$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/51414b7d-f2eb-3750-a65a-ab5c8a4db2c1.roa File: 51414b7d-f2eb-3750-a65a-ab5c8a4db2c1.roa (raw, json) Hash identifier: KkODfu1rvk7tdYzWn8TTjChJ0WXuiN1WJF6FWIgQ8BU= Subject key identifier: C0:2B:17:A9:A8:A1:55:40:8D:6A:5B:78:1C:AA:FD:6E:74:37:67:D0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849B1E951A4A9CBEA603F338120 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/51414b7d-f2eb-3750-a65a-ab5c8a4db2c1.roa Signing time: Wed 30 Apr 2025 06:22:01 +0000 ROA not before: Wed 30 Apr 2025 06:22:01 +0000 ROA not after: Tue 29 Jul 2025 06:22:01 +0000 asID: 43260 IP address blocks: 172.94.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:e9:51:a4:a9:cb:ea:60:3f:33:81:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 30 06:22:01 2025 GMT Not After : Jul 29 06:22:01 2025 GMT Subject: CN=50aec51c-7327-4973-9048-e657899cae6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:06:4c:49:6e:01:6f:e2:ec:87:48:81:11:e0: 69:5f:22:d7:d1:64:b4:bb:ab:1f:10:d7:d7:86:49: b8:93:db:8b:aa:ef:14:41:31:b3:15:9a:fa:64:72: c5:42:92:a9:32:c5:dd:4d:81:06:0c:08:7f:67:d7: 23:c7:83:80:8f:0a:6f:07:df:bd:62:9b:18:a5:7f: 4f:81:fc:79:ae:07:d7:54:3a:d1:ac:18:c4:dc:c6: 50:a2:e6:24:03:45:c7:3d:f2:f0:55:89:92:5e:ba: 5c:c2:38:0d:4c:aa:b3:67:92:a6:5e:e2:7f:73:d7: 88:8f:ef:7b:35:86:57:3e:72:7d:db:15:09:5c:1c: 8c:ac:10:ae:6a:93:a3:e2:49:9b:e8:3e:3a:9e:09: 00:9e:da:42:74:9f:0b:0e:75:a0:16:d4:59:47:d9: 76:af:a5:27:de:7f:63:b4:be:25:8d:35:ad:fa:02: b0:90:0a:c1:70:95:82:09:86:3a:d8:1a:95:cc:9c: eb:99:f5:69:52:7d:13:38:1a:68:63:96:e2:30:23: 01:b5:bc:1e:c7:fd:c4:43:15:0d:40:29:f8:83:2a: 43:bc:bf:f1:77:30:54:75:36:1b:34:4e:5e:1a:0f: 36:d4:9c:c6:2c:1d:ee:df:1c:a5:0c:10:7f:26:74: c7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2B:17:A9:A8:A1:55:40:8D:6A:5B:78:1C:AA:FD:6E:74:37:67:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/51414b7d-f2eb-3750-a65a-ab5c8a4db2c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:2b:f6:ef:53:66:8a:1a:dd:c3:68:ca:30:17:5f:7a:64:78: a0:02:7f:a2:21:9c:65:70:42:1c:e9:12:e3:10:01:50:35:d1: 0b:e3:5d:95:cf:d4:06:7b:8c:4b:89:6c:44:1d:4f:16:ae:6e: 85:3a:cf:c9:6f:ba:61:ab:f1:40:5f:64:b9:dd:2e:05:6c:ae: e2:bb:56:ee:e4:e6:f2:77:23:56:9c:36:38:91:86:6a:99:ae: 9b:e9:e7:23:68:89:d9:48:68:1f:12:4d:f8:09:f9:47:4e:f7: 7a:9b:aa:ec:9b:06:3d:4f:31:21:58:03:db:2c:e0:f5:ee:c8: 4c:dd:55:8b:a2:58:14:3c:7c:2c:ff:e2:43:48:e3:b6:ed:1b: 27:fe:ae:11:bf:9b:b3:05:3b:43:44:c6:68:8e:c4:b9:64:c9: 3e:28:d0:fd:45:fe:7e:2e:33:ba:15:b1:07:5d:1c:45:48:3c: d1:4b:5f:45:f0:7f:9e:17:73:e8:23:1f:d0:3d:1e:55:6a:af: 00:ba:42:88:09:29:05:fa:54:ce:9b:53:d7:6c:7e:75:ff:0e: ba:de:1b:5b:5b:a8:67:fb:72:b9:cd:a0:f8:3e:19:54:e0:ab: e9:d5:ff:38:a7:38:b7:6b:e4:8b:3b:8c:3e:05:f7:2c:91:4d: 03:e1:ee:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmx6VGkqcvqYD8zgSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQzMDA2MjIwMVoXDTI1MDcyOTA2MjIwMVowLzEtMCsGA1UEAxMk NTBhZWM1MWMtNzMyNy00OTczLTkwNDgtZTY1Nzg5OWNhZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAZMSW4Bb+Lsh0iBEeBpXyLX0WS0u6sfENfX hkm4k9uLqu8UQTGzFZr6ZHLFQpKpMsXdTYEGDAh/Z9cjx4OAjwpvB9+9YpsYpX9P gfx5rgfXVDrRrBjE3MZQouYkA0XHPfLwVYmSXrpcwjgNTKqzZ5KmXuJ/c9eIj+97 NYZXPnJ92xUJXByMrBCuapOj4kmb6D46ngkAntpCdJ8LDnWgFtRZR9l2r6Un3n9j tL4ljTWt+gKwkArBcJWCCYY62BqVzJzrmfVpUn0TOBpoY5biMCMBtbwex/3EQxUN QCn4gypDvL/xdzBUdTYbNE5eGg821JzGLB3u3xylDBB/JnTHCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMArF6mooVVAjWpbeByq/W50N2fQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTE0MTRiN2QtZjJlYi0z NzUwLWE2NWEtYWI1YzhhNGRiMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQr9u9TZooa3cNoyjAXX3pkeKACf6IhnGVwQhzpEuMQAVA10QvjXZXP 1AZ7jEuJbEQdTxauboU6z8lvumGr8UBfZLndLgVsruK7Vu7k5vJ3I1acNjiRhmqZ rpvp5yNoidlIaB8STfgJ+UdO93qbquybBj1PMSFYA9ss4PXuyEzdVYuiWBQ8fCz/ 4kNI47btGyf+rhG/m7MFO0NExmiOxLlkyT4o0P1F/n4uM7oVsQddHEVIPNFLX0Xw f54Xc+gjH9A9HlVqrwC6QogJKQX6VM6bU9dsfnX/DrreG1tbqGf7crnNoPg+GVTg q+nV/zinOLdr5Is7jD4F9yyRTQPh7ho= -----END CERTIFICATE-----Generated at Sat May 10 06:45:08 2025 by rpki-client