$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a000c93d-58c2-3617-bfe1-38ebbdbd7901.roa File: a000c93d-58c2-3617-bfe1-38ebbdbd7901.roa (raw, json) Hash identifier: pOCps/9oXhcepqo/SuhAEfMH78W4KaUrxjOqBIQMTzQ= Subject key identifier: F5:F6:21:30:51:BD:B1:57:44:F7:E5:02:E6:CE:2C:01:34:1F:AA:42 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849C0A4E9E8A922668C42F6F4B0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a000c93d-58c2-3617-bfe1-38ebbdbd7901.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 396356 IP address blocks: 192.253.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:e9:e8:a9:22:66:8c:42:f6:f4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=1f400d31-5efa-47a4-8c5d-c9827a772104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2a:21:5e:c1:a8:7d:1c:5c:25:c4:d0:7b:c4: 3c:e6:36:98:df:3f:14:44:93:74:eb:cc:e5:2b:58: 38:c3:f4:27:f0:f2:ec:16:19:c2:2f:9a:76:01:5b: 9c:4e:e9:8e:20:a9:9c:85:e4:0c:5f:57:9d:e9:16: 4b:c3:8d:ee:88:29:96:60:b4:82:87:9a:fc:f4:1b: 34:c9:36:f0:30:d4:b0:64:40:e9:d4:76:44:c9:bf: fd:ea:06:ca:a7:59:45:0c:a6:86:a4:15:1c:cd:f6: 73:9e:9e:77:8f:14:5c:9b:63:4e:53:4c:e9:a9:7c: 4f:2b:9e:18:3e:37:28:90:43:fa:a0:31:ae:90:9f: 0a:8a:f1:3b:ba:69:af:fc:15:b3:e5:ca:eb:9e:0f: 07:25:76:2e:dd:ed:c9:a5:d8:6e:75:7d:ea:50:39: 82:49:5e:27:69:74:22:ba:80:5a:b7:1b:23:5b:56: a7:93:5f:e4:0b:c7:16:15:61:ba:05:7c:c6:73:53: c1:5f:61:17:56:44:5b:d6:da:4f:ea:e2:24:59:75: 53:35:e5:04:81:14:f4:40:f5:e8:a0:a6:7b:12:5b: 9a:7a:26:ab:48:78:ed:2e:0d:0d:92:8b:99:41:18: 85:41:9e:eb:06:63:e8:c5:34:bf:74:58:ba:02:45: d5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F6:21:30:51:BD:B1:57:44:F7:E5:02:E6:CE:2C:01:34:1F:AA:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a000c93d-58c2-3617-bfe1-38ebbdbd7901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:a7:be:3d:3c:5b:b6:39:22:fc:20:1f:36:04:cd:ba:61:2f: ec:41:e3:dc:f7:54:70:0f:af:fd:24:4a:ba:9b:48:0c:5f:49: cf:01:2b:33:c2:73:13:83:73:11:dd:27:dc:e9:52:d3:eb:31: 3b:5d:5d:d6:cd:e1:83:da:0d:07:ea:18:b1:c8:51:bb:79:f5: c7:4f:7c:85:a9:b1:43:43:71:9f:9d:40:65:35:23:86:ca:67: f6:48:af:05:76:08:11:2d:60:b0:2a:1d:02:e9:ce:f6:bc:98: 70:e2:9a:8e:b4:56:f7:6d:15:27:26:08:f5:8e:63:a6:c0:8b: 25:c3:de:b6:72:4e:0e:0b:0d:eb:6c:b9:c0:aa:ef:f8:64:f4: ef:4d:b5:f2:23:f3:4b:a5:11:c2:32:18:d0:6f:bb:0e:4e:8e: 30:cc:71:9b:3e:61:7a:0f:44:e4:b6:f6:a3:7c:87:0f:30:13: e6:48:33:2f:91:53:93:1b:78:a4:ce:cd:bb:ef:a0:7c:56:ae: 4e:b9:c3:f8:39:6d:42:3c:99:74:7a:f1:62:37:10:1e:fe:4a: 5b:9f:48:b1:96:17:5f:bc:54:75:1a:67:2e:38:54:51:94:2e: d7:55:d1:50:25:7c:80:99:ef:c0:a7:6e:5e:19:3d:c9:2e:24: 3c:5e:c8:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApOnoqSJmjEL29LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MWY0MDBkMzEtNWVmYS00N2E0LThjNWQtYzk4MjdhNzcyMTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiohXsGofRxcJcTQe8Q85jaY3z8URJN068zl K1g4w/Qn8PLsFhnCL5p2AVucTumOIKmcheQMX1ed6RZLw43uiCmWYLSCh5r89Bs0 yTbwMNSwZEDp1HZEyb/96gbKp1lFDKaGpBUczfZznp53jxRcm2NOU0zpqXxPK54Y PjcokEP6oDGukJ8KivE7ummv/BWz5crrng8HJXYu3e3JpdhudX3qUDmCSV4naXQi uoBatxsjW1ank1/kC8cWFWG6BXzGc1PBX2EXVkRb1tpP6uIkWXVTNeUEgRT0QPXo oKZ7EluaeiarSHjtLg0NkouZQRiFQZ7rBmPoxTS/dFi6AkXV+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPX2ITBRvbFXRPflAubOLAE0H6pCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTAwMGM5M2QtNThjMi0z NjE3LWJmZTEtMzhlYmJkYmQ3OTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP33MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCnvj08W7Y5IvwgHzYEzbphL+xB49z3VHAPr/0kSrqbSAxfSc8BKzPC cxODcxHdJ9zpUtPrMTtdXdbN4YPaDQfqGLHIUbt59cdPfIWpsUNDcZ+dQGU1I4bK Z/ZIrwV2CBEtYLAqHQLpzva8mHDimo60VvdtFScmCPWOY6bAiyXD3rZyTg4LDets ucCq7/hk9O9NtfIj80ulEcIyGNBvuw5OjjDMcZs+YXoPROS29qN8hw8wE+ZIMy+R U5MbeKTOzbvvoHxWrk65w/g5bUI8mXR68WI3EB7+SlufSLGWF1+8VHUaZy44VFGU LtdV0VAlfICZ78Cnbl4ZPckuJDxeyHE= -----END CERTIFICATE-----Generated at Sun May 11 10:45:22 2025 by rpki-client