$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/781749cb-1550-37ad-a6eb-0a431f92d96a.roa File: 781749cb-1550-37ad-a6eb-0a431f92d96a.roa (raw, json) Hash identifier: wXZ4CdJuCd1fspS2iXMM0CuEJ9nHBweJBSEAyZNEptA= Subject key identifier: EE:2E:5C:00:DF:5C:AE:A6:78:0A:8E:58:01:5A:14:10:0D:76:AE:C6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849B2AF63F760AE38215950F080 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/781749cb-1550-37ad-a6eb-0a431f92d96a.roa Signing time: Wed 30 Apr 2025 13:01:02 +0000 ROA not before: Wed 30 Apr 2025 13:01:02 +0000 ROA not after: Tue 29 Jul 2025 13:01:02 +0000 asID: 53356 IP address blocks: 172.94.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:af:63:f7:60:ae:38:21:59:50:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 30 13:01:02 2025 GMT Not After : Jul 29 13:01:02 2025 GMT Subject: CN=cb3205d3-b2af-4e20-94a6-1a8ff6e3454d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:29:cd:e4:58:18:73:33:d7:6c:43:37:fb:f0: cc:b2:04:6d:3c:c5:26:5e:1a:ec:bd:cc:12:0f:d4: dd:f6:0d:96:e1:93:e5:34:cc:44:7e:e5:84:54:12: 65:34:e2:61:57:20:ba:78:49:fd:93:48:0b:7e:35: 65:11:e2:f9:3c:7b:80:9e:8c:ca:4a:53:7e:f5:c6: e6:e8:4e:f8:c1:79:c5:97:0a:e8:5c:79:78:ba:50: be:78:0a:91:9b:9c:83:20:1c:d7:65:1a:4c:95:a2: 13:35:b4:73:94:44:d3:62:b5:e2:19:30:38:b8:cf: cc:51:2f:27:7b:29:63:4a:5b:f6:3a:8e:cd:de:d2: 21:14:07:3e:1b:88:f9:71:08:ed:05:62:ca:9a:42: f9:d6:23:b9:05:ef:33:32:6d:95:45:86:15:18:1b: 05:26:15:ae:5b:fd:6c:3d:bd:35:77:f5:79:4e:3f: 0c:b2:92:01:2a:4d:8c:4e:13:cf:8b:ee:6e:a6:ce: 93:74:8d:d9:02:54:1e:d7:8b:69:c5:c6:eb:b8:9a: 99:c6:27:75:ef:7d:88:b0:d0:bb:13:53:df:ae:0f: f1:27:91:b5:0c:43:6e:0f:50:11:be:de:f7:15:de: 48:7e:70:34:9e:d5:93:6d:ad:51:cb:45:e5:bb:7c: 24:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2E:5C:00:DF:5C:AE:A6:78:0A:8E:58:01:5A:14:10:0D:76:AE:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/781749cb-1550-37ad-a6eb-0a431f92d96a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c1:8f:45:db:bd:01:ba:89:19:54:4c:15:f2:4f:91:3a:e9: 76:50:60:4f:94:c5:b8:d4:c4:11:5a:53:da:e5:96:ce:19:da: ce:b8:10:f9:3a:ea:24:cf:26:53:97:c4:0f:2a:e8:72:24:69: 9f:14:ba:26:29:28:a4:0d:25:ec:73:4a:9e:6c:1b:73:d1:fe: 07:9b:28:db:10:d7:38:25:ca:03:63:eb:9c:d6:b3:67:92:76: 9a:ba:09:7b:be:00:33:87:d2:e2:1a:04:a7:39:be:38:41:0b: d3:65:95:eb:52:fc:1d:d8:f7:e1:86:de:d3:c0:29:15:89:83: 41:8a:ae:88:74:6b:b2:d3:25:bb:18:79:1f:98:d2:1b:47:f6: 8d:38:38:7e:52:67:a4:b8:91:82:c6:6d:b9:18:f8:46:b4:e3: 53:20:30:bc:fe:bc:bb:0a:d9:6c:fc:aa:de:a9:c4:0f:b5:9e: a9:59:5d:3c:09:fe:b8:4a:d8:16:fb:fc:b9:98:0f:59:5e:12: 38:0b:84:e4:5a:5a:8c:eb:03:34:03:23:2e:50:bc:90:3a:25: b1:75:f6:78:36:f9:93:69:3f:41:eb:fe:b7:ca:61:f3:dd:28: 0a:4f:3d:74:41:57:3b:fe:78:63:48:1a:5d:59:2f:17:a7:74: 50:01:b2:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyr2P3YK44IVlQ8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk Y2IzMjA1ZDMtYjJhZi00ZTIwLTk0YTYtMWE4ZmY2ZTM0NTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCnN5FgYczPXbEM3+/DMsgRtPMUmXhrsvcwS D9Td9g2W4ZPlNMxEfuWEVBJlNOJhVyC6eEn9k0gLfjVlEeL5PHuAnozKSlN+9cbm 6E74wXnFlwroXHl4ulC+eAqRm5yDIBzXZRpMlaITNbRzlETTYrXiGTA4uM/MUS8n eyljSlv2Oo7N3tIhFAc+G4j5cQjtBWLKmkL51iO5Be8zMm2VRYYVGBsFJhWuW/1s Pb01d/V5Tj8MspIBKk2MThPPi+5ups6TdI3ZAlQe14tpxcbruJqZxid1732IsNC7 E1Pfrg/xJ5G1DENuD1ARvt73Fd5IfnA0ntWTba1Ry0Xlu3wkiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4uXADfXK6meAqOWAFaFBANdq7GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzgxNzQ5Y2ItMTU1MC0z N2FkLWE2ZWItMGE0MzFmOTJkOTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvBj0XbvQG6iRlUTBXyT5E66XZQYE+UxbjUxBFaU9rlls4Z2s64EPk6 6iTPJlOXxA8q6HIkaZ8UuiYpKKQNJexzSp5sG3PR/gebKNsQ1zglygNj65zWs2eS dpq6CXu+ADOH0uIaBKc5vjhBC9NlletS/B3Y9+GG3tPAKRWJg0GKroh0a7LTJbsY eR+Y0htH9o04OH5SZ6S4kYLGbbkY+Ea041MgMLz+vLsK2Wz8qt6pxA+1nqlZXTwJ /rhK2Bb7/LmYD1leEjgLhORaWozrAzQDIy5QvJA6JbF19ng2+ZNpP0Hr/rfKYfPd KApPPXRBVzv+eGNIGl1ZLxendFABssI= -----END CERTIFICATE-----Generated at Sun May 11 09:35:14 2025 by rpki-client