$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a5c9415-b5a2-3121-973e-d0aa266dc708.roa File: 8a5c9415-b5a2-3121-973e-d0aa266dc708.roa (raw, json) Hash identifier: mdU+j+apl6S/LiwMCXjySgXC8M4EDsRMuSB+Z90tkuI= Subject key identifier: 33:4B:37:E9:35:3D:DB:93:07:E7:4D:26:13:B1:7C:A2:A3:D5:C7:60 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849218430EC3F1668408D3EF880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a5c9415-b5a2-3121-973e-d0aa266dc708.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 184.29.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:30:ec:3f:16:68:40:8d:3e:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=f078c9db-4f72-44d5-b18a-a7009cb4dfea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:10:8e:c4:23:bc:09:a4:ae:5c:bc:6b:3c:e2: 58:1e:7b:58:46:d0:07:4e:51:3f:17:d5:d5:5a:3a: 7b:53:28:11:33:52:1b:f8:01:16:9f:53:9d:7f:e0: c9:11:40:b9:5a:f0:03:94:85:99:79:96:51:8b:a7: 54:bf:66:ea:ab:e6:f2:29:b6:ae:d7:d8:5b:bd:fc: 44:06:cb:33:e3:43:df:48:ba:cd:8d:0a:9d:33:bc: 1d:5d:21:3d:c7:7c:ae:da:ba:e6:2f:d2:1f:11:58: 0d:2c:72:70:21:09:8a:a3:47:63:60:2b:b8:fb:a1: ad:a3:4f:ad:9b:b5:ea:8e:69:06:b1:7c:a0:39:96: e3:c9:2c:30:4c:02:47:07:a9:b7:b8:da:66:1d:1b: 3b:4b:8b:a1:e9:05:e5:7c:2c:aa:74:dc:ed:75:57: ba:37:04:ca:80:57:8b:15:b9:f8:29:9c:29:3b:ea: eb:7e:d8:bc:b4:50:71:e4:e0:dd:47:fc:aa:01:d4: e2:b9:6f:da:9c:d6:6b:5e:68:b7:97:2e:06:0f:93: ce:4e:e6:85:82:bb:4f:1d:e6:e4:81:43:c4:6c:fa: d3:9d:c4:97:53:ea:ff:5c:af:0c:78:3f:48:14:c3: 16:b0:23:7b:bc:1f:e6:3d:87:79:ef:a8:63:c7:85: 90:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4B:37:E9:35:3D:DB:93:07:E7:4D:26:13:B1:7C:A2:A3:D5:C7:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a5c9415-b5a2-3121-973e-d0aa266dc708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.29.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:52:52:89:0d:6a:5b:fc:3a:17:66:4f:5c:9f:72:72:2c:22: 98:56:71:f1:8c:63:d0:df:d3:a2:bd:cf:c4:09:62:4e:9c:8d: 40:a9:af:82:ed:3d:e0:b1:3a:03:1c:f9:58:3e:98:96:01:f8: 63:04:cf:3e:4e:e6:1b:9e:1f:01:b8:9d:2a:63:b8:e8:c2:83: eb:d3:d6:db:49:36:8f:68:07:2b:4b:1d:d0:f7:ed:21:d7:84: 37:be:1b:98:df:3d:77:24:6f:34:03:ad:92:0f:1e:91:fd:30: 43:3b:93:b2:63:2d:b8:55:e1:59:6f:d8:bb:43:b1:9e:b9:c5: b7:21:38:1e:cc:f9:73:c3:6a:09:0e:66:6c:7f:b7:13:26:3d: cc:28:34:86:3e:f4:63:38:03:84:2b:af:4e:86:71:33:1e:47: cd:55:6f:db:0f:95:5c:6b:e1:4b:21:f2:2e:3e:31:66:05:98: 26:7f:ae:6f:f6:f2:c6:b0:bf:2f:02:69:61:34:d1:ec:89:51: d1:08:f4:df:5e:21:f8:73:17:f3:40:9b:d4:ae:64:6e:38:f8: 45:52:fe:29:b7:6a:18:3e:30:14:11:d4:a2:7a:8e:22:34:12: bb:62:82:af:37:fc:43:81:a1:30:8b:33:96:e6:75:bd:6d:70: 90:95:bf:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhDDsPxZoQI0++IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZjA3OGM5ZGItNGY3Mi00NGQ1LWIxOGEtYTcwMDljYjRkZmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RCOxCO8CaSuXLxrPOJYHntYRtAHTlE/F9XV Wjp7UygRM1Ib+AEWn1Odf+DJEUC5WvADlIWZeZZRi6dUv2bqq+byKbau19hbvfxE Bssz40PfSLrNjQqdM7wdXSE9x3yu2rrmL9IfEVgNLHJwIQmKo0djYCu4+6Gto0+t m7XqjmkGsXygOZbjySwwTAJHB6m3uNpmHRs7S4uh6QXlfCyqdNztdVe6NwTKgFeL Fbn4KZwpO+rrfti8tFBx5ODdR/yqAdTiuW/anNZrXmi3ly4GD5POTuaFgrtPHebk gUPEbPrTncSXU+r/XK8MeD9IFMMWsCN7vB/mPYd576hjx4WQTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNLN+k1PduTB+dNJhOxfKKj1cdgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGE1Yzk0MTUtYjVhMi0z MTIxLTk3M2UtZDBhYTI2NmRjNzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuB0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9SUokNalv8OhdmT1yfcnIsIphWcfGMY9Df06K9z8QJYk6cjUCpr4Lt PeCxOgMc+Vg+mJYB+GMEzz5O5hueHwG4nSpjuOjCg+vT1ttJNo9oBytLHdD37SHX hDe+G5jfPXckbzQDrZIPHpH9MEM7k7JjLbhV4Vlv2LtDsZ65xbchOB7M+XPDagkO Zmx/txMmPcwoNIY+9GM4A4Qrr06GcTMeR81Vb9sPlVxr4Ush8i4+MWYFmCZ/rm/2 8sawvy8CaWE00eyJUdEI9N9eIfhzF/NAm9SuZG44+EVS/im3ahg+MBQR1KJ6jiI0 Ertigq83/EOBoTCLM5bmdb1tcJCVv1o= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:04 2025 by rpki-client