$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa File: d3472d91-6027-3989-8e71-4dc7c885f1fa.roa (raw, json) Hash identifier: GcG+Iq6VtC0UIT+OCv4UqdBvC8OTHmYeodZF0J88+Ag= Subject key identifier: 5F:30:E7:C3:8C:C9:B9:D9:BA:01:4B:47:DA:8E:E7:CA:E2:D0:0F:56 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849C904F643F968BA61683AD520 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 9009 IP address blocks: 172.94.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:f6:43:f9:68:ba:61:68:3a:d5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=98c636c3-347f-43b7-9787-bbb5705a1ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d1:2e:21:3c:9f:02:53:d3:8e:7e:24:83:77: b2:9c:33:d7:23:93:62:b8:ee:92:9d:ac:1e:99:c3: b1:4e:9d:88:28:3f:52:83:24:8b:5c:1b:e2:1c:73: 2d:e3:f6:df:c0:94:f6:a2:1f:c6:28:a4:d3:22:84: 34:4b:7a:ab:b4:34:92:2a:a9:c2:9a:63:71:50:07: 24:a4:89:a2:68:6b:32:35:66:73:db:44:36:61:29: 78:56:d7:46:f4:25:64:47:d4:a9:5d:bc:17:6d:d7: 09:a5:80:16:e1:5e:a7:a8:2b:40:db:c8:b1:04:e4: 7f:f5:be:0e:92:5b:49:08:3e:95:f6:d9:f4:07:bf: 89:a4:2a:d8:f3:89:f2:93:61:18:a0:97:9f:95:92: e0:49:d7:ac:bb:69:5f:36:99:00:fa:3c:82:1b:25: cf:2e:08:01:a5:33:fe:e2:bd:c9:18:67:da:0d:cb: 1b:64:bd:0b:32:35:e4:7c:b9:8a:0c:6b:eb:88:59: c5:0c:df:49:e5:69:2a:d7:70:d6:dd:72:4f:b3:83: 6a:d6:61:04:54:09:8f:30:6d:1f:96:24:52:64:01: 71:81:3e:f5:56:a0:ea:37:dd:a3:a7:e8:55:a6:e7: 71:6e:5e:54:2b:47:e9:4a:d8:c5:74:9b:dc:7c:33: d1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:30:E7:C3:8C:C9:B9:D9:BA:01:4B:47:DA:8E:E7:CA:E2:D0:0F:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d3472d91-6027-3989-8e71-4dc7c885f1fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:03:9d:d4:2d:0a:13:76:db:0c:a3:1c:6f:fc:53:fd:2c:dc: be:a6:10:2c:d8:3b:89:c4:e9:e3:44:3e:55:4e:f0:e6:9c:d5: 48:99:90:0e:e3:bd:69:c0:9a:d4:ad:69:2c:46:bf:0a:14:48: 37:46:b6:c6:22:9e:85:99:e6:ce:81:db:3a:b2:f7:05:99:46: fe:64:cf:eb:68:a0:52:0e:3a:ec:31:71:6a:5c:c2:9d:b1:c0: c8:50:54:5b:4e:1f:0c:f8:10:46:e0:b4:91:71:09:53:99:13: fd:92:5c:42:c2:fa:15:da:52:9d:f9:33:5a:b2:a2:e4:95:1b: 9e:2d:9b:c6:99:a6:90:0b:e9:f2:37:77:68:8c:d5:57:6a:f9: f1:da:8e:f4:53:12:7b:ab:79:5f:19:e2:7a:b9:92:67:bc:1e: b6:c3:0e:6c:11:c7:41:f6:ed:86:54:f1:be:29:ed:12:1d:99: 0e:34:a4:56:87:c9:18:a5:42:ba:72:b1:97:af:02:d8:62:d9: c2:9f:7b:16:7c:4c:98:47:f2:c4:bb:a9:e5:e3:9d:b5:7c:c5: 11:2f:de:a8:1f:8c:25:1f:bf:ef:e2:9c:49:e9:c2:e3:b5:63: a6:d2:ca:e9:df:7e:b7:65:52:56:43:b1:16:8f:0c:dc:2b:4e: 7e:28:56:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBPZD+Wi6YWg61SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk OThjNjM2YzMtMzQ3Zi00M2I3LTk3ODctYmJiNTcwNWExZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidEuITyfAlPTjn4kg3eynDPXI5NiuO6Snawe mcOxTp2IKD9SgySLXBviHHMt4/bfwJT2oh/GKKTTIoQ0S3qrtDSSKqnCmmNxUAck pImiaGsyNWZz20Q2YSl4VtdG9CVkR9SpXbwXbdcJpYAW4V6nqCtA28ixBOR/9b4O kltJCD6V9tn0B7+JpCrY84nyk2EYoJeflZLgSdesu2lfNpkA+jyCGyXPLggBpTP+ 4r3JGGfaDcsbZL0LMjXkfLmKDGvriFnFDN9J5Wkq13DW3XJPs4Nq1mEEVAmPMG0f liRSZAFxgT71VqDqN92jp+hVpudxbl5UK0fpStjFdJvcfDPRKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8w58OMybnZugFLR9qO58ri0A9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDM0NzJkOTEtNjAyNy0z OTg5LThlNzEtNGRjN2M4ODVmMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF4pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEDndQtChN22wyjHG/8U/0s3L6mECzYO4nE6eNEPlVO8Oac1UiZkA7j vWnAmtStaSxGvwoUSDdGtsYinoWZ5s6B2zqy9wWZRv5kz+tooFIOOuwxcWpcwp2x wMhQVFtOHwz4EEbgtJFxCVOZE/2SXELC+hXaUp35M1qyouSVG54tm8aZppAL6fI3 d2iM1Vdq+fHajvRTEnureV8Z4nq5kme8HrbDDmwRx0H27YZU8b4p7RIdmQ40pFaH yRilQrpysZevAthi2cKfexZ8TJhH8sS7qeXjnbV8xREv3qgfjCUfv+/inEnpwuO1 Y6bSyunffrdlUlZDsRaPDNwrTn4oVpM= -----END CERTIFICATE-----Generated at Mon May 12 19:42:16 2025 by rpki-client