$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5409c5cd-2c89-3be0-a0be-b78de6f87761.roa File: 5409c5cd-2c89-3be0-a0be-b78de6f87761.roa (raw, json) Hash identifier: N6/snCO/2l2qb3T1hJ+zrUwRuTAzwrwYRFSsGonAT7I= Subject key identifier: 18:24:03:3A:91:CE:D0:B2:E2:EC:58:04:A2:87:74:53:FB:59:72:84 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849B2AF640BF9C64A320FB54500 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5409c5cd-2c89-3be0-a0be-b78de6f87761.roa Signing time: Wed 30 Apr 2025 13:01:02 +0000 ROA not before: Wed 30 Apr 2025 13:01:02 +0000 ROA not after: Tue 29 Jul 2025 13:01:02 +0000 asID: 53356 IP address blocks: 172.94.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:af:64:0b:f9:c6:4a:32:0f:b5:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 30 13:01:02 2025 GMT Not After : Jul 29 13:01:02 2025 GMT Subject: CN=d4f6b295-94fb-447b-b466-b9fa94fee908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3d:5a:af:aa:e4:96:14:ae:1d:9a:f0:43:39: 82:d3:12:6a:7e:9a:fe:48:fa:07:c4:fd:96:3d:2d: 46:82:72:3c:d1:ed:14:48:19:15:ac:69:65:7d:e1: cf:ac:9f:b0:c2:9b:a1:4c:80:ed:47:16:62:92:4d: 0d:d3:de:ed:a8:4d:37:15:ae:95:29:20:e1:b2:97: d4:21:d1:fb:08:92:a6:35:27:89:c6:f2:df:58:5b: ee:1c:6e:84:77:ef:d7:da:bf:c7:72:c7:b3:33:f0: 52:f2:1a:79:13:f6:4e:8d:7d:53:b8:21:18:1c:9f: 40:12:26:65:dc:90:46:24:d9:f0:c2:63:a0:43:b5: 30:f6:38:4c:db:4e:32:cd:51:07:a8:49:5d:5b:30: 36:e9:49:30:6e:fd:63:4b:50:78:4e:24:de:cb:36: fe:81:15:99:3c:97:55:e2:e4:e7:f4:79:70:f5:de: 19:c3:dd:7b:7e:32:41:31:63:a0:3e:3a:95:b0:21: f0:fa:ff:8c:27:50:61:ef:99:98:3b:82:66:ef:6e: 0a:46:75:eb:f4:d3:3a:4b:ed:a1:fa:9d:16:9e:2f: de:9d:45:9e:84:0a:bc:e1:14:57:10:32:3c:94:a4: 82:57:a4:f9:3b:9d:11:30:76:38:e9:f1:9d:d2:ed: ec:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:24:03:3A:91:CE:D0:B2:E2:EC:58:04:A2:87:74:53:FB:59:72:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5409c5cd-2c89-3be0-a0be-b78de6f87761.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:37:59:87:8b:d1:79:46:6c:aa:17:a3:dd:27:b3:c3:02:e3: 68:36:4a:fd:eb:c8:30:de:1a:82:67:0c:52:13:89:c4:df:0d: 30:be:ac:bd:e3:aa:79:b5:64:af:56:44:09:16:7a:5e:3d:74: 61:d7:46:92:14:60:3b:0b:51:22:85:8a:f7:53:3d:63:12:9d: 67:93:60:2e:31:ed:05:45:70:8e:ff:3f:ca:62:58:63:46:6c: fc:6a:f7:54:39:bd:9b:2c:68:4b:92:4c:08:2e:ff:65:83:b4: 5c:de:da:29:d2:92:05:d7:61:75:4c:c4:e9:b8:64:c0:7d:b8: 86:2a:f7:12:1d:52:e6:51:d3:6e:44:e8:a6:92:a1:a8:44:e9: d1:ff:c2:a7:17:45:58:1c:83:4a:3d:90:2d:eb:91:ed:20:35: 57:82:73:fc:78:47:ec:f9:fe:46:57:2f:5f:39:09:52:78:51: 72:d0:bd:17:e9:33:fa:88:f6:7b:3c:be:01:69:15:66:5a:1e: 73:da:12:00:08:f9:24:ea:0e:94:e2:be:90:82:e5:06:60:01: d4:b0:04:75:93:e3:f9:b3:2f:70:62:97:69:eb:f0:32:29:8f: 84:c7:7c:76:8e:db:05:b2:df:1e:72:9b:eb:6e:23:ad:ca:4d: 2a:ba:ea:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyr2QL+cZKMg+1RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk ZDRmNmIyOTUtOTRmYi00NDdiLWI0NjYtYjlmYTk0ZmVlOTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD1ar6rklhSuHZrwQzmC0xJqfpr+SPoHxP2W PS1GgnI80e0USBkVrGllfeHPrJ+wwpuhTIDtRxZikk0N097tqE03Fa6VKSDhspfU IdH7CJKmNSeJxvLfWFvuHG6Ed+/X2r/HcsezM/BS8hp5E/ZOjX1TuCEYHJ9AEiZl 3JBGJNnwwmOgQ7Uw9jhM204yzVEHqEldWzA26Ukwbv1jS1B4TiTeyzb+gRWZPJdV 4uTn9Hlw9d4Zw917fjJBMWOgPjqVsCHw+v+MJ1Bh75mYO4Jm724KRnXr9NM6S+2h +p0Wni/enUWehAq84RRXEDI8lKSCV6T5O50RMHY46fGd0u3sBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgkAzqRztCy4uxYBKKHdFP7WXKEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNTQwOWM1Y2QtMmM4OS0z YmUwLWEwYmUtYjc4ZGU2Zjg3NzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEI3WYeL0XlGbKoXo90ns8MC42g2Sv3ryDDeGoJnDFITicTfDTC+rL3j qnm1ZK9WRAkWel49dGHXRpIUYDsLUSKFivdTPWMSnWeTYC4x7QVFcI7/P8piWGNG bPxq91Q5vZssaEuSTAgu/2WDtFze2inSkgXXYXVMxOm4ZMB9uIYq9xIdUuZR025E 6KaSoahE6dH/wqcXRVgcg0o9kC3rke0gNVeCc/x4R+z5/kZXL185CVJ4UXLQvRfp M/qI9ns8vgFpFWZaHnPaEgAI+STqDpTivpCC5QZgAdSwBHWT4/mzL3Bil2nr8DIp j4THfHaO2wWy3x5ym+tuI63KTSq66is= -----END CERTIFICATE-----Generated at Fri May 9 07:50:41 2025 by rpki-client