$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53e525d4-39a8-3e09-a5e2-111cbb592081.roa File: 53e525d4-39a8-3e09-a5e2-111cbb592081.roa (raw, json) Hash identifier: kuQdm21DQNydstwOLSAv0TtwJx5J6V3isohPsVvilgA= Subject key identifier: 52:48:22:3D:43:FF:41:7E:75:01:D8:BB:63:C3:9B:62:BF:03:7D:F0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849ABB4AAC251C26158BE9FDA00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53e525d4-39a8-3e09-a5e2-111cbb592081.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 45671 IP address blocks: 172.94.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:aa:c2:51:c2:61:58:be:9f:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=b0d95a97-244f-42e5-8017-ce82be6832df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1f:a4:48:13:df:b4:8b:1b:52:fb:16:ab:bd: d9:68:0e:a4:c5:a1:bf:f3:8c:42:6a:48:f5:d6:40: 77:7d:65:19:72:92:77:79:1f:13:01:7a:6c:8a:61: 09:13:86:db:97:c1:b6:dd:02:ba:a2:20:7e:49:24: be:81:a2:b3:58:5a:cf:3e:27:1b:67:f5:53:45:9e: 40:12:0b:52:ae:53:b4:28:08:0b:52:f2:65:40:9b: 0e:37:da:63:00:12:9e:bb:f4:5c:d8:b0:55:37:d8: 81:87:8e:e2:4c:95:95:8a:02:74:05:ee:27:c0:37: 1a:27:7c:94:62:5f:22:4f:27:0a:71:80:b3:62:92: 09:1d:61:ca:64:c0:10:1f:51:2f:b4:14:9c:a7:66: ff:91:6a:62:a5:19:58:7b:0e:f9:18:ef:de:e7:3d: 49:23:87:59:36:82:9d:27:a8:98:d0:a3:6e:a8:32: 09:27:a2:35:ed:ec:cd:96:ad:ee:6a:9d:0b:0d:86: 51:69:50:34:b5:14:1d:b8:53:8d:38:5e:16:71:5d: fc:d0:db:29:5c:12:06:e2:b8:b0:96:6f:6c:ae:2c: 13:72:26:52:52:e4:c2:2e:45:ca:cf:ff:5b:8a:c3: 6e:c7:97:6f:2c:53:2d:77:44:e0:f5:1f:20:ca:eb: e7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:48:22:3D:43:FF:41:7E:75:01:D8:BB:63:C3:9B:62:BF:03:7D:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/53e525d4-39a8-3e09-a5e2-111cbb592081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:1a:7f:26:fb:a3:12:2d:1a:9c:08:15:cf:0a:a2:e0:76:af: fe:9f:13:53:c7:62:5e:ca:b3:7e:d7:2d:6e:c3:c7:12:fb:fc: 39:20:26:16:65:88:d9:aa:77:c1:52:f9:cc:19:ec:a1:88:f7: 5f:19:11:56:72:06:87:a8:ae:e4:0e:91:5e:63:68:74:3b:d5: 07:2f:d4:6f:f5:7b:01:f8:2b:0f:a3:51:5d:a0:fd:dc:56:52: a4:64:45:7a:6e:15:0d:ee:0d:06:19:20:f9:44:f2:39:01:97: d1:a4:7d:b6:dd:c3:3a:02:f1:63:30:c9:d5:c0:c3:59:87:46: d9:26:d7:fc:3f:3d:e9:a1:56:f4:ee:54:a4:75:3e:31:70:7a: 0e:be:69:4b:e6:65:37:95:ea:71:4f:08:f3:ae:54:9a:60:cd: bd:9f:65:f7:dc:15:28:27:96:1d:72:57:74:f4:7c:2c:41:a3: ad:1f:45:ce:47:6b:95:6d:f3:42:39:a1:f1:a6:a3:71:7f:9a: c7:dc:f0:13:f0:46:36:24:8e:3b:fd:41:fe:3d:4a:52:dc:9b: 55:7c:a8:f1:86:d7:70:01:8b:69:a2:2f:8f:1c:9f:05:ca:ab: 65:58:6b:a8:3b:17:61:97:9e:43:55:09:42:f3:69:12:8a:cf: 97:48:15:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKrCUcJhWL6f2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YjBkOTVhOTctMjQ0Zi00MmU1LTgwMTctY2U4MmJlNjgzMmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0h+kSBPftIsbUvsWq73ZaA6kxaG/84xCakj1 1kB3fWUZcpJ3eR8TAXpsimEJE4bbl8G23QK6oiB+SSS+gaKzWFrPPicbZ/VTRZ5A EgtSrlO0KAgLUvJlQJsON9pjABKeu/Rc2LBVN9iBh47iTJWVigJ0Be4nwDcaJ3yU Yl8iTycKcYCzYpIJHWHKZMAQH1EvtBScp2b/kWpipRlYew75GO/e5z1JI4dZNoKd J6iY0KNuqDIJJ6I17ezNlq3uap0LDYZRaVA0tRQduFONOF4WcV380NspXBIG4riw lm9sriwTciZSUuTCLkXKz/9bisNux5dvLFMtd0Tg9R8gyuvnCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJIIj1D/0F+dQHYu2PDm2K/A33wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTNlNTI1ZDQtMzlhOC0z ZTA5LWE1ZTItMTExY2JiNTkyMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAafyb7oxItGpwIFc8KouB2r/6fE1PHYl7Ks37XLW7DxxL7/DkgJhZl iNmqd8FS+cwZ7KGI918ZEVZyBoeoruQOkV5jaHQ71Qcv1G/1ewH4Kw+jUV2g/dxW UqRkRXpuFQ3uDQYZIPlE8jkBl9GkfbbdwzoC8WMwydXAw1mHRtkm1/w/PemhVvTu VKR1PjFweg6+aUvmZTeV6nFPCPOuVJpgzb2fZffcFSgnlh1yV3T0fCxBo60fRc5H a5Vt80I5ofGmo3F/msfc8BPwRjYkjjv9Qf49SlLcm1V8qPGG13ABi2miL48cnwXK q2VYa6g7F2GXnkNVCULzaRKKz5dIFZE= -----END CERTIFICATE-----Generated at Thu May 8 22:18:00 2025 by rpki-client