$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f9dbb41-0595-3f44-a150-e871985bdf8e.roa File: 8f9dbb41-0595-3f44-a150-e871985bdf8e.roa (raw, json) Hash identifier: 3AvQKMI+Mc+HvlLgh3R7GsRf4XKExX1iZIYnJ8CCKQo= Subject key identifier: 26:AA:A2:11:CE:DE:B2:71:85:68:B0:FE:B3:EA:36:77:EC:FB:93:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858490CB1820324B7F7E0E0F136E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f9dbb41-0595-3f44-a150-e871985bdf8e.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 20940 IP address blocks: 184.50.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:82:03:24:b7:f7:e0:e0:f1:36:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=d781bff2-a78f-4aa5-9222-046a36617236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3d:24:fa:dc:9d:b0:63:3c:57:04:ef:09:53: 1b:8f:94:6f:b6:7c:55:9d:20:82:fc:ae:33:5a:dd: 94:e8:89:a7:9b:de:42:40:e9:d9:14:f3:f9:88:b0: 6f:14:b7:5d:b2:a0:55:fd:d5:d2:21:97:a7:93:67: 43:cf:e9:b7:ec:07:a8:0c:45:4e:02:af:7c:9e:5e: 6a:c4:8a:f0:4d:78:87:45:55:02:7d:a9:70:9e:36: bc:12:18:80:bb:39:f0:85:72:8b:7d:8a:82:0c:fc: 36:e4:0e:07:cc:bd:b4:72:c2:78:e4:5a:42:3d:00: f3:09:20:5a:97:07:04:18:d1:51:02:af:6c:4e:15: c7:dc:40:dc:37:b7:44:15:c8:86:76:df:8a:70:7d: 10:34:94:c7:a6:26:db:bc:a7:dc:4a:2b:2e:cd:68: cf:8b:13:fa:06:50:bb:bf:33:35:f0:cc:1a:14:3d: dc:2a:3f:da:22:73:bf:1d:98:d7:51:01:dd:06:2c: a1:da:43:cb:56:91:16:94:20:80:c0:d5:28:c4:f4: b8:21:08:88:19:3c:8a:6b:2d:d7:b2:ed:8e:6b:dd: 48:ac:5a:98:dc:b9:e8:15:26:c7:10:16:23:1d:e2: af:d9:16:ac:fe:66:0f:12:1f:d9:fe:d0:31:89:ed: de:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AA:A2:11:CE:DE:B2:71:85:68:B0:FE:B3:EA:36:77:EC:FB:93:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f9dbb41-0595-3f44-a150-e871985bdf8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.50.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:63:1a:61:c8:52:e2:d9:a8:4b:22:37:1f:2c:55:fa:87:bd: 96:23:40:52:73:45:84:c1:13:23:39:97:46:50:c2:07:3c:77: 30:48:9a:eb:ec:c3:7d:e3:64:94:b8:db:2f:be:d6:73:2f:9f: 48:f1:08:d3:5e:07:93:cc:c7:54:61:d4:77:04:70:e9:a2:98: e9:f2:58:53:5a:10:81:db:73:7e:ef:01:ac:53:ba:8b:2a:a2: d8:61:f6:78:b0:f8:c3:74:38:a2:87:bc:1e:87:64:88:b7:70: 8d:de:a4:f6:7e:97:2d:93:11:a1:07:a0:e2:e6:e2:fe:00:68: c4:51:56:0f:04:d5:c5:d9:26:98:5a:bb:e8:8e:6c:5d:bf:95: cf:7f:0f:ba:3f:99:51:fe:27:ef:75:3f:ad:96:4e:a5:ce:bb: 72:5f:47:d3:cf:02:71:86:a0:74:85:aa:13:0c:15:2a:55:e9: 29:0f:e3:24:41:1f:00:72:9e:c2:e8:4f:59:76:64:3d:fb:3a: 48:97:2e:fa:1f:22:51:ad:c9:e0:d1:21:27:42:ed:58:58:fa: ed:bd:ef:b5:48:de:51:e8:87:c2:4d:85:09:96:88:e2:2d:bf: 45:ac:87:68:3c:d7:9f:d0:58:51:1a:90:21:a7:a5:a3:e1:c5: b8:82:d5:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsYIDJLf34ODxNuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk ZDc4MWJmZjItYTc4Zi00YWE1LTkyMjItMDQ2YTM2NjE3MjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz0k+tydsGM8VwTvCVMbj5RvtnxVnSCC/K4z Wt2U6Imnm95CQOnZFPP5iLBvFLddsqBV/dXSIZenk2dDz+m37AeoDEVOAq98nl5q xIrwTXiHRVUCfalwnja8EhiAuznwhXKLfYqCDPw25A4HzL20csJ45FpCPQDzCSBa lwcEGNFRAq9sThXH3EDcN7dEFciGdt+KcH0QNJTHpibbvKfcSisuzWjPixP6BlC7 vzM18MwaFD3cKj/aInO/HZjXUQHdBiyh2kPLVpEWlCCAwNUoxPS4IQiIGTyKay3X su2Oa91IrFqY3LnoFSbHEBYjHeKv2Ras/mYPEh/Z/tAxie3ehQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaqohHO3rJxhWiw/rPqNnfs+5NxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGY5ZGJiNDEtMDU5NS0z ZjQ0LWExNTAtZTg3MTk4NWJkZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuDLsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdjGmHIUuLZqEsiNx8sVfqHvZYjQFJzRYTBEyM5l0ZQwgc8dzBImuvs w33jZJS42y++1nMvn0jxCNNeB5PMx1Rh1HcEcOmimOnyWFNaEIHbc37vAaxTuosq othh9niw+MN0OKKHvB6HZIi3cI3epPZ+ly2TEaEHoOLm4v4AaMRRVg8E1cXZJpha u+iObF2/lc9/D7o/mVH+J+91P62WTqXOu3JfR9PPAnGGoHSFqhMMFSpV6SkP4yRB HwBynsLoT1l2ZD37OkiXLvofIlGtyeDRISdC7VhY+u2977VI3lHoh8JNhQmWiOIt v0Wsh2g815/QWFEakCGnpaPhxbiC1Vc= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:57 2025 by rpki-client