$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d291dd3-6ae1-3d2b-9c46-e05304e9e75e.roa File: 8d291dd3-6ae1-3d2b-9c46-e05304e9e75e.roa (raw, json) Hash identifier: AJTfErirT0Fzab1wxM4ka/5iydiLn8jsxNLaFzCAFA8= Subject key identifier: CF:73:69:EE:24:73:32:13:9F:B0:3B:1A:C4:E1:C1:0D:C2:A6:5D:65 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849203C1A33F53DC2168F0C2920 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d291dd3-6ae1-3d2b-9c46-e05304e9e75e.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 16625 IP address blocks: 184.25.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:1a:33:f5:3d:c2:16:8f:0c:29:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=22f2f0f9-6575-4f88-8ac6-003a13bf7c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5d:4a:4c:2a:d9:b1:51:df:06:13:20:0a:8f: 97:46:78:04:04:11:b2:a0:71:b8:cc:3d:a6:3f:9b: bb:00:b3:c9:d1:79:10:38:6b:46:33:f0:26:7f:85: 15:3a:65:1e:91:4d:9a:8b:47:d8:ff:e4:5e:fe:77: 06:d4:1d:85:72:6f:b6:1a:b3:70:f8:a8:c1:ab:a8: a9:6d:63:6a:9d:67:ae:f2:e1:f9:54:f5:2d:f9:82: ce:75:5c:61:d4:26:b2:b2:f3:72:ab:38:4c:b2:93: 2f:be:cb:d8:d2:55:6d:41:c5:73:cc:1b:af:51:3f: 7d:f1:6f:e5:27:fa:49:97:1a:4e:81:bf:d7:23:a9: e5:dd:9c:a6:3b:36:ef:f6:78:4a:1b:b7:45:7a:f9: 32:a0:6c:ee:5f:54:72:02:d0:9b:0a:48:81:ca:11: e4:0e:de:1a:9a:5f:1d:ed:30:93:d4:89:45:b4:78: 4c:e1:65:ef:bd:ad:c1:2e:5f:3e:d2:78:fe:3e:27: 60:4a:ef:9d:7f:c6:1c:29:c9:aa:24:e1:c8:34:4b: 23:bf:8f:a4:a2:d5:46:49:01:10:25:ab:61:e8:76: 3b:5d:1a:e0:94:65:41:6b:71:ad:0a:83:62:70:5c: 3b:91:f0:3b:3b:e3:16:e6:16:03:c6:fb:3e:4d:ec: 2f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:73:69:EE:24:73:32:13:9F:B0:3B:1A:C4:E1:C1:0D:C2:A6:5D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d291dd3-6ae1-3d2b-9c46-e05304e9e75e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.25.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:3e:bb:41:2c:6f:28:c2:79:62:94:1d:a7:2c:65:4f:9b:b8: e1:c0:ba:d5:8b:86:ff:21:ea:2f:05:db:bd:73:b6:ee:a3:af: 11:9e:18:e9:b5:90:3d:66:45:37:8a:eb:e7:67:f2:66:0b:ec: 7a:a3:e0:14:b2:ed:6b:e7:37:b2:9a:91:b8:22:e0:e0:fd:73: 32:a0:0d:15:63:a7:a2:c9:02:0a:86:39:23:26:76:75:4b:1c: 58:59:06:53:10:5a:0b:cb:f9:89:c0:7f:9e:d1:19:6e:85:2d: dc:24:0e:2d:9d:87:19:26:3c:c7:2f:ab:fe:b0:ed:95:8a:4e: 6a:06:1c:21:c2:46:25:f6:0c:44:92:a0:15:63:ce:5c:01:a3: f2:00:ef:1a:c6:26:6d:c2:33:36:33:27:84:4d:e1:ce:53:03: dc:57:5e:52:c1:11:9d:8f:89:a2:dc:ce:a7:22:39:fa:2f:36: 9d:ae:7b:bd:0f:ec:6f:55:a1:9e:0d:e9:a4:db:22:ac:9c:3b: c6:36:10:7b:27:66:33:9a:fa:f8:0b:02:3a:7b:fc:66:d4:11: 37:42:d1:70:47:e3:0e:bf:f6:67:c1:72:3d:17:98:8c:f3:f7: 44:68:d3:c5:fa:10:6b:ef:26:44:be:74:7a:87:35:32:05:19: 7a:e2:8d:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPBoz9T3CFo8MKSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk MjJmMmYwZjktNjU3NS00Zjg4LThhYzYtMDAzYTEzYmY3YzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF1KTCrZsVHfBhMgCo+XRngEBBGyoHG4zD2m P5u7ALPJ0XkQOGtGM/Amf4UVOmUekU2ai0fY/+Re/ncG1B2Fcm+2GrNw+KjBq6ip bWNqnWeu8uH5VPUt+YLOdVxh1CaysvNyqzhMspMvvsvY0lVtQcVzzBuvUT998W/l J/pJlxpOgb/XI6nl3ZymOzbv9nhKG7dFevkyoGzuX1RyAtCbCkiByhHkDt4aml8d 7TCT1IlFtHhM4WXvva3BLl8+0nj+PidgSu+df8YcKcmqJOHINEsjv4+kotVGSQEQ Jath6HY7XRrglGVBa3GtCoNicFw7kfA7O+MW5hYDxvs+Tewv+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9zae4kczITn7A7GsThwQ3Cpl1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGQyOTFkZDMtNmFlMS0z ZDJiLTljNDYtZTA1MzA0ZTllNzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuBn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJY+u0EsbyjCeWKUHacsZU+buOHAutWLhv8h6i8F271ztu6jrxGeGOm1 kD1mRTeK6+dn8mYL7Hqj4BSy7WvnN7Kakbgi4OD9czKgDRVjp6LJAgqGOSMmdnVL HFhZBlMQWgvL+YnAf57RGW6FLdwkDi2dhxkmPMcvq/6w7ZWKTmoGHCHCRiX2DESS oBVjzlwBo/IA7xrGJm3CMzYzJ4RN4c5TA9xXXlLBEZ2PiaLczqciOfovNp2ue70P 7G9VoZ4N6aTbIqycO8Y2EHsnZjOa+vgLAjp7/GbUETdC0XBH4w6/9mfBcj0XmIzz 90Ro08X6EGvvJkS+dHqHNTIFGXrijTc= -----END CERTIFICATE-----Generated at Fri Mar 14 07:54:49 2025 by rpki-client