$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa File: d2eba7e0-6a87-3e70-9830-21cdb930b252.roa (raw, json) Hash identifier: bQVLdw9i2I0y60n8VcP3h0EplhQtVXQADSRJ767/+b8= Subject key identifier: C3:71:04:82:EC:7E:09:F2:EF:22:4A:25:83:CC:AD:93:52:33:E4:3E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849C79F64C75B2DF302F6192B00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 9009 IP address blocks: 172.94.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:64:c7:5b:2d:f3:02:f6:19:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=91f82d9e-ae22-4701-bb52-1856e9cc8221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1a:fc:be:5d:44:cc:2e:19:02:0e:39:2d:65: a3:fa:33:ee:f6:6b:34:02:42:9c:6a:45:63:59:57: 55:02:de:90:8f:17:f0:f5:e4:b1:8f:9e:1e:0c:03: 8b:95:b2:32:2a:a5:87:2a:e3:33:e7:07:e2:4c:c7: 0e:cf:61:93:4a:f4:db:9a:3e:f2:e7:2a:30:33:18: e6:bb:c0:42:f0:53:2b:20:99:e2:a0:32:89:d1:31: d9:72:23:48:65:29:a9:47:24:26:33:5f:39:a9:fa: 8f:2d:27:87:8c:65:ef:b4:9c:51:1e:36:ac:c7:2a: c2:92:06:5d:4f:bd:66:41:8a:e8:4b:f3:dc:72:a5: df:0a:55:6d:df:40:be:8d:fd:f8:d1:d2:4c:67:76: ed:c4:65:0e:32:7d:7d:87:2f:5d:15:ed:d5:8b:da: c7:76:18:28:ef:d6:c7:40:2f:bc:85:ae:6b:89:dc: e6:37:5c:53:20:b8:17:3d:05:81:10:ef:a2:aa:3a: 8f:e9:bb:52:68:64:26:ad:12:fd:e0:ec:ab:e0:99: 2b:f8:be:b7:6f:06:4b:94:fb:5a:7b:6a:5b:3c:6b: 59:25:3b:4d:a0:25:73:73:f2:5e:58:0f:e3:27:2a: 6a:15:34:65:22:63:e4:46:d4:a4:99:cf:fb:de:23: 65:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:71:04:82:EC:7E:09:F2:EF:22:4A:25:83:CC:AD:93:52:33:E4:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:eb:01:90:f8:42:ef:33:c2:50:e3:e2:aa:69:db:38:34:3c: 02:54:d8:ed:4f:99:7b:e4:38:0d:19:59:7e:43:06:08:b2:da: ad:d2:bd:6d:19:cb:d4:d4:ed:79:f4:04:08:43:1e:52:29:f2: c0:54:de:62:ea:67:cb:dd:21:1a:bd:49:f7:72:af:78:85:02: e6:d2:56:9e:e1:91:64:90:f8:e3:13:3a:1a:e0:5c:e7:d8:90: 5e:f5:d0:fd:fb:59:28:ab:a6:a4:25:82:0b:71:80:3c:01:28: a0:3e:77:d5:7f:ca:f9:af:ff:c4:92:31:f9:f3:34:05:7f:b3: e0:df:57:80:ab:dc:a9:3c:80:36:39:30:89:e4:3b:fe:0a:13: e8:12:3b:3d:b0:68:ca:67:ed:cd:40:58:e0:82:ac:4c:b0:70: a7:40:82:02:f1:50:83:a8:83:d4:b5:80:c8:2c:d9:54:72:79: 18:fd:ac:fc:72:8a:3a:46:ef:22:71:a2:97:3a:6e:2f:f7:66: 14:f2:6b:8e:2b:25:b2:84:52:f3:68:4f:46:2f:c1:ab:2d:c8: 10:84:c0:38:83:5a:78:75:18:d7:47:63:f7:0a:83:93:ce:f6: ed:51:2d:d8:98:62:b9:2c:14:be:cd:6d:b2:8d:24:3e:38:b9: 5b:e5:03:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn2THWy3zAvYZKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk OTFmODJkOWUtYWUyMi00NzAxLWJiNTItMTg1NmU5Y2M4MjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxr8vl1EzC4ZAg45LWWj+jPu9ms0AkKcakVj WVdVAt6Qjxfw9eSxj54eDAOLlbIyKqWHKuMz5wfiTMcOz2GTSvTbmj7y5yowMxjm u8BC8FMrIJnioDKJ0THZciNIZSmpRyQmM185qfqPLSeHjGXvtJxRHjasxyrCkgZd T71mQYroS/PccqXfClVt30C+jf340dJMZ3btxGUOMn19hy9dFe3Vi9rHdhgo79bH QC+8ha5ridzmN1xTILgXPQWBEO+iqjqP6btSaGQmrRL94Oyr4Jkr+L63bwZLlPta e2pbPGtZJTtNoCVzc/JeWA/jJypqFTRlImPkRtSkmc/73iNleQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNxBILsfgny7yJKJYPMrZNSM+Q+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDJlYmE3ZTAtNmE4Ny0z ZTcwLTk4MzAtMjFjZGI5MzBiMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvrAZD4Qu8zwlDj4qpp2zg0PAJU2O1PmXvkOA0ZWX5DBgiy2q3SvW0Z y9TU7Xn0BAhDHlIp8sBU3mLqZ8vdIRq9Sfdyr3iFAubSVp7hkWSQ+OMTOhrgXOfY kF710P37WSirpqQlggtxgDwBKKA+d9V/yvmv/8SSMfnzNAV/s+DfV4Cr3Kk8gDY5 MInkO/4KE+gSOz2waMpn7c1AWOCCrEywcKdAggLxUIOog9S1gMgs2VRyeRj9rPxy ijpG7yJxopc6bi/3ZhTya44rJbKEUvNoT0YvwastyBCEwDiDWnh1GNdHY/cKg5PO 9u1RLdiYYrksFL7NbbKNJD44uVvlA2s= -----END CERTIFICATE-----Generated at Sun May 11 04:17:29 2025 by rpki-client