$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/157300c6-da4a-32f8-b4d1-fe1e6a768d94.roa File: 157300c6-da4a-32f8-b4d1-fe1e6a768d94.roa (raw, json) Hash identifier: iYXqwCm6pIYTjpcZlbZwXGZHcY0vzWxvd8vFOlENZKc= Subject key identifier: A9:D1:7F:A1:B7:F2:9F:61:29:9A:B1:67:36:2F:1F:20:6A:0F:7B:93 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A00DAD8537CC1A04AEEE14300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/157300c6-da4a-32f8-b4d1-fe1e6a768d94.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 16625 IP address blocks: 184.28.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:d8:53:7c:c1:a0:4a:ee:e1:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=722b9416-fcdb-43d4-ae40-0a6b6616f1ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:33:91:e0:0f:50:5c:e2:2d:09:d2:a3:b1:c2: 4c:9c:9f:35:7a:4a:c8:f3:27:01:47:c1:04:76:de: 4e:84:93:76:75:f7:ac:ad:24:a2:50:aa:96:02:52: 45:17:77:6e:95:50:12:4b:cd:98:1e:12:cc:3b:fd: b6:59:fc:b5:82:cb:92:04:91:44:2e:79:d0:b9:d9: 37:ff:c1:f4:7c:69:a3:b9:70:24:1b:a3:bb:b5:5b: 1d:31:2f:9e:93:0d:2f:2b:08:02:29:5f:db:40:73: 72:e6:3e:a0:d8:b2:5c:c9:42:20:94:a9:2c:4b:72: f4:17:bc:55:f7:e1:ef:cf:08:17:d0:9d:c6:5e:b0: 2f:5a:37:96:6b:ac:b8:50:56:18:15:8f:3e:08:ac: f4:c5:d8:bd:1c:6d:4f:d6:97:59:63:8c:0d:81:68: 12:d3:8e:16:36:3b:13:af:84:6c:2c:3f:29:3f:dd: 23:fe:8d:cc:24:01:90:db:ce:44:1e:28:2e:a1:1f: 58:1c:c0:9e:c5:a3:96:75:dc:af:78:ff:97:25:4a: 37:62:87:da:e0:05:41:a7:ee:4f:7e:8b:81:e1:41: 5b:14:80:d1:53:a1:3c:89:f5:74:5a:ff:b6:df:e3: 7c:df:30:cb:22:00:ba:71:f6:04:94:cc:91:a2:b4: 82:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D1:7F:A1:B7:F2:9F:61:29:9A:B1:67:36:2F:1F:20:6A:0F:7B:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/157300c6-da4a-32f8-b4d1-fe1e6a768d94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.28.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:5f:75:0d:53:43:dc:e5:2d:a6:c6:be:be:39:a1:91:56:71: 29:f5:56:12:a5:fa:9f:57:8d:cd:b1:91:51:f9:de:9b:3f:15: 7f:ac:43:ad:8a:4d:e1:55:5e:a0:9b:84:ce:b8:2c:ea:60:1e: 21:10:8f:cd:80:46:22:c7:ba:19:e0:40:3d:b7:12:89:ca:3c: ab:69:9d:7d:8a:79:ce:cf:db:23:c5:b6:16:5b:ed:db:03:bc: 53:7c:fb:10:d9:1c:28:56:9b:84:f3:bb:14:c0:d8:7a:d1:4f: dd:dc:da:67:a9:c5:42:5e:66:21:f1:84:34:1c:a8:49:fc:ce: 28:6c:cb:83:fa:92:c4:68:d9:ef:01:fa:dd:90:5f:d2:d7:34: dc:3e:b1:21:4d:40:96:6b:0a:3e:97:28:23:c6:3b:ff:a3:f8: 9d:99:f9:ad:06:4a:da:a2:47:10:dd:71:e0:d9:26:8f:34:a2: 6c:4b:9a:89:a8:22:f6:40:82:87:4d:53:40:6e:ae:1e:e4:88: f8:77:4b:00:ba:78:6c:a9:c5:6d:d8:94:ab:f8:0c:c9:b4:87: b1:bb:06:7f:6a:a3:85:b7:82:61:95:ec:87:eb:42:73:8f:b4: 3a:10:c6:f5:b8:41:5d:24:87:50:c7:1d:ea:c9:0c:5b:cd:da: 6c:85:cb:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2thTfMGgSu7hQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk NzIyYjk0MTYtZmNkYi00M2Q0LWFlNDAtMGE2YjY2MTZmMWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zOR4A9QXOItCdKjscJMnJ81ekrI8ycBR8EE dt5OhJN2dfesrSSiUKqWAlJFF3dulVASS82YHhLMO/22Wfy1gsuSBJFELnnQudk3 /8H0fGmjuXAkG6O7tVsdMS+ekw0vKwgCKV/bQHNy5j6g2LJcyUIglKksS3L0F7xV 9+HvzwgX0J3GXrAvWjeWa6y4UFYYFY8+CKz0xdi9HG1P1pdZY4wNgWgS044WNjsT r4RsLD8pP90j/o3MJAGQ285EHiguoR9YHMCexaOWddyveP+XJUo3Yofa4AVBp+5P fouB4UFbFIDRU6E8ifV0Wv+23+N83zDLIgC6cfYElMyRorSC8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnRf6G38p9hKZqxZzYvHyBqD3uTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTU3MzAwYzYtZGE0YS0z MmY4LWI0ZDEtZmUxZTZhNzY4ZDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuBzEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9fdQ1TQ9zlLabGvr45oZFWcSn1VhKl+p9Xjc2xkVH53ps/FX+sQ62K TeFVXqCbhM64LOpgHiEQj82ARiLHuhngQD23EonKPKtpnX2Kec7P2yPFthZb7dsD vFN8+xDZHChWm4TzuxTA2HrRT93c2mepxUJeZiHxhDQcqEn8zihsy4P6ksRo2e8B +t2QX9LXNNw+sSFNQJZrCj6XKCPGO/+j+J2Z+a0GStqiRxDdceDZJo80omxLmomo IvZAgodNU0Burh7kiPh3SwC6eGypxW3YlKv4DMm0h7G7Bn9qo4W3gmGV7IfrQnOP tDoQxvW4QV0kh1DHHerJDFvN2myFy3I= -----END CERTIFICATE-----Generated at Sat Jun 7 23:06:45 2025 by rpki-client