$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d250f68-f159-3ac9-8831-621ba06f26a7.roa File: 3d250f68-f159-3ac9-8831-621ba06f26a7.roa (raw, json) Hash identifier: FVbuBMGKGVG+9dOWDyVT6yVbwnS2ZT2aq9Rn5O5YS6o= Subject key identifier: 12:8F:1D:20:CB:C3:FC:32:BB:65:7F:B7:81:34:B4:9A:75:C9:2D:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584921841C697232CA878A7D5240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d250f68-f159-3ac9-8831-621ba06f26a7.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 184.28.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:1c:69:72:32:ca:87:8a:7d:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=5f81fad0-1937-490e-a7d3-f778e8897bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:66:af:d1:b4:5d:58:57:60:62:14:68:19:b4: 4c:17:85:7c:17:2c:fe:ba:c2:37:69:cc:73:b0:8b: a2:22:7f:fb:15:aa:20:56:d0:5c:67:1e:1e:f3:dc: 7c:ac:4f:de:e4:cd:c8:b8:28:44:f3:f8:d4:a2:49: 96:80:74:15:3f:5b:27:94:6b:05:e5:e0:3a:97:66: 75:98:e8:af:53:f7:32:21:c8:b1:15:f4:17:4c:76: 15:57:7b:0c:35:fd:76:39:23:67:ca:53:19:09:39: ae:10:8a:92:68:28:e4:73:24:05:02:19:81:55:34: b1:19:b0:88:ac:11:c9:bb:e3:df:85:6f:ee:a9:15: e6:8f:82:5a:8e:96:43:22:cc:2f:f8:e7:a1:83:42: f5:67:67:38:11:c8:b6:b9:5f:a5:a8:98:55:71:04: e3:10:c3:f5:92:73:34:c1:78:b1:8a:11:ca:18:41: 3b:ee:61:0d:85:bc:7a:88:2e:e2:1f:ec:c1:ad:52: db:ab:64:e4:19:b4:48:78:30:5f:f5:57:30:94:f4: 49:8e:ff:d8:d0:c8:f7:d6:39:a3:3d:df:04:2a:d5: 64:86:ec:5f:4a:19:e8:dc:10:4c:83:a6:1f:42:40: b4:18:3c:20:4a:cc:9d:5d:55:d0:9c:3c:d1:36:2a: 44:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8F:1D:20:CB:C3:FC:32:BB:65:7F:B7:81:34:B4:9A:75:C9:2D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d250f68-f159-3ac9-8831-621ba06f26a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.28.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:a9:61:f8:84:6d:08:d8:a3:e5:9b:67:f6:81:07:21:50:79: 77:ed:a5:b4:63:32:43:89:19:3e:09:d2:f5:39:46:aa:6c:16: 58:5e:86:74:b8:e1:5e:a3:53:2c:c3:df:be:11:c1:77:5e:da: 05:6d:44:01:82:2f:e3:dc:49:b2:a9:59:89:2e:00:ae:8f:50: 87:61:8d:38:15:30:9b:21:ab:df:ba:b3:81:c6:22:c1:6f:11: 6c:d2:24:64:ba:0a:9a:b6:6f:38:5f:9a:f0:e5:78:4b:a4:15: 10:d4:4a:5f:49:b8:09:bf:91:10:5a:fc:bd:1f:20:2e:19:43: e4:65:ef:0d:f9:33:53:34:68:06:69:25:7d:60:e4:1b:ad:25: 7a:30:fa:86:cb:e1:4b:36:0b:3d:45:b5:d9:85:74:8f:39:c1: 62:57:9b:e3:e7:b3:83:a2:f6:a8:25:53:03:58:a3:24:97:14: e2:a1:8c:db:2f:06:36:af:73:ab:8a:b6:d0:4d:2f:a3:e6:6e: 55:b8:c6:a6:e3:06:ef:4d:7e:9d:61:51:b7:79:df:e1:50:13: 76:bd:76:69:00:9e:ef:62:82:2a:fd:22:4c:1f:e1:3d:43:3b: 49:af:0b:4d:b0:76:c6:20:c8:34:e0:36:f9:ec:3c:6b:1b:f1: 29:63:f6:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhBxpcjLKh4p9UkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NWY4MWZhZDAtMTkzNy00OTBlLWE3ZDMtZjc3OGU4ODk3YmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWav0bRdWFdgYhRoGbRMF4V8Fyz+usI3acxz sIuiIn/7FaogVtBcZx4e89x8rE/e5M3IuChE8/jUokmWgHQVP1snlGsF5eA6l2Z1 mOivU/cyIcixFfQXTHYVV3sMNf12OSNnylMZCTmuEIqSaCjkcyQFAhmBVTSxGbCI rBHJu+PfhW/uqRXmj4JajpZDIswv+Oehg0L1Z2c4Eci2uV+lqJhVcQTjEMP1knM0 wXixihHKGEE77mENhbx6iC7iH+zBrVLbq2TkGbRIeDBf9VcwlPRJjv/Y0Mj31jmj Pd8EKtVkhuxfShno3BBMg6YfQkC0GDwgSsydXVXQnDzRNipEowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKPHSDLw/wyu2V/t4E0tJp1yS3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2QyNTBmNjgtZjE1OS0z YWM5LTg4MzEtNjIxYmEwNmYyNmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuBxGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmpYfiEbQjYo+WbZ/aBByFQeXftpbRjMkOJGT4J0vU5RqpsFlhehnS4 4V6jUyzD374RwXde2gVtRAGCL+PcSbKpWYkuAK6PUIdhjTgVMJshq9+6s4HGIsFv EWzSJGS6Cpq2bzhfmvDleEukFRDUSl9JuAm/kRBa/L0fIC4ZQ+Rl7w35M1M0aAZp JX1g5ButJXow+obL4Us2Cz1FtdmFdI85wWJXm+Pns4Oi9qglUwNYoySXFOKhjNsv Bjavc6uKttBNL6PmblW4xqbjBu9Nfp1hUbd53+FQE3a9dmkAnu9igir9Ikwf4T1D O0mvC02wdsYgyDTgNvnsPGsb8Slj9jw= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:51 2025 by rpki-client