$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d250f68-f159-3ac9-8831-621ba06f26a7.roa File: 3d250f68-f159-3ac9-8831-621ba06f26a7.roa (raw, json) Hash identifier: LZun8NTQobppZUWvxt/r94uxbTba5njxKtt6Ay7K2uY= Subject key identifier: 92:A2:3B:E6:70:DD:E1:BE:D3:99:F0:5A:7D:44:E8:E8:87:CE:C9:4A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A00DAD763D516A6B618E43412 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d250f68-f159-3ac9-8831-621ba06f26a7.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 16625 IP address blocks: 184.28.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:d7:63:d5:16:a6:b6:18:e4:34:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=5f2a279f-4364-4610-b058-6be9b7e4e722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:19:b0:0f:65:fe:08:2f:41:4d:88:21:a3:ce: b7:10:fb:95:b3:bf:16:97:d4:56:7b:ca:28:5d:e2: 26:87:d2:c5:0c:bd:14:90:23:d3:8e:f1:cc:50:83: ab:04:c4:d8:28:be:32:ce:5b:d8:2c:93:67:85:5a: e5:18:10:a0:bb:ce:c7:ae:55:be:e0:56:c0:a6:c8: ba:e1:60:c9:a6:6f:49:09:ed:d8:f4:d4:62:18:87: 10:20:68:f9:ea:6a:f1:2b:93:e9:72:0c:ae:cf:5d: c6:03:08:24:73:50:7f:68:3e:96:75:42:7b:4d:31: 04:2a:d3:00:0f:d5:3a:d0:40:41:29:1a:9c:9f:6e: 37:b0:6a:90:1d:84:64:24:ad:23:c8:d3:87:7d:4a: 9e:88:a4:d7:bb:5b:f0:d6:da:05:5e:04:b8:79:88: 71:62:b7:47:3c:24:82:ba:4e:6d:87:7a:f6:38:8d: e4:22:07:c1:94:c3:c1:43:b3:a8:c7:b3:1e:09:bd: 32:f7:49:34:d4:13:18:4b:6e:69:d3:4f:a5:9d:c7: 5f:65:7b:98:5e:24:52:17:4a:64:5f:54:70:40:2a: 53:6f:78:bf:f8:0a:7f:53:27:53:66:e1:26:c4:bd: ce:d6:6d:df:d0:82:bd:7e:ab:36:77:7a:e8:32:ee: 65:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A2:3B:E6:70:DD:E1:BE:D3:99:F0:5A:7D:44:E8:E8:87:CE:C9:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d250f68-f159-3ac9-8831-621ba06f26a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.28.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:83:5e:6d:d3:8d:f7:47:a3:31:67:b2:02:96:38:41:6a:e9: 8b:cb:0f:c3:8b:48:69:18:8b:75:93:f7:56:70:d0:b6:c5:dc: f9:14:1b:88:0c:93:b2:a7:2d:ce:40:63:b6:40:28:d7:c5:c1: 8a:ec:b8:aa:5a:a5:89:26:b6:92:71:3a:58:52:80:c9:1d:af: 2f:25:f5:e8:f9:ba:dd:08:8e:f9:ea:c6:12:f1:87:24:5f:4e: 82:83:85:fb:56:c4:18:47:58:34:bd:a9:6c:0d:80:7a:c6:e3: 04:c5:fc:96:6f:8a:b2:c1:eb:48:3b:47:c6:4d:62:9b:2a:e3: 36:16:7c:58:55:3a:43:26:b1:3f:b8:44:f8:92:fb:c8:74:2c: 70:fd:d5:a5:cc:c2:21:16:6d:b9:bd:63:11:c4:95:45:af:ca: 4c:f1:36:5d:e3:c8:17:be:2e:54:fd:69:cb:54:1e:2f:d8:5c: 5c:33:08:19:28:1a:e3:64:16:5a:ab:43:a0:20:5c:87:c9:7b: 43:31:6d:93:e7:20:a4:4d:64:0d:85:d3:ce:c6:fe:dd:64:a2: 0f:64:46:6f:09:d8:a8:35:6c:d6:bc:09:39:aa:82:b1:d5:86: 18:01:89:f0:f4:2e:35:91:c8:22:7e:1f:30:03:76:5d:2f:cc: f0:6d:03:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2tdj1RamthjkNBIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk NWYyYTI3OWYtNDM2NC00NjEwLWIwNTgtNmJlOWI3ZTRlNzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RmwD2X+CC9BTYgho863EPuVs78Wl9RWe8oo XeImh9LFDL0UkCPTjvHMUIOrBMTYKL4yzlvYLJNnhVrlGBCgu87HrlW+4FbApsi6 4WDJpm9JCe3Y9NRiGIcQIGj56mrxK5Ppcgyuz13GAwgkc1B/aD6WdUJ7TTEEKtMA D9U60EBBKRqcn243sGqQHYRkJK0jyNOHfUqeiKTXu1vw1toFXgS4eYhxYrdHPCSC uk5th3r2OI3kIgfBlMPBQ7Oox7MeCb0y90k01BMYS25p00+lncdfZXuYXiRSF0pk X1RwQCpTb3i/+Ap/UydTZuEmxL3O1m3f0IK9fqs2d3roMu5l0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKiO+Zw3eG+05nwWn1E6OiHzslKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2QyNTBmNjgtZjE1OS0z YWM5LTg4MzEtNjIxYmEwNmYyNmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuBxGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWDXm3TjfdHozFnsgKWOEFq6YvLD8OLSGkYi3WT91Zw0LbF3PkUG4gM k7KnLc5AY7ZAKNfFwYrsuKpapYkmtpJxOlhSgMkdry8l9ej5ut0IjvnqxhLxhyRf ToKDhftWxBhHWDS9qWwNgHrG4wTF/JZvirLB60g7R8ZNYpsq4zYWfFhVOkMmsT+4 RPiS+8h0LHD91aXMwiEWbbm9YxHElUWvykzxNl3jyBe+LlT9actUHi/YXFwzCBko GuNkFlqrQ6AgXIfJe0MxbZPnIKRNZA2F087G/t1kog9kRm8J2Kg1bNa8CTmqgrHV hhgBifD0LjWRyCJ+HzADdl0vzPBtAz0= -----END CERTIFICATE-----Generated at Sun Jun 8 04:24:02 2025 by rpki-client