$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4fe0e1b4-eebf-3f46-841b-7291bad1d6f0.roa File: 4fe0e1b4-eebf-3f46-841b-7291bad1d6f0.roa (raw, json) Hash identifier: +a0uQVy/NzC9Zb+aOO9U22P/QzgGld70LAZjYucfkEo= Subject key identifier: 78:23:98:39:BA:09:79:70:94:61:CF:46:17:08:27:6F:AB:95:94:12 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849B2AF645C3552D9BE5C4DCA80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4fe0e1b4-eebf-3f46-841b-7291bad1d6f0.roa Signing time: Wed 30 Apr 2025 13:01:02 +0000 ROA not before: Wed 30 Apr 2025 13:01:02 +0000 ROA not after: Tue 29 Jul 2025 13:01:02 +0000 asID: 53356 IP address blocks: 172.94.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:af:64:5c:35:52:d9:be:5c:4d:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 30 13:01:02 2025 GMT Not After : Jul 29 13:01:02 2025 GMT Subject: CN=8cfcb112-e96a-4c53-a3b2-661210e837de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8b:0a:97:7e:84:df:92:0b:80:34:4b:1b:da: 97:c5:fe:a4:cb:57:0a:29:f5:c7:a6:4c:17:32:99: 29:ed:f2:58:1b:c7:20:26:30:76:b7:fa:6d:f4:da: 28:b7:d3:8b:1d:6b:a3:0d:fc:50:eb:26:9c:ac:4d: 2d:4f:68:3b:4b:26:6b:08:16:dd:5f:04:d9:18:c7: 0e:66:14:b8:49:f2:ee:c4:4d:b7:79:3a:8c:8a:fe: 98:2c:70:9b:77:a5:03:21:c5:47:da:61:99:6f:0e: 0a:58:87:30:f8:09:df:82:82:12:ad:4e:1f:2b:38: 78:48:08:6d:3a:68:78:ce:d8:e2:66:5e:30:c2:97: d7:77:d9:9b:f1:80:e7:b5:f3:9c:0d:0e:72:fb:1d: 18:82:68:46:15:7e:12:34:0e:fe:49:17:49:d9:f0: ca:04:5f:4a:1b:96:ec:14:a6:9f:29:ab:3e:33:3a: f4:54:b0:4f:b3:6a:08:3c:ee:84:c7:a8:5f:ab:ca: 8d:a6:78:1e:51:f5:3e:c4:ff:d8:40:8e:76:af:72: e8:de:a5:4d:de:65:f5:4b:d4:e3:4d:52:b4:12:fb: 8a:33:e5:eb:f8:15:e7:c3:82:8a:39:44:e4:3b:56: 79:cb:06:7b:c2:79:08:8e:de:3a:6f:35:ac:db:64: 75:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:23:98:39:BA:09:79:70:94:61:CF:46:17:08:27:6F:AB:95:94:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4fe0e1b4-eebf-3f46-841b-7291bad1d6f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:16:e4:9c:bc:fd:0c:0d:01:6e:f1:6a:cb:6b:f6:0a:77:43: 62:a3:eb:5a:d6:52:e0:31:21:03:42:4c:f2:f6:26:2e:81:28: 83:aa:39:83:37:59:7f:fa:3e:78:62:43:0b:97:b7:a1:3e:81: d2:47:bc:dd:92:f3:7b:3f:66:95:e5:33:b5:11:68:4c:a5:b1: 1a:f7:be:38:1c:ab:18:e4:37:9c:23:f4:0e:32:26:1f:a1:e9: f6:c2:3c:1d:55:85:59:2b:11:d8:fb:0c:e4:55:96:17:03:3c: 63:2e:6c:8d:a7:3b:d4:e6:31:37:fe:60:32:fe:8e:41:56:e1: 7b:b1:73:88:15:be:61:10:ea:fe:dd:36:01:2e:62:7f:30:7c: fd:8a:3c:21:80:ba:ab:d2:41:7b:1e:d1:7c:6e:4b:cf:99:49: e4:02:d8:a2:db:68:aa:3e:65:fb:06:12:c3:52:e3:f3:b5:fd: 47:0a:97:ef:eb:a0:60:20:3c:59:7f:98:cb:cf:57:c9:17:8e: a9:32:0a:ec:f5:ce:0c:f7:92:95:c4:cc:58:26:94:6b:e5:22: 37:02:6b:c7:98:d4:14:61:a8:c4:68:5b:7a:b7:96:ad:8a:fe: 9b:d5:b5:83:7a:e4:64:76:a1:e2:69:54:7a:39:1d:94:0d:cb: 26:13:e7:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyr2RcNVLZvlxNyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk OGNmY2IxMTItZTk2YS00YzUzLWEzYjItNjYxMjEwZTgzN2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIsKl36E35ILgDRLG9qXxf6ky1cKKfXHpkwX Mpkp7fJYG8cgJjB2t/pt9Noot9OLHWujDfxQ6yacrE0tT2g7SyZrCBbdXwTZGMcO ZhS4SfLuxE23eTqMiv6YLHCbd6UDIcVH2mGZbw4KWIcw+AnfgoISrU4fKzh4SAht Omh4ztjiZl4wwpfXd9mb8YDntfOcDQ5y+x0YgmhGFX4SNA7+SRdJ2fDKBF9KG5bs FKafKas+Mzr0VLBPs2oIPO6Ex6hfq8qNpngeUfU+xP/YQI52r3Lo3qVN3mX1S9Tj TVK0EvuKM+Xr+BXnw4KKOUTkO1Z5ywZ7wnkIjt46bzWs22R1cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgjmDm6CXlwlGHPRhcIJ2+rlZQSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGZlMGUxYjQtZWViZi0z ZjQ2LTg0MWItNzI5MWJhZDFkNmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMW5Jy8/QwNAW7xastr9gp3Q2Kj61rWUuAxIQNCTPL2Ji6BKIOqOYM3 WX/6PnhiQwuXt6E+gdJHvN2S83s/ZpXlM7URaEylsRr3vjgcqxjkN5wj9A4yJh+h 6fbCPB1VhVkrEdj7DORVlhcDPGMubI2nO9TmMTf+YDL+jkFW4Xuxc4gVvmEQ6v7d NgEuYn8wfP2KPCGAuqvSQXse0XxuS8+ZSeQC2KLbaKo+ZfsGEsNS4/O1/UcKl+/r oGAgPFl/mMvPV8kXjqkyCuz1zgz3kpXEzFgmlGvlIjcCa8eY1BRhqMRoW3q3lq2K /pvVtYN65GR2oeJpVHo5HZQNyyYT50U= -----END CERTIFICATE-----Generated at Fri May 9 06:43:04 2025 by rpki-client