$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f584cf5-7a4e-3ab8-9154-b6fd7f99cf28.roa File: 0f584cf5-7a4e-3ab8-9154-b6fd7f99cf28.roa (raw, json) Hash identifier: DWd1xZvPO89Y0KBgX350ltHDcXqP0L0ZIWhf92PUNd4= Subject key identifier: 07:BD:D0:CD:56:27:77:F8:A6:A6:8A:5B:FD:D3:2A:E8:54:3F:C7:E9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490306E53EBE4177E0EDF58340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f584cf5-7a4e-3ab8-9154-b6fd7f99cf28.roa Signing time: Wed 26 Feb 2025 14:55:09 +0000 ROA not before: Wed 26 Feb 2025 14:55:09 +0000 ROA not after: Tue 27 May 2025 13:55:09 +0000 asID: 16625 IP address blocks: 184.28.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:03:06:e5:3e:be:41:77:e0:ed:f5:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 26 14:55:09 2025 GMT Not After : May 27 13:55:09 2025 GMT Subject: CN=70d17887-eaf1-48c1-9531-31cfc046ab8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4a:15:f8:ca:6e:7c:6e:48:9f:e3:d3:57:fd: c3:1b:26:c9:11:57:d4:a0:d2:6b:18:ce:ec:68:16: 23:53:74:bb:bb:17:0f:85:40:3b:bb:ab:c5:91:2e: d0:44:dd:47:d7:01:aa:d3:01:ab:4f:fd:27:b8:f8: 7e:2e:5d:40:56:d4:4f:cb:32:b1:f1:98:bd:6e:1c: 5c:b6:3b:8d:f8:28:80:89:e8:62:b0:5b:60:95:92: fe:01:17:0d:e2:b7:f2:a4:55:1a:7a:09:83:cd:f5: 07:41:f7:ab:55:c0:fa:d1:d0:e1:97:eb:28:ac:ec: f1:4c:29:20:1c:23:4c:d2:ef:db:bc:1c:f2:9e:60: 14:0c:ab:79:2a:89:fd:06:2d:50:fd:a2:68:4c:53: c1:97:d5:1f:fe:20:1a:ee:07:30:41:4a:52:78:2c: 4f:73:92:fd:0e:31:3d:bc:36:75:a2:63:66:fa:f2: f8:46:1f:5f:20:dd:6a:ba:bf:08:95:ff:87:c7:bc: de:9c:11:2b:e3:81:35:21:a2:e8:70:22:b9:44:fb: c0:ba:ad:78:bf:68:92:45:4f:ba:18:41:f2:c3:3a: 15:9c:20:64:70:60:00:d8:a8:66:01:0f:52:71:70: fb:50:6c:79:44:9b:74:47:09:05:bf:fd:36:97:0f: 0b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BD:D0:CD:56:27:77:F8:A6:A6:8A:5B:FD:D3:2A:E8:54:3F:C7:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f584cf5-7a4e-3ab8-9154-b6fd7f99cf28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.28.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a0:c8:55:c1:7a:ea:fb:92:05:30:46:c9:e2:c7:76:3e:7a: ad:b2:62:fc:01:fa:86:67:8a:79:d3:2c:33:c5:a1:1d:71:3d: 55:90:5d:73:77:5f:06:ec:ef:3d:ae:95:44:ed:33:fa:6a:f1: e4:b0:0d:09:d6:cf:88:9d:10:c3:5f:de:c1:86:82:57:df:34: c2:48:1c:d2:1f:e6:20:2a:e3:5e:64:14:18:0b:16:e7:37:e4: 3d:5c:47:d2:e7:34:d0:ec:95:8c:9d:50:47:6c:23:c0:89:7e: 7d:e3:8a:08:e3:fc:73:16:af:bb:4b:d4:95:5c:4a:25:6d:44: 37:c0:3c:1e:db:1c:85:b1:c9:81:9d:e9:31:7f:63:66:e8:f6: a3:5d:c0:25:82:19:01:66:cc:f9:dc:95:01:f5:99:1d:9a:4e: ed:9c:d9:10:d5:31:0d:d8:44:b2:99:d8:96:45:01:b8:56:d1: b7:97:e4:1a:24:97:a2:5b:bd:db:94:28:c4:91:d2:24:ea:1b: 3a:7a:95:e7:bb:3e:67:2d:f3:5e:c5:4e:a6:fb:cc:3f:f8:3f: 38:0e:28:6e:58:d6:a0:81:96:cd:74:e5:56:35:5d:94:f4:90: db:96:ee:47:17:fb:e0:52:9f:ea:76:ea:c2:ac:c3:23:9c:27: 99:91:1e:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkDBuU+vkF34O31g0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIyNjE0NTUwOVoXDTI1MDUyNzEzNTUwOVowLzEtMCsGA1UEAxMk NzBkMTc4ODctZWFmMS00OGMxLTk1MzEtMzFjZmMwNDZhYjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0koV+MpufG5In+PTV/3DGybJEVfUoNJrGM7s aBYjU3S7uxcPhUA7u6vFkS7QRN1H1wGq0wGrT/0nuPh+Ll1AVtRPyzKx8Zi9bhxc tjuN+CiAiehisFtglZL+ARcN4rfypFUaegmDzfUHQferVcD60dDhl+sorOzxTCkg HCNM0u/bvBzynmAUDKt5Kon9Bi1Q/aJoTFPBl9Uf/iAa7gcwQUpSeCxPc5L9DjE9 vDZ1omNm+vL4Rh9fIN1qur8Ilf+Hx7zenBEr44E1IaLocCK5RPvAuq14v2iSRU+6 GEHywzoVnCBkcGAA2KhmAQ9ScXD7UGx5RJt0RwkFv/02lw8LsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAe90M1WJ3f4pqaKW/3TKuhUP8fpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGY1ODRjZjUtN2E0ZS0z YWI4LTkxNTQtYjZmZDdmOTljZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuBzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEegyFXBeur7kgUwRsnix3Y+eq2yYvwB+oZninnTLDPFoR1xPVWQXXN3 Xwbs7z2ulUTtM/pq8eSwDQnWz4idEMNf3sGGglffNMJIHNIf5iAq415kFBgLFuc3 5D1cR9LnNNDslYydUEdsI8CJfn3jigjj/HMWr7tL1JVcSiVtRDfAPB7bHIWxyYGd 6TF/Y2bo9qNdwCWCGQFmzPnclQH1mR2aTu2c2RDVMQ3YRLKZ2JZFAbhW0beX5Bok l6JbvduUKMSR0iTqGzp6lee7Pmct817FTqb7zD/4PzgOKG5Y1qCBls105VY1XZT0 kNuW7kcX++BSn+p26sKswyOcJ5mRHq8= -----END CERTIFICATE-----Generated at Fri Mar 14 15:01:15 2025 by rpki-client