$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/587c0af4-d8ef-3cf4-b696-234166830955.roa File: 587c0af4-d8ef-3cf4-b696-234166830955.roa (raw, json) Hash identifier: jS10WYXhc6qHR8FvwyWXlcvhzZifR/U+9b7D7+ibe+I= Subject key identifier: 86:79:2D:73:B4:CE:59:37:22:7D:E7:D8:88:88:D3:CD:E6:98:28:39 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849203C7990FB447F0DF6087080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/587c0af4-d8ef-3cf4-b696-234166830955.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 20940 IP address blocks: 184.25.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:79:90:fb:44:7f:0d:f6:08:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=255c53c4-2a27-48fa-8c73-0555bfc46396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c0:b1:d6:e7:1e:bc:7e:c0:06:af:b1:1c:8a: 46:79:80:be:0f:c2:d6:dd:b3:da:9f:56:2c:dd:d4: 24:26:ef:4a:f8:6a:b9:f2:85:ae:ba:dc:5d:4e:aa: 5e:83:13:40:90:6a:19:0f:6c:12:43:34:c7:ba:43: 55:27:f7:bb:40:9f:74:55:b1:92:92:c0:f6:42:b9: 04:2d:3f:56:60:70:4e:0d:a6:7e:2d:39:3f:40:ad: 6c:c9:d0:0a:1d:10:68:5c:ac:5e:4a:ac:22:b6:86: b8:97:f4:13:7a:e3:80:73:00:f7:a9:6a:7d:a7:44: 3e:02:e5:25:50:86:b9:0d:00:2d:4d:67:67:35:03: 0f:34:7f:08:6e:c4:c1:9b:6d:de:b5:dd:23:b2:d0: 98:c0:e6:a4:07:f7:34:64:4a:cf:59:33:8e:71:a4: 64:e1:b1:fc:e0:de:24:13:16:da:57:74:0b:57:2c: c5:22:1b:5c:a0:cc:aa:92:dd:46:7f:31:e5:e9:b6: 59:92:7a:08:f6:f4:5d:0a:a8:1c:c4:a4:88:be:70: 54:c6:f0:d3:c1:ca:af:2e:43:b8:16:12:25:83:c3: 1c:c4:a6:64:31:ae:e5:86:b2:dd:ea:78:31:37:cc: 53:5a:2f:b4:7e:4b:65:bc:95:51:b5:54:72:80:be: 15:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:79:2D:73:B4:CE:59:37:22:7D:E7:D8:88:88:D3:CD:E6:98:28:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/587c0af4-d8ef-3cf4-b696-234166830955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.25.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:db:d1:ca:2d:b7:36:43:71:9f:3b:5f:99:4c:1a:08:9c:16: fd:b6:5e:ce:40:73:de:11:23:c4:22:a1:85:3a:98:ff:73:da: c2:6e:6f:94:78:37:37:e5:e9:59:32:0e:f5:7e:6b:0c:a2:74: 0a:a2:cc:19:49:97:24:ef:c9:77:c8:06:a6:b5:f5:55:9e:03: 7b:c9:85:83:df:07:a3:db:b6:94:d9:60:4f:07:06:b6:ad:5c: ef:a9:f4:f0:6e:05:fa:36:47:73:43:54:d8:6e:b0:60:74:4c: 62:65:19:5c:b6:10:05:38:f1:cb:88:56:1b:27:42:39:20:43: 4b:17:2f:c9:7d:68:c0:c2:5f:d5:bd:58:76:25:f1:73:0f:23: b8:e7:19:8d:d1:b3:d8:56:f6:ee:7d:91:ae:5f:f0:ec:e7:6a: 6e:a8:b4:6a:da:25:20:28:53:d7:7b:04:94:26:72:1f:37:25: b9:96:97:81:0c:16:72:6b:89:b1:21:b1:78:29:ba:1b:92:69: f2:4c:50:87:90:f5:6f:e9:58:4b:88:bc:19:71:a1:ed:0b:c3: 1d:ab:84:29:40:12:1e:29:75:09:cf:27:db:e5:8c:a6:7b:a3: 51:53:1f:76:d6:a3:e8:a7:b0:94:3b:46:cc:2d:8e:d0:bd:bc: cb:72:3a:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPHmQ+0R/DfYIcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk MjU1YzUzYzQtMmEyNy00OGZhLThjNzMtMDU1NWJmYzQ2Mzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sCx1ucevH7ABq+xHIpGeYC+D8LW3bPan1Ys 3dQkJu9K+Gq58oWuutxdTqpegxNAkGoZD2wSQzTHukNVJ/e7QJ90VbGSksD2QrkE LT9WYHBODaZ+LTk/QK1sydAKHRBoXKxeSqwitoa4l/QTeuOAcwD3qWp9p0Q+AuUl UIa5DQAtTWdnNQMPNH8IbsTBm23etd0jstCYwOakB/c0ZErPWTOOcaRk4bH84N4k ExbaV3QLVyzFIhtcoMyqkt1GfzHl6bZZknoI9vRdCqgcxKSIvnBUxvDTwcqvLkO4 FhIlg8McxKZkMa7lhrLd6ngxN8xTWi+0fktlvJVRtVRygL4VrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZ5LXO0zlk3In3n2IiI083mmCg5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTg3YzBhZjQtZDhlZi0z Y2Y0LWI2OTYtMjM0MTY2ODMwOTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBllMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/b0cottzZDcZ87X5lMGgicFv22Xs5Ac94RI8QioYU6mP9z2sJub5R4 Nzfl6VkyDvV+awyidAqizBlJlyTvyXfIBqa19VWeA3vJhYPfB6PbtpTZYE8HBrat XO+p9PBuBfo2R3NDVNhusGB0TGJlGVy2EAU48cuIVhsnQjkgQ0sXL8l9aMDCX9W9 WHYl8XMPI7jnGY3Rs9hW9u59ka5f8Oznam6otGraJSAoU9d7BJQmch83JbmWl4EM FnJribEhsXgpuhuSafJMUIeQ9W/pWEuIvBlxoe0Lwx2rhClAEh4pdQnPJ9vljKZ7 o1FTH3bWo+insJQ7RswtjtC9vMtyOh0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:13:08 2025 by rpki-client