$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4f7d0e6a-9cfd-3a3f-be00-336e183f467c.roa File: 4f7d0e6a-9cfd-3a3f-be00-336e183f467c.roa (raw, json) Hash identifier: Mn7mQ6yNX5A9ltxEvLJEluBOcRRNakLFnbuPg4xbiUM= Subject key identifier: 1D:92:98:DB:4C:D2:BE:40:F3:61:EB:6B:3F:80:17:31:C6:82:FB:E6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849B2AF643EE39D3A4A1712DC90 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4f7d0e6a-9cfd-3a3f-be00-336e183f467c.roa Signing time: Wed 30 Apr 2025 13:01:02 +0000 ROA not before: Wed 30 Apr 2025 13:01:02 +0000 ROA not after: Tue 29 Jul 2025 13:01:02 +0000 asID: 53356 IP address blocks: 172.94.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:af:64:3e:e3:9d:3a:4a:17:12:dc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 30 13:01:02 2025 GMT Not After : Jul 29 13:01:02 2025 GMT Subject: CN=c3645f01-a0db-4f23-96a7-102e2c5cbee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:af:5f:03:e8:72:25:90:88:df:cc:5e:05:77: 83:bb:db:3f:09:99:5f:96:1c:07:48:73:fc:15:49: 84:89:d7:e2:a8:91:33:eb:c2:8c:6c:09:e7:04:68: 13:59:7a:38:e5:9b:6a:49:aa:c9:34:e1:94:bc:34: af:de:41:95:bb:79:49:1a:66:0d:f3:17:aa:86:3f: c2:2e:e5:13:a8:68:9b:c6:ed:0e:18:ab:32:60:52: 3c:b7:07:fe:94:eb:64:95:18:f0:ed:b0:52:f5:9b: d2:f4:35:21:02:20:76:76:10:04:0e:2e:45:70:0e: a0:cb:f1:9f:b7:44:c7:56:0b:ca:57:bd:73:2d:de: 67:51:f6:e1:4d:2c:91:34:d8:99:04:53:b5:d3:a1: f8:27:d2:ed:89:d5:d8:05:62:51:c9:98:5a:8f:29: 9c:46:1a:c2:38:c6:d6:70:80:08:d6:7b:0a:d1:be: f4:31:1e:8b:c7:f7:3d:ce:4b:75:10:6b:8b:d3:5d: 85:8f:13:d6:6c:2d:46:66:42:7d:a2:0e:77:0d:f1: 54:90:a7:fb:cd:10:db:8f:8d:bd:8c:04:ef:75:df: 21:92:1b:46:37:55:b0:6b:1c:39:17:a5:c5:18:2f: dd:8d:b2:df:9f:51:69:06:5e:6f:92:04:31:ab:0a: c7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:92:98:DB:4C:D2:BE:40:F3:61:EB:6B:3F:80:17:31:C6:82:FB:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4f7d0e6a-9cfd-3a3f-be00-336e183f467c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b2:dc:b9:e3:c9:0e:05:fa:0d:9f:df:fe:3e:51:43:aa:37: 27:71:71:01:19:4d:4b:11:fd:81:67:b8:03:e0:97:a6:58:86: 98:50:9e:c7:ce:af:0a:16:63:39:2d:64:09:26:6b:28:20:e9: 9e:06:cc:e2:0a:cf:10:a3:54:c0:f7:f8:61:40:35:88:8a:32: 64:b4:f8:90:67:1d:8b:57:8f:c5:b6:7a:a0:89:76:39:78:e0: 85:46:c8:ed:94:1b:84:33:f6:51:5e:2b:f1:5d:50:b2:47:39: 17:53:c8:c0:85:c3:c7:a1:87:26:ce:75:1f:9c:4a:b0:8f:ed: d2:0c:66:42:e8:62:78:6f:d0:0e:de:95:a6:6e:c6:1b:64:bc: 10:85:f1:c5:9e:a2:aa:f5:95:09:2f:51:52:39:7a:eb:03:97: fc:42:c7:b3:bf:ce:ae:34:e6:6f:06:52:fe:1f:ff:32:e4:a6: 1e:e8:bf:f3:b5:a9:e5:fe:24:f0:c5:0e:56:20:96:d8:be:52: 43:6b:da:0e:ce:59:65:58:ca:bd:c8:fb:63:31:39:5f:7c:9b: 9e:05:69:d5:3c:bb:43:8b:1b:7d:be:06:b3:45:a6:91:60:d1: 02:e7:b5:e6:2c:76:0c:d0:5f:58:d8:38:b2:ca:b9:b5:1a:05: 1d:57:1e:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyr2Q+4506ShcS3JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk YzM2NDVmMDEtYTBkYi00ZjIzLTk2YTctMTAyZTJjNWNiZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK9fA+hyJZCI38xeBXeDu9s/CZlflhwHSHP8 FUmEidfiqJEz68KMbAnnBGgTWXo45ZtqSarJNOGUvDSv3kGVu3lJGmYN8xeqhj/C LuUTqGibxu0OGKsyYFI8twf+lOtklRjw7bBS9ZvS9DUhAiB2dhAEDi5FcA6gy/Gf t0THVgvKV71zLd5nUfbhTSyRNNiZBFO106H4J9LtidXYBWJRyZhajymcRhrCOMbW cIAI1nsK0b70MR6Lx/c9zkt1EGuL012FjxPWbC1GZkJ9og53DfFUkKf7zRDbj429 jATvdd8hkhtGN1Wwaxw5F6XFGC/djbLfn1FpBl5vkgQxqwrHcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2SmNtM0r5A82Hraz+AFzHGgvvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGY3ZDBlNmEtOWNmZC0z YTNmLWJlMDAtMzM2ZTE4M2Y0NjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmy3LnjyQ4F+g2f3/4+UUOqNydxcQEZTUsR/YFnuAPgl6ZYhphQnsfO rwoWYzktZAkmaygg6Z4GzOIKzxCjVMD3+GFANYiKMmS0+JBnHYtXj8W2eqCJdjl4 4IVGyO2UG4Qz9lFeK/FdULJHORdTyMCFw8ehhybOdR+cSrCP7dIMZkLoYnhv0A7e laZuxhtkvBCF8cWeoqr1lQkvUVI5eusDl/xCx7O/zq405m8GUv4f/zLkph7ov/O1 qeX+JPDFDlYglti+UkNr2g7OWWVYyr3I+2MxOV98m54FadU8u0OLG32+BrNFppFg 0QLnteYsdgzQX1jYOLLKubUaBR1XHgc= -----END CERTIFICATE-----Generated at Fri May 9 18:07:07 2025 by rpki-client