$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5fd2d5ae-19ec-3bd0-b1fe-5367fd7e1727.roa File: 5fd2d5ae-19ec-3bd0-b1fe-5367fd7e1727.roa (raw, json) Hash identifier: xJPQGls+K+RuVopLY5pVAtA0XAW9fjl+RkbuqOtB9eo= Subject key identifier: 1D:F5:E9:F5:B9:83:E9:C9:F6:E2:9F:5D:79:5D:F6:44:4D:46:0D:06 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849C4D4C790F0695E023E322530 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5fd2d5ae-19ec-3bd0-b1fe-5367fd7e1727.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 9009 IP address blocks: 192.253.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:c7:90:f0:69:5e:02:3e:32:25:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=1a3b4a4c-2ba9-4dc1-a40c-8b746f6da3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9a:ca:0d:09:38:98:a3:f7:9d:2b:7f:2a:b7: 62:5e:11:c9:f4:fc:ad:5f:69:8c:74:4b:0f:f2:20: c5:67:8e:40:74:98:d9:07:46:47:76:a0:6c:64:eb: cd:7c:51:e1:72:7e:78:bd:84:31:f2:21:9e:c0:2b: 67:e7:7f:fd:2c:e1:da:cc:4c:88:13:56:02:59:19: 2a:06:79:36:57:f5:55:20:92:cc:5d:c9:c8:b6:2d: 89:0b:85:bd:7d:73:00:a8:b2:a5:98:43:e5:d5:bc: 5b:b0:52:70:40:22:1d:cc:9d:95:61:f4:9c:4d:62: d0:be:b1:9a:e4:b0:cc:51:fd:a0:1f:b9:bf:b3:50: b7:98:a5:a1:c5:a4:04:fd:b7:0d:75:8e:4a:f3:0d: da:34:aa:1f:ef:09:24:38:e3:5a:d7:75:97:20:03: 36:05:71:00:ff:bc:d3:fc:80:d1:65:98:4a:e0:73: 2b:1d:0c:5a:99:66:89:dc:d1:f7:00:72:13:67:9f: 05:dd:fd:73:9f:7b:be:a7:0e:1a:54:f7:f0:dd:23: e1:81:2d:89:b3:62:32:83:f7:2f:48:ab:b6:26:1d: 20:cd:c8:7b:8d:be:f4:46:08:32:a7:ac:d5:90:ff: ca:99:77:e8:99:64:f1:66:52:bc:ae:dc:7b:e9:07: a3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F5:E9:F5:B9:83:E9:C9:F6:E2:9F:5D:79:5D:F6:44:4D:46:0D:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5fd2d5ae-19ec-3bd0-b1fe-5367fd7e1727.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:3b:3f:56:8f:f9:33:33:c8:b0:59:fa:e9:33:a5:49:61:8b: bb:9a:67:42:0a:60:dc:f5:95:69:35:36:6b:cb:8d:a6:3a:59: 3a:62:cc:c1:84:96:54:0e:1d:58:61:61:85:2d:d1:8f:bb:23: 10:14:3c:fe:ae:a6:57:d2:d9:fc:b0:54:67:38:44:92:06:19: 22:00:a4:6a:f9:79:54:3c:1e:52:e6:54:95:7f:7b:56:07:bf: ca:46:5f:d7:ac:c7:32:02:d9:0e:8e:65:55:d9:76:89:5c:05: a3:db:5b:d6:15:3e:ce:f6:d5:b6:4a:c4:4c:05:1f:4b:b2:05: dc:bf:66:1e:64:ac:3f:69:ff:58:c3:b8:53:32:a1:3a:d1:e3: 1c:1b:2a:19:94:82:c1:58:a5:17:7d:c6:66:93:53:8c:08:91: 43:20:a1:97:86:f9:f0:03:92:80:f8:b9:43:62:35:f6:c7:46: d7:81:f5:a2:df:0b:0b:19:43:ca:62:c9:de:aa:41:10:2e:82: ac:bd:33:67:88:20:93:8e:72:46:fb:88:79:92:79:24:b4:c1: 04:0d:e5:dc:23:9c:3b:03:50:81:ff:27:5c:06:75:38:11:e4: 20:53:2d:e9:a9:4f:de:96:e7:45:ac:23:1f:f6:34:9b:c4:d3: 68:e7:94:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1MeQ8GleAj4yJTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MWEzYjRhNGMtMmJhOS00ZGMxLWE0MGMtOGI3NDZmNmRhM2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArprKDQk4mKP3nSt/KrdiXhHJ9PytX2mMdEsP 8iDFZ45AdJjZB0ZHdqBsZOvNfFHhcn54vYQx8iGewCtn53/9LOHazEyIE1YCWRkq Bnk2V/VVIJLMXcnIti2JC4W9fXMAqLKlmEPl1bxbsFJwQCIdzJ2VYfScTWLQvrGa 5LDMUf2gH7m/s1C3mKWhxaQE/bcNdY5K8w3aNKof7wkkOONa13WXIAM2BXEA/7zT /IDRZZhK4HMrHQxamWaJ3NH3AHITZ58F3f1zn3u+pw4aVPfw3SPhgS2Js2Iyg/cv SKu2Jh0gzch7jb70Rggyp6zVkP/KmXfomWTxZlK8rtx76Qej4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB316fW5g+nJ9uKfXXld9kRNRg0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNWZkMmQ1YWUtMTllYy0z YmQwLWIxZmUtNTM2N2ZkN2UxNzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP3/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFE7P1aP+TMzyLBZ+ukzpUlhi7uaZ0IKYNz1lWk1NmvLjaY6WTpizMGE llQOHVhhYYUt0Y+7IxAUPP6uplfS2fywVGc4RJIGGSIApGr5eVQ8HlLmVJV/e1YH v8pGX9esxzIC2Q6OZVXZdolcBaPbW9YVPs721bZKxEwFH0uyBdy/Zh5krD9p/1jD uFMyoTrR4xwbKhmUgsFYpRd9xmaTU4wIkUMgoZeG+fADkoD4uUNiNfbHRteB9aLf CwsZQ8piyd6qQRAugqy9M2eIIJOOckb7iHmSeSS0wQQN5dwjnDsDUIH/J1wGdTgR 5CBTLempT96W50WsIx/2NJvE02jnlEc= -----END CERTIFICATE-----Generated at Sat May 10 18:55:43 2025 by rpki-client