$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65f51e65-acbc-312a-bbd6-7456d5d1206e.roa File: 65f51e65-acbc-312a-bbd6-7456d5d1206e.roa (raw, json) Hash identifier: mFj8naWn9xP2en1XMNnInD4sGquhsfTx8N5G85XAuzk= Subject key identifier: CC:97:C0:50:91:76:EF:78:55:48:55:15:1C:59:3A:E9:0B:F1:03:C9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584921842F45F8ED2724C2267C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65f51e65-acbc-312a-bbd6-7456d5d1206e.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 184.28.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:2f:45:f8:ed:27:24:c2:26:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=f81594ba-cc4a-499b-b345-2d9723862d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:46:ac:d2:88:02:e3:26:77:26:4c:ba:29:74: 97:9f:83:d4:fc:7e:ff:f0:c4:9f:51:09:e4:40:a4: 3e:c1:66:2f:f1:18:2c:70:10:4f:ef:16:48:91:02: 05:63:7c:6b:ff:a8:1d:83:8a:b8:4f:29:0f:eb:90: cc:2b:96:ea:ac:49:86:23:47:3a:b1:34:ca:9d:eb: 0f:bf:18:b9:8f:fc:f5:f4:78:26:1a:51:39:be:88: de:1b:d6:d1:e3:e1:9f:9b:19:70:88:7e:00:cb:71: 01:f4:f8:3a:51:de:07:1a:16:ec:68:99:b5:f2:87: 98:68:d7:98:d0:01:ab:bc:b2:fc:bd:53:eb:e9:42: 70:98:a3:79:7c:22:96:52:7e:e7:b2:ca:6b:fc:bd: 82:06:51:11:b6:52:9d:95:e1:f4:9f:3d:3e:5d:7a: de:df:57:28:dd:98:3d:12:77:60:62:04:67:ca:c1: 15:42:ce:89:62:7e:16:d3:71:f8:b3:fc:03:99:ba: 6c:f9:68:e1:e2:c9:bd:ef:c3:3e:c7:15:c7:77:94: 30:7f:92:9b:76:3b:f2:c5:ad:3c:08:5e:8c:33:29: 22:84:3f:e6:89:da:9c:f9:cf:b3:df:5f:28:17:e3: c1:45:4f:4b:75:f7:97:e9:2c:9d:9a:b3:34:24:27: e0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:97:C0:50:91:76:EF:78:55:48:55:15:1C:59:3A:E9:0B:F1:03:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65f51e65-acbc-312a-bbd6-7456d5d1206e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.28.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:90:4e:a9:02:dc:54:bb:23:25:3e:65:a9:a0:3b:6d:ba:6c: 0c:bb:83:01:90:98:d5:a4:a3:6d:c3:91:63:70:df:df:98:57: f5:e6:8a:9e:49:5b:ea:ae:6f:f4:8e:3d:5b:03:27:4e:cc:b4: 25:f3:ed:39:58:50:d0:1e:40:62:17:76:5b:1a:42:d9:c1:f8: f3:c9:dd:31:af:3b:f4:82:e3:56:7c:99:bc:f8:4c:2d:d3:09: 5f:df:37:b0:9e:cb:9c:b4:d4:b2:2f:d7:e5:2f:6f:bc:a8:fe: 79:b8:dc:4b:b8:21:65:65:e2:3e:b1:25:79:fb:0f:a0:a2:35: 05:95:c5:de:d4:3b:31:2e:03:53:da:c1:ea:c9:ba:26:1c:c0: 21:a7:3f:1a:48:6b:13:f2:4d:d8:64:9d:42:8b:35:e9:e4:c2: c9:df:3d:e0:35:ca:58:97:b2:db:f8:32:a5:94:e4:71:a6:8e: e0:b5:8e:f0:b9:6c:6d:04:30:36:7a:c3:d1:70:52:03:a2:31: b3:fd:79:00:87:ff:9b:17:a6:a6:b4:cc:c0:02:03:eb:f8:3f: 19:86:c0:76:ab:9f:9c:3f:58:cb:15:a3:35:bb:40:48:dc:19: 0b:37:e1:65:4f:b8:70:26:75:9f:f2:ad:83:49:9d:ca:29:6f: 3e:75:86:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhC9F+O0nJMImfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZjgxNTk0YmEtY2M0YS00OTliLWIzNDUtMmQ5NzIzODYyZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEas0ogC4yZ3Jky6KXSXn4PU/H7/8MSfUQnk QKQ+wWYv8RgscBBP7xZIkQIFY3xr/6gdg4q4TykP65DMK5bqrEmGI0c6sTTKnesP vxi5j/z19HgmGlE5vojeG9bR4+GfmxlwiH4Ay3EB9Pg6Ud4HGhbsaJm18oeYaNeY 0AGrvLL8vVPr6UJwmKN5fCKWUn7nsspr/L2CBlERtlKdleH0nz0+XXre31co3Zg9 EndgYgRnysEVQs6JYn4W03H4s/wDmbps+Wjh4sm978M+xxXHd5Qwf5Kbdjvyxa08 CF6MMykihD/midqc+c+z318oF+PBRU9LdfeX6SydmrM0JCfgYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyXwFCRdu94VUhVFRxZOukL8QPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjVmNTFlNjUtYWNiYy0z MTJhLWJiZDYtNzQ1NmQ1ZDEyMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuBx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECQTqkC3FS7IyU+ZamgO226bAy7gwGQmNWko23DkWNw39+YV/Xmip5J W+qub/SOPVsDJ07MtCXz7TlYUNAeQGIXdlsaQtnB+PPJ3TGvO/SC41Z8mbz4TC3T CV/fN7Cey5y01LIv1+Uvb7yo/nm43Eu4IWVl4j6xJXn7D6CiNQWVxd7UOzEuA1Pa werJuiYcwCGnPxpIaxPyTdhknUKLNenkwsnfPeA1yliXstv4MqWU5HGmjuC1jvC5 bG0EMDZ6w9FwUgOiMbP9eQCH/5sXpqa0zMACA+v4PxmGwHarn5w/WMsVozW7QEjc GQs34WVPuHAmdZ/yrYNJncopbz51hhc= -----END CERTIFICATE-----Generated at Sat Apr 5 13:12:51 2025 by rpki-client