$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ab3b8436-421d-3788-b2c5-acaae9b96fc1.roa File: ab3b8436-421d-3788-b2c5-acaae9b96fc1.roa (raw, json) Hash identifier: xRI4CKZ45a8PpJvJ64Uc0Rft5tMbfuHjVln84Wk/NdQ= Subject key identifier: 4D:9A:C0:F5:94:DF:7E:C2:71:E3:CC:22:DF:F8:C4:06:F7:57:2D:8D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849B2AF639F03DB5155A933B580 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ab3b8436-421d-3788-b2c5-acaae9b96fc1.roa Signing time: Wed 30 Apr 2025 13:01:02 +0000 ROA not before: Wed 30 Apr 2025 13:01:02 +0000 ROA not after: Tue 29 Jul 2025 13:01:02 +0000 asID: 53356 IP address blocks: 172.94.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:af:63:9f:03:db:51:55:a9:33:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 30 13:01:02 2025 GMT Not After : Jul 29 13:01:02 2025 GMT Subject: CN=d33bfbc5-c8fe-4ce8-8f7c-200cf22ed269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6a:42:41:b6:39:a9:61:dc:a3:0b:89:d4:28: 9d:00:df:57:d7:9a:b0:21:29:19:5e:4b:6e:6d:63: 99:d2:ba:35:44:1f:06:66:ae:31:4f:8b:74:69:8c: 44:d3:79:85:d2:16:21:3d:2e:b7:de:53:1c:2d:87: 49:8b:9c:3d:d8:3e:d0:7a:c9:78:f5:ee:c5:22:f9: b5:e4:8a:f0:a7:a1:3c:c8:86:60:7b:ba:d1:4b:3a: 1a:0d:0a:82:20:ee:8e:d6:b7:a7:ad:53:38:da:04: 0f:d2:81:9e:15:5c:cb:c7:63:37:3e:07:dd:06:8c: e4:e0:13:2d:31:3f:4d:ba:58:b5:48:c4:42:55:68: 41:b7:19:ee:9b:cf:23:c5:7c:62:8b:ff:4e:c7:da: 95:55:76:bf:53:db:04:47:02:67:00:c4:94:12:10: 84:b8:de:f0:20:e2:5e:f4:e0:d0:df:25:60:0e:48: 0d:fc:4b:c6:5b:03:dd:41:fc:1b:81:14:ad:ee:b6: ce:4c:4a:c3:01:db:9c:68:2c:b3:90:6a:e3:5a:1f: 74:4d:01:2e:04:c2:68:44:9a:51:1a:42:4b:06:53: aa:04:06:14:a0:5a:46:a3:31:aa:af:ab:2d:7b:88: d9:6c:7e:37:39:29:1f:7b:9a:62:bc:af:8e:54:cc: 8b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9A:C0:F5:94:DF:7E:C2:71:E3:CC:22:DF:F8:C4:06:F7:57:2D:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ab3b8436-421d-3788-b2c5-acaae9b96fc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:30:e6:9e:79:39:a2:4d:ff:03:a9:4c:b2:7c:bb:16:b7:09: c2:b7:11:6a:63:34:ca:d3:86:cf:45:1e:11:ef:6e:80:ed:d9: aa:76:c4:d9:44:54:38:6c:95:b6:55:e1:4d:d4:4b:b5:b6:8d: 80:33:43:d3:b6:85:92:ea:87:84:ef:4e:96:25:90:76:02:85: 37:19:e3:e5:3c:9a:12:97:fa:7c:bb:50:44:50:ba:34:45:e6: 9b:f2:fe:6e:60:85:01:71:91:3b:f7:fb:5d:63:c3:28:e5:ab: e7:0b:29:96:9c:3d:00:32:ad:96:0c:e0:03:de:a0:e6:77:8a: 67:76:4c:38:a2:3f:16:3a:c2:56:b2:7c:c8:b7:7a:85:28:ab: c6:f8:51:ce:c8:5b:93:8f:1d:a7:ab:6d:25:09:77:5f:67:8d: 09:bb:78:64:ba:c4:c2:4f:bc:5b:13:44:43:b7:59:8c:6e:7e: 25:94:94:ab:7f:97:ca:a6:f0:da:15:18:e2:48:9a:02:ac:6d: d8:38:1b:91:5e:79:7c:5e:fb:49:6f:bf:6a:56:9f:99:5c:19: 08:53:89:a8:43:8c:a9:41:71:c8:d3:ed:2e:69:fe:1a:a0:cc: 5a:04:33:6b:e1:2c:be:cb:fc:47:e7:38:3f:d1:2c:ae:b2:e9: d9:bd:8b:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyr2OfA9tRVakztYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk ZDMzYmZiYzUtYzhmZS00Y2U4LThmN2MtMjAwY2YyMmVkMjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGpCQbY5qWHcowuJ1CidAN9X15qwISkZXktu bWOZ0ro1RB8GZq4xT4t0aYxE03mF0hYhPS633lMcLYdJi5w92D7Qesl49e7FIvm1 5Irwp6E8yIZge7rRSzoaDQqCIO6O1renrVM42gQP0oGeFVzLx2M3PgfdBozk4BMt MT9Nuli1SMRCVWhBtxnum88jxXxii/9Ox9qVVXa/U9sERwJnAMSUEhCEuN7wIOJe 9ODQ3yVgDkgN/EvGWwPdQfwbgRSt7rbOTErDAducaCyzkGrjWh90TQEuBMJoRJpR GkJLBlOqBAYUoFpGozGqr6ste4jZbH43OSkfe5pivK+OVMyLPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2awPWU337CcePMIt/4xAb3Vy2NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYWIzYjg0MzYtNDIxZC0z Nzg4LWIyYzUtYWNhYWU5Yjk2ZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEw5p55OaJN/wOpTLJ8uxa3CcK3EWpjNMrThs9FHhHvboDt2ap2xNlE VDhslbZV4U3US7W2jYAzQ9O2hZLqh4TvTpYlkHYChTcZ4+U8mhKX+ny7UERQujRF 5pvy/m5ghQFxkTv3+11jwyjlq+cLKZacPQAyrZYM4APeoOZ3imd2TDiiPxY6wlay fMi3eoUoq8b4Uc7IW5OPHaerbSUJd19njQm7eGS6xMJPvFsTREO3WYxufiWUlKt/ l8qm8NoVGOJImgKsbdg4G5FeeXxe+0lvv2pWn5lcGQhTiahDjKlBccjT7S5p/hqg zFoEM2vhLL7L/EfnOD/RLK6y6dm9i6g= -----END CERTIFICATE-----Generated at Sun May 11 13:17:24 2025 by rpki-client