$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a838802-460b-36a9-8d26-15afa1570e12.roa File: 5a838802-460b-36a9-8d26-15afa1570e12.roa (raw, json) Hash identifier: cZddp3u1OwNf9sst6ejVwgxmqpzIZvOd/s/G0V1mL+Q= Subject key identifier: 58:2A:25:AF:21:94:74:E7:23:57:C7:02:57:E5:64:A8:81:BA:90:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849E7BA602524BBA0F0281114C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a838802-460b-36a9-8d26-15afa1570e12.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 16625 IP address blocks: 184.27.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:60:25:24:bb:a0:f0:28:11:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=2b2a7a2c-0f54-445c-b9e7-dfc31165429b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:86:84:5a:6e:13:68:5b:8f:1b:dc:ff:62:09: 80:6f:13:fb:af:3f:9c:29:7c:4e:3f:44:29:e0:c5: 03:be:25:cf:09:3e:7a:49:b6:8c:ee:37:c5:bb:34: e6:1a:63:fb:06:58:b4:3d:e1:14:43:aa:e0:6f:31: 6e:3c:23:af:a3:b2:cd:df:76:db:d7:e5:2d:74:ff: bc:a7:ee:9e:9f:39:00:46:88:51:0c:ca:17:50:87: 05:8e:2d:5d:61:18:a7:85:48:6b:86:86:34:7b:a3: da:75:dc:2a:a7:4d:f8:5d:e0:76:57:5f:ba:3b:29: a3:b4:67:f2:83:38:ba:f4:b9:78:e7:71:50:1c:b4: d3:03:07:cf:e5:21:dc:7f:8e:37:e7:ed:3f:4f:9d: 06:4a:d7:58:92:8f:b7:a8:38:07:9e:b1:11:cb:7a: 7c:93:13:07:00:9f:2a:78:7f:65:5d:83:29:55:be: cb:53:f5:ae:87:47:65:9c:d5:98:a2:02:b1:0e:45: 8e:70:13:81:e3:10:f0:4c:3c:19:97:e2:c0:2d:3f: c5:bc:07:11:3d:f2:df:1d:32:98:e0:ef:0f:b5:a6: 08:23:64:10:da:3b:da:8e:23:db:e1:f0:b6:63:40: 82:76:36:ae:04:2c:f8:d6:a0:60:a4:54:34:9d:11: f6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2A:25:AF:21:94:74:E7:23:57:C7:02:57:E5:64:A8:81:BA:90:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a838802-460b-36a9-8d26-15afa1570e12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.27.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:c0:e0:2d:62:95:07:9a:67:74:0d:6d:10:1c:77:eb:4c:aa: 71:1a:7b:ad:e5:c1:a3:9e:4d:6e:52:53:95:4a:e9:01:1d:02: b6:f3:87:ff:cd:dc:fc:64:16:e3:0e:16:6e:70:7c:53:db:a6: be:56:e2:ae:ef:e6:61:48:cb:c7:bd:c0:11:2d:a0:a3:b6:bc: 69:cd:d1:8f:04:8f:0d:80:cd:81:b6:fb:49:7f:96:4f:2e:09: f0:4a:69:1f:9e:9b:ad:1a:35:bd:d5:08:ef:a5:ca:25:0e:be: 3b:74:aa:b1:90:12:87:b3:e7:a2:c0:33:61:81:a9:83:cc:16: 16:45:6a:3b:9b:6a:89:9b:5f:78:5b:8c:bf:70:d7:3c:b8:69: f4:38:f6:c3:2a:be:4d:ea:ad:18:01:e3:42:70:1d:f0:ae:f0: 5e:0b:1d:a3:20:93:ec:44:ef:54:67:1e:14:e5:08:81:65:27: 9a:e7:c7:cd:09:67:0c:41:ef:7d:e1:bf:ea:05:3f:5b:52:24: 35:cf:3d:26:13:60:2a:56:9a:3f:a3:7c:d1:b2:14:99:d9:87: fc:be:b2:94:72:84:f8:b6:3b:3c:cc:26:05:08:9b:4d:33:89: 31:c9:7b:7e:dc:1f:46:d8:11:70:b4:d2:e0:a1:5f:06:48:f4: c2:6a:43:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnumAlJLug8CgRFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk MmIyYTdhMmMtMGY1NC00NDVjLWI5ZTctZGZjMzExNjU0MjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIaEWm4TaFuPG9z/YgmAbxP7rz+cKXxOP0Qp 4MUDviXPCT56SbaM7jfFuzTmGmP7Bli0PeEUQ6rgbzFuPCOvo7LN33bb1+UtdP+8 p+6enzkARohRDMoXUIcFji1dYRinhUhrhoY0e6Paddwqp034XeB2V1+6OymjtGfy gzi69Ll453FQHLTTAwfP5SHcf4435+0/T50GStdYko+3qDgHnrERy3p8kxMHAJ8q eH9lXYMpVb7LU/Wuh0dlnNWYogKxDkWOcBOB4xDwTDwZl+LALT/FvAcRPfLfHTKY 4O8PtaYII2QQ2jvajiPb4fC2Y0CCdjauBCz41qBgpFQ0nRH2fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgqJa8hlHTnI1fHAlflZKiBupB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWE4Mzg4MDItNDYwYi0z NmE5LThkMjYtMTVhZmExNTcwZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuBvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7A4C1ilQeaZ3QNbRAcd+tMqnEae63lwaOeTW5SU5VK6QEdArbzh//N 3PxkFuMOFm5wfFPbpr5W4q7v5mFIy8e9wBEtoKO2vGnN0Y8Ejw2AzYG2+0l/lk8u CfBKaR+em60aNb3VCO+lyiUOvjt0qrGQEoez56LAM2GBqYPMFhZFajubaombX3hb jL9w1zy4afQ49sMqvk3qrRgB40JwHfCu8F4LHaMgk+xE71RnHhTlCIFlJ5rnx80J ZwxB733hv+oFP1tSJDXPPSYTYCpWmj+jfNGyFJnZh/y+spRyhPi2OzzMJgUIm00z iTHJe37cH0bYEXC00uChXwZI9MJqQ3M= -----END CERTIFICATE-----Generated at Sat Jun 7 22:51:50 2025 by rpki-client