$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cd53a96-7f2c-343b-a51d-138857f8de1a.roa File: 2cd53a96-7f2c-343b-a51d-138857f8de1a.roa (raw, json) Hash identifier: 3mcFF0JhEfLuEabFHjqVqNP5jgIgxKdcdBzzERBRmM8= Subject key identifier: 3D:E3:13:41:3C:46:8A:70:F4:B8:9D:3F:17:CB:AE:D7:31:2F:D0:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849FF7586DD40A43CED865DCC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cd53a96-7f2c-343b-a51d-138857f8de1a.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 16625 IP address blocks: 184.25.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:86:dd:40:a4:3c:ed:86:5d:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=b3c453e7-69c0-436b-9c52-8ace81eefe98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:85:78:a8:42:aa:3f:7d:2a:ad:0f:8f:90: 4d:cb:39:88:6b:2b:b6:0e:ab:32:ac:20:9a:3c:24: 2b:36:b2:bc:be:9c:77:21:d4:b9:3c:0c:5c:4d:5e: 30:e9:5e:b6:e5:59:c8:dd:b7:32:51:7f:c1:a2:f5: 17:d7:b4:aa:eb:4e:25:d1:ea:d0:b0:28:52:1e:b6: 08:68:38:2c:ac:3c:87:be:7d:f7:af:53:ed:35:e1: de:45:55:b9:ca:39:dc:68:05:ef:1a:be:f6:5a:ee: 17:d4:61:a0:a5:b5:8a:40:3b:af:b5:b7:74:fc:70: 94:fd:b2:44:d1:32:bd:0e:01:57:40:1f:0a:1c:f2: 2b:9c:cc:b6:b3:5b:3b:94:27:0e:fc:21:cc:e1:22: e8:5d:b8:ea:8d:09:eb:f2:78:65:69:ed:a3:c1:2b: d9:fe:a3:ce:b0:eb:02:c9:22:a4:4b:63:1c:b4:12: e4:9f:cc:e5:36:20:3a:42:d5:fe:9c:44:bd:67:1a: d0:c6:f5:65:6c:23:bb:76:4a:94:79:7e:cb:f8:ef: 11:dc:a4:01:e4:c7:0f:22:6c:fb:35:1a:7e:66:81: c4:04:66:ab:b0:57:c1:fa:0b:5a:05:31:8e:5c:d6: c8:3d:ea:fb:9f:c6:42:bf:a6:24:1f:65:fa:5b:92: 9b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E3:13:41:3C:46:8A:70:F4:B8:9D:3F:17:CB:AE:D7:31:2F:D0:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cd53a96-7f2c-343b-a51d-138857f8de1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.25.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:bf:e7:27:69:f9:61:d8:35:90:92:56:2d:79:6d:00:4b:30: c5:4a:d7:a2:fc:db:f7:7c:50:9b:aa:0c:ee:18:36:69:a1:bc: 0d:ff:db:4e:e1:0b:7b:cb:03:36:39:6b:86:18:ee:86:60:86: 03:9d:6d:35:66:a5:63:5f:ea:50:e4:4c:55:94:71:e0:8f:02: 00:44:66:05:fc:51:9d:a4:10:6e:c4:36:17:92:3b:47:55:01: ad:f1:f8:84:f5:6f:5d:c9:72:65:56:f2:a4:fe:26:42:9b:48: dc:3b:10:fb:b5:cb:5d:1a:d7:b9:60:8d:a6:f5:fd:cb:fb:f7: 8e:30:7d:3a:aa:d6:6d:0d:55:94:7c:c7:d3:ac:a8:c7:03:58: 51:46:60:00:e0:81:66:34:aa:89:75:14:6c:4a:21:6f:da:8f: ff:d0:3f:74:09:a7:43:41:18:a7:ca:c3:c9:04:4d:30:3e:bd: ea:71:12:75:23:b2:4f:fe:b2:1b:44:80:a6:d0:d8:4c:04:21: 85:61:a1:cf:b0:2a:5c:4f:06:60:5e:1f:87:25:20:11:e1:d0: 15:a0:fb:ad:6f:39:f2:21:fe:5c:f4:d3:98:c3:14:39:0d:f4: 48:95:74:72:13:e0:f5:62:d1:c6:72:04:52:5a:e5:e1:47:57: bc:07:19:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dYbdQKQ87YZdzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk YjNjNDUzZTctNjljMC00MzZiLTljNTItOGFjZTgxZWVmZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjyFeKhCqj99Kq0Pj5BNyzmIayu2DqsyrCCa PCQrNrK8vpx3IdS5PAxcTV4w6V625VnI3bcyUX/BovUX17Sq604l0erQsChSHrYI aDgsrDyHvn33r1PtNeHeRVW5yjncaAXvGr72Wu4X1GGgpbWKQDuvtbd0/HCU/bJE 0TK9DgFXQB8KHPIrnMy2s1s7lCcO/CHM4SLoXbjqjQnr8nhlae2jwSvZ/qPOsOsC ySKkS2MctBLkn8zlNiA6QtX+nES9ZxrQxvVlbCO7dkqUeX7L+O8R3KQB5McPImz7 NRp+ZoHEBGarsFfB+gtaBTGOXNbIPer7n8ZCv6YkH2X6W5KbKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3jE0E8Ropw9LidPxfLrtcxL9BCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmNkNTNhOTYtN2YyYy0z NDNiLWE1MWQtMTM4ODU3ZjhkZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuBnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACy/5ydp+WHYNZCSVi15bQBLMMVK16L82/d8UJuqDO4YNmmhvA3/207h C3vLAzY5a4YY7oZghgOdbTVmpWNf6lDkTFWUceCPAgBEZgX8UZ2kEG7ENheSO0dV Aa3x+IT1b13JcmVW8qT+JkKbSNw7EPu1y10a17lgjab1/cv7944wfTqq1m0NVZR8 x9OsqMcDWFFGYADggWY0qol1FGxKIW/aj//QP3QJp0NBGKfKw8kETTA+vepxEnUj sk/+shtEgKbQ2EwEIYVhoc+wKlxPBmBeH4clIBHh0BWg+61vOfIh/lz005jDFDkN 9EiVdHIT4PVi0cZyBFJa5eFHV7wHGWQ= -----END CERTIFICATE-----Generated at Sat Jun 7 13:54:08 2025 by rpki-client