$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/320c3d8f-e055-30f0-853d-e6909b1680a1.roa File: 320c3d8f-e055-30f0-853d-e6909b1680a1.roa (raw, json) Hash identifier: 8IVruztW/E856D2hu/UdFXDsSJNltdcB2cMu+JlwOWU= Subject key identifier: D8:A5:CC:A5:A0:36:4C:A7:12:80:0E:D3:C2:9B:A1:44:9B:D6:88:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490E16CD1DFF0BDA89C9B9CF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/320c3d8f-e055-30f0-853d-e6909b1680a1.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 20940 IP address blocks: 184.51.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:cd:1d:ff:0b:da:89:c9:b9:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=2e0eae2e-4bb7-43c5-b6c0-ffc55737610a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d8:d4:6a:99:1e:d4:c1:54:fe:13:75:c4:e5: af:6f:38:eb:24:6d:12:0f:2e:47:f7:cc:8f:29:ae: 58:7a:60:9b:16:12:fc:db:4e:fa:b0:12:b3:4c:5c: 85:03:42:49:77:60:1f:fc:46:b6:a6:55:b3:a1:c1: 15:5c:7e:30:9d:98:7f:9e:f9:e3:ca:5e:18:f0:6e: 47:51:c9:20:68:aa:ea:dd:30:c3:ed:29:d8:df:1b: af:82:27:0e:c6:5a:9e:0d:8e:2f:9a:12:bc:3b:29: 4b:6e:f7:bb:de:a0:4d:a8:d9:7a:ba:fb:d0:91:19: 85:c4:5e:ab:fe:35:0f:2f:43:8e:15:ba:3c:e5:63: 69:57:4a:61:42:3a:aa:d9:76:41:1d:c8:20:5c:21: c3:69:61:ee:8d:1c:6c:a6:ad:0d:ad:76:95:f0:6f: c5:b0:9c:fe:54:f0:17:ec:04:42:27:70:c9:76:63: 63:7d:ff:58:63:61:dd:1b:4a:03:34:60:02:ad:38: 1e:5d:6a:d7:8b:2c:44:35:14:d2:06:0d:51:7b:59: 64:3e:2c:0b:ed:7d:6f:d6:21:a9:a1:7d:be:6e:a6: 38:ab:d7:67:6b:5d:14:d0:fd:ef:31:3e:f3:d0:be: 42:1e:fc:7f:f6:7c:9d:5a:84:1f:e3:d6:58:04:d5: 56:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A5:CC:A5:A0:36:4C:A7:12:80:0E:D3:C2:9B:A1:44:9B:D6:88:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/320c3d8f-e055-30f0-853d-e6909b1680a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.51.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:6f:83:c2:6d:76:8d:2d:56:7b:08:81:b5:75:45:c0:88:d9: a9:6c:37:7c:e2:65:d7:48:52:d8:81:7a:cc:7d:ab:26:1b:55: b8:bd:43:8d:1e:ce:82:c5:be:9e:71:29:d0:db:46:e5:36:91: 93:e9:cd:d1:94:50:75:e7:79:5e:9d:e4:d2:4d:fd:1a:96:cd: 1d:0b:93:72:14:d4:2b:7d:7d:0f:8c:bb:72:b1:7a:e3:5f:54: d2:47:80:15:a5:c2:e8:37:26:71:be:14:dc:a3:f8:15:34:25: 41:8e:48:c3:76:65:4c:ec:dd:d3:0a:2a:e8:88:53:ff:2f:70: 8f:e6:91:60:23:d8:2f:f1:ce:a0:f5:2d:eb:04:cb:48:22:6c: 18:d3:23:04:f8:e7:e9:24:51:f9:2d:04:49:dd:50:4a:6e:88: be:64:08:38:b9:15:27:40:ed:91:df:36:43:ee:bb:4c:a1:f9: 72:05:97:e5:5d:0d:a1:32:83:30:01:8b:d7:24:47:7b:d4:1c: 84:57:c8:35:21:21:8e:c2:6f:c8:82:7a:73:c9:1a:43:f7:13: 51:6f:47:80:29:f4:68:cd:b0:4e:4c:7f:3d:35:be:c4:25:48: c7:e3:92:5c:c6:3f:b1:b1:f9:9a:6a:de:76:82:5a:8f:2c:19: d4:3e:fd:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFs0d/wvaicm5z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk MmUwZWFlMmUtNGJiNy00M2M1LWI2YzAtZmZjNTU3Mzc2MTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NjUapke1MFU/hN1xOWvbzjrJG0SDy5H98yP Ka5YemCbFhL82076sBKzTFyFA0JJd2Af/Ea2plWzocEVXH4wnZh/nvnjyl4Y8G5H UckgaKrq3TDD7SnY3xuvgicOxlqeDY4vmhK8OylLbve73qBNqNl6uvvQkRmFxF6r /jUPL0OOFbo85WNpV0phQjqq2XZBHcggXCHDaWHujRxspq0NrXaV8G/FsJz+VPAX 7ARCJ3DJdmNjff9YY2HdG0oDNGACrTgeXWrXiyxENRTSBg1Re1lkPiwL7X1v1iGp oX2+bqY4q9dna10U0P3vMT7z0L5CHvx/9nydWoQf49ZYBNVWrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNilzKWgNkynEoAO08KboUSb1ohCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzIwYzNkOGYtZTA1NS0z MGYwLTg1M2QtZTY5MDliMTY4MGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuDNZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVvg8Jtdo0tVnsIgbV1RcCI2alsN3ziZddIUtiBesx9qyYbVbi9Q40e zoLFvp5xKdDbRuU2kZPpzdGUUHXneV6d5NJN/RqWzR0Lk3IU1Ct9fQ+Mu3KxeuNf VNJHgBWlwug3JnG+FNyj+BU0JUGOSMN2ZUzs3dMKKuiIU/8vcI/mkWAj2C/xzqD1 LesEy0gibBjTIwT45+kkUfktBEndUEpuiL5kCDi5FSdA7ZHfNkPuu0yh+XIFl+Vd DaEygzABi9ckR3vUHIRXyDUhIY7Cb8iCenPJGkP3E1FvR4Ap9GjNsE5Mfz01vsQl SMfjklzGP7Gx+Zpq3naCWo8sGdQ+/Tg= -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:06 2025 by rpki-client