddLx6pa7J ylGxFxoGeOVD4GXPQBs5URzMtFkgo3Gd+Wmvhoe1vDMjq5bQ3skdUC6o3018NhI1 WlVi9CHBEOwxaEjnzFNSai6FHbsQJaB1vvy+3n0zoV8/MT1rBBwMQomX69tCzIgN OKhD6KTbVq4uwgKJ18xddkRdVKBGfK2ukuDFCTXoGWLcWasCj8Nfecl2XU8TXaTp ujnehEjiKDONQIx+FmMaCvnX/8A/Y+/9gbaUe6BNioiPonRg5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKWfT06l6T7kALzpovP5KDrV3qrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDNhNGNhMTMtODljOS0z NTYwLTg1ZDItZjYzNTVjYzQ4ZjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF49MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmBl4IY63c0w6y77W6wXAyEZuxKByjaUgMHac6znjIyALEwXxVZVpym V5QLYG7kXrzaBSF3Z+1Av4OltdogW2tREqA58NjoNmyBv1zs+kwdoEvD0L26tp9Y x+acEZixzzDbYaJ7tGwUrWaruAXcyp0eRKTkeTO3aBsocDMjcb4KEUfeF/R6tY4V UfnR8YbYzB6wWTUJJmBopCgmQJeQfLDEBr2neU193t30oFUHdPoPRqDZMvbyAun4 az/vBhOJcmLLeDD0crzQV0/MnFELiQkJeyv8HqCx/Zot0yepAvsszVt1Un3ewGoo WGRBhlefNUDyTiM2320AlUdYZjeeqaQ= -----END CERTIFICATE-----Generated at Sat May 10 10:13:22 2025 by rpki-client