$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e7dd7f22-09ad-374c-8220-bf26207b46b9.roa File: e7dd7f22-09ad-374c-8220-bf26207b46b9.roa (raw, json) Hash identifier: JLYvZ4s23cJ/YM7UAbQYU7q+cs3MaEwiqEbdBXjj7zY= Subject key identifier: AB:3D:DE:A7:78:E1:79:83:F7:4F:CA:63:E7:74:F3:EF:96:C3:8F:D0 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849AFEC7F681F09F98B164EEFD0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e7dd7f22-09ad-374c-8220-bf26207b46b9.roa Signing time: Tue 29 Apr 2025 13:16:48 +0000 ROA not before: Tue 29 Apr 2025 13:16:48 +0000 ROA not after: Mon 28 Jul 2025 13:16:48 +0000 asID: 55154 IP address blocks: 172.94.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:ec:7f:68:1f:09:f9:8b:16:4e:ef:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Apr 29 13:16:48 2025 GMT Not After : Jul 28 13:16:48 2025 GMT Subject: CN=d3be2df2-564d-4f70-9a0d-42fc94b94b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:cb:e4:77:62:25:2a:57:0f:7d:18:4b:33:9e: 92:44:3b:5f:16:0e:94:d2:40:7e:64:00:62:06:79: 14:83:01:a5:8f:3e:d3:3d:09:40:95:12:87:71:1a: 32:45:1e:79:a3:e6:1d:5a:e7:85:e2:a5:96:10:2b: d9:b1:f1:02:3b:79:b7:9c:4a:a0:79:f6:34:40:a6: 21:a1:d3:6b:c8:2d:b4:ce:f0:2f:a9:84:0b:2b:29: 65:53:2b:a7:79:37:c4:de:57:a8:d4:de:ef:d8:e7: 11:9f:d3:96:89:cd:6d:da:36:44:ab:e3:bc:f3:43: fb:54:89:a9:14:e1:a0:87:ce:55:ba:b1:19:c8:c4: 7c:a4:c8:1c:0d:be:3e:f9:b6:3b:74:23:b8:46:76: 84:08:af:91:8b:e6:33:6f:c9:3c:28:f7:a4:89:93: 80:cf:a4:a4:f9:35:5b:24:95:a1:aa:c7:69:b3:27: 8b:86:d5:27:45:8e:6b:ac:7b:84:02:30:18:df:80: 77:df:50:68:29:8d:45:a2:f1:6b:19:5a:8d:00:5b: 01:c7:4f:49:90:02:03:30:26:63:13:d6:00:ef:0c: 08:bb:0a:1c:33:50:67:b8:f0:77:07:c4:b2:9b:4c: 5c:20:8d:38:52:6f:b6:4e:15:2e:f6:43:a0:2a:51: 40:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3D:DE:A7:78:E1:79:83:F7:4F:CA:63:E7:74:F3:EF:96:C3:8F:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e7dd7f22-09ad-374c-8220-bf26207b46b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.94.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ad:a7:05:0a:7c:b0:fe:8d:d3:9a:72:d3:39:98:66:25:2b: 95:5c:ee:b7:31:3c:78:be:5c:66:fd:5e:64:56:58:87:ae:e2: da:6f:52:88:08:9d:19:a4:2c:13:8e:56:38:96:bc:53:89:6f: 2e:cb:9a:0c:fc:10:e6:dd:96:11:7e:ef:92:ed:d2:0e:95:2c: 02:cc:83:4e:36:f3:09:24:d8:19:d3:1f:86:d2:a2:c9:ac:bd: ee:b5:93:18:e5:c5:6a:e0:17:83:9b:0e:c3:e7:bd:0d:9b:da: ea:05:58:95:97:71:82:54:93:07:19:ec:31:89:dc:34:4a:fa: 45:0e:df:76:0f:4f:f4:38:0c:64:5d:5d:42:19:da:60:8c:a8: 23:5c:e7:ad:7b:3e:8e:d1:1c:44:56:a3:48:1a:64:7d:28:15: f9:e5:e0:ba:93:33:94:71:9d:f2:58:19:68:d9:51:3e:e5:94: 1c:d1:a5:dc:9b:48:f9:1c:db:67:01:cf:e1:ab:76:b3:1f:27: aa:c8:71:a0:16:4b:9a:e2:fd:f4:c5:b0:bc:90:b5:0b:10:21: 3c:95:1f:fd:9f:a4:d4:f5:72:38:b7:b3:a0:57:88:6b:fe:e6: be:40:af:93:cc:4f:22:6c:7e:a2:de:f0:28:49:55:26:28:98: 21:6b:5a:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmv7H9oHwn5ixZO79AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDQyOTEzMTY0OFoXDTI1MDcyODEzMTY0OFowLzEtMCsGA1UEAxMk ZDNiZTJkZjItNTY0ZC00ZjcwLTlhMGQtNDJmYzk0Yjk0Yjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Mvkd2IlKlcPfRhLM56SRDtfFg6U0kB+ZABi BnkUgwGljz7TPQlAlRKHcRoyRR55o+YdWueF4qWWECvZsfECO3m3nEqgefY0QKYh odNryC20zvAvqYQLKyllUyuneTfE3leo1N7v2OcRn9OWic1t2jZEq+O880P7VImp FOGgh85VurEZyMR8pMgcDb4++bY7dCO4RnaECK+Ri+Yzb8k8KPekiZOAz6Sk+TVb JJWhqsdpsyeLhtUnRY5rrHuEAjAY34B331BoKY1FovFrGVqNAFsBx09JkAIDMCZj E9YA7wwIuwocM1BnuPB3B8Sym0xcII04Um+2ThUu9kOgKlFAjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKs93qd44XmD90/KY+d08++Ww4/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTdkZDdmMjItMDlhZC0z NzRjLTgyMjAtYmYyNjIwN2I0NmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF52MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFitpwUKfLD+jdOactM5mGYlK5Vc7rcxPHi+XGb9XmRWWIeu4tpvUogI nRmkLBOOVjiWvFOJby7Lmgz8EObdlhF+75Lt0g6VLALMg0428wkk2BnTH4bSosms ve61kxjlxWrgF4ObDsPnvQ2b2uoFWJWXcYJUkwcZ7DGJ3DRK+kUO33YPT/Q4DGRd XUIZ2mCMqCNc5617Po7RHERWo0gaZH0oFfnl4LqTM5RxnfJYGWjZUT7llBzRpdyb SPkc22cBz+GrdrMfJ6rIcaAWS5ri/fTFsLyQtQsQITyVH/2fpNT1cji3s6BXiGv+ 5r5Ar5PMTyJsfqLe8ChJVSYomCFrWnY= -----END CERTIFICATE-----Generated at Wed May 7 14:12:38 2025 by rpki-client