$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e67216c6-fb7f-3d32-ace4-8f1870a41110.roa File: e67216c6-fb7f-3d32-ace4-8f1870a41110.roa (raw, json) Hash identifier: RbsTjHkmzAaC5/HsVoPk/9iMut5oYTd7EN6mVdJYkxI= Subject key identifier: B2:7E:2B:D2:8B:0D:17:00:09:D6:07:16:2E:43:B9:28:91:22:8B:88 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849C79F647EAF95595D20028220 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e67216c6-fb7f-3d32-ace4-8f1870a41110.roa Signing time: Thu 08 May 2025 01:00:47 +0000 ROA not before: Thu 08 May 2025 01:00:47 +0000 ROA not after: Wed 06 Aug 2025 01:00:47 +0000 asID: 45671 IP address blocks: 172.94.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c7:9f:64:7e:af:95:59:5d:20:02:82:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 8 01:00:47 2025 GMT Not After : Aug 6 01:00:47 2025 GMT Subject: CN=8509a0ed-1e1f-47c3-878f-dd9b193a8afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:03:da:18:4d:78:58:a6:ec:79:c5:68:39:07: 4a:21:8c:de:b1:a8:ec:0c:e9:70:a3:d0:da:59:ea: a9:d4:72:02:28:ab:73:4a:df:80:cc:41:59:43:75: b3:24:a3:72:6b:5a:50:02:b1:ba:9a:88:3c:2c:13: bf:74:8b:4d:0e:b1:9d:9a:68:a7:15:91:4a:bd:9d: 42:c2:ac:c6:d9:f2:99:e2:5d:94:0f:9a:f6:e7:c9: 9e:ac:3b:ec:1d:fd:d5:50:8b:22:d9:71:90:64:46: c8:9f:1d:90:62:91:62:47:f6:0e:f2:74:79:9e:44: af:a4:3f:69:3d:3b:e2:8c:a9:06:c6:f7:2c:b6:b0: f8:a3:aa:e2:92:36:6d:21:df:4a:81:63:66:99:17: 53:32:b3:2c:ce:cd:dd:e3:14:80:c1:08:9e:2d:26: 47:60:ae:45:e0:c1:4b:6d:42:f7:21:eb:45:83:8d: 6f:e5:22:7e:6d:b2:87:0a:61:ae:13:55:12:68:ce: f1:5a:c9:f5:6e:08:93:2d:51:dc:aa:73:d8:1a:0b: 3a:49:bf:be:a0:fa:11:9b:7f:0c:6d:3a:4d:fa:ef: 4c:90:43:5a:3d:45:94:82:72:77:3b:68:a6:b0:d1: 18:a3:42:ae:ca:84:05:f3:01:80:09:ac:46:f2:1a: 15:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7E:2B:D2:8B:0D:17:00:09:D6:07:16:2E:43:B9:28:91:22:8B:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e67216c6-fb7f-3d32-ace4-8f1870a41110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:36:36:56:24:45:39:00:a1:8b:9b:38:7b:b6:2d:38:2d:b9: 39:4d:b0:91:4d:38:f3:bc:4e:fd:6e:02:5e:95:8a:34:51:d1: 29:b0:c3:d5:e9:16:10:f3:bc:31:ab:27:de:6c:5a:78:6f:66: d6:cc:2a:81:e2:bc:f1:d2:47:8b:ab:f2:a4:74:17:56:90:22: a1:30:de:81:d5:08:7c:c6:4c:f7:71:f7:bf:f2:33:cf:a3:69: a3:4a:77:97:e4:55:ff:22:f6:d9:40:b5:27:2c:bf:74:a7:62: a3:4e:28:e1:60:43:13:7d:69:39:c0:40:9d:b1:99:dd:9f:db: 0d:b7:c0:fd:26:6b:89:58:3f:29:9b:6a:88:c1:6b:f2:eb:5d: 99:b5:2d:af:99:3b:aa:0b:81:95:a8:50:f5:44:ed:b1:60:cc: 48:52:d4:8d:ee:b4:96:77:96:d0:14:67:4a:6e:04:c7:a6:4b: 0d:12:0c:7f:04:59:df:bc:70:25:e6:26:2b:8f:1c:6d:6b:9f: 9a:70:a3:e8:d8:5e:e0:e4:62:5f:08:19:85:58:c5:dc:3a:68: cb:a1:fe:89:a9:e1:41:5a:0d:58:9a:75:22:92:eb:f4:64:82: c6:f0:94:33:45:6e:50:0c:1b:74:71:b4:1b:d4:57:dc:5b:0c: 9e:86:85:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnHn2R+r5VZXSACgiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUwODAxMDA0N1oXDTI1MDgwNjAxMDA0N1owLzEtMCsGA1UEAxMk ODUwOWEwZWQtMWUxZi00N2MzLTg3OGYtZGQ5YjE5M2E4YWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAPaGE14WKbsecVoOQdKIYzesajsDOlwo9Da Weqp1HICKKtzSt+AzEFZQ3WzJKNya1pQArG6mog8LBO/dItNDrGdmminFZFKvZ1C wqzG2fKZ4l2UD5r258merDvsHf3VUIsi2XGQZEbInx2QYpFiR/YO8nR5nkSvpD9p PTvijKkGxvcstrD4o6rikjZtId9KgWNmmRdTMrMszs3d4xSAwQieLSZHYK5F4MFL bUL3IetFg41v5SJ+bbKHCmGuE1USaM7xWsn1bgiTLVHcqnPYGgs6Sb++oPoRm38M bTpN+u9MkENaPUWUgnJ3O2imsNEYo0KuyoQF8wGACaxG8hoVcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJ+K9KLDRcACdYHFi5DuSiRIouIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTY3MjE2YzYtZmI3Zi0z ZDMyLWFjZTQtOGYxODcwYTQxMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAII2NlYkRTkAoYubOHu2LTgtuTlNsJFNOPO8Tv1uAl6VijRR0Smww9Xp FhDzvDGrJ95sWnhvZtbMKoHivPHSR4ur8qR0F1aQIqEw3oHVCHzGTPdx97/yM8+j aaNKd5fkVf8i9tlAtScsv3SnYqNOKOFgQxN9aTnAQJ2xmd2f2w23wP0ma4lYPymb aojBa/LrXZm1La+ZO6oLgZWoUPVE7bFgzEhS1I3utJZ3ltAUZ0puBMemSw0SDH8E Wd+8cCXmJiuPHG1rn5pwo+jYXuDkYl8IGYVYxdw6aMuh/omp4UFaDViadSKS6/Rk gsbwlDNFblAMG3RxtBvUV9xbDJ6GhfU= -----END CERTIFICATE-----Generated at Sat May 10 13:33:33 2025 by rpki-client