$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9860b3cc-a398-38e6-af20-6b4478cb3025.roa File: 9860b3cc-a398-38e6-af20-6b4478cb3025.roa (raw, json) Hash identifier: L/6d5DD6u1eMLlhT4WGv8jzpE/6VXaTpN+w8xWCCK5c= Subject key identifier: 80:90:C2:8E:52:0F:2E:57:FE:D3:D1:25:B2:4A:B5:C2:D0:70:D0:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F7152EEF7403FA10333D7180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9860b3cc-a398-38e6-af20-6b4478cb3025.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 20940 IP address blocks: 184.28.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:2e:ef:74:03:fa:10:33:3d:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=5d438f01-85a3-4f30-bec6-930ee12a0344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:93:75:09:a9:83:0b:ec:f5:b0:af:0f:ed:36: 1b:46:6f:0d:9e:7e:67:7e:05:bf:1f:36:a9:0d:e3: 00:63:be:ca:d4:46:f0:9f:a8:8f:22:e2:bd:ac:0b: 08:be:b3:0a:3b:cb:ca:74:59:66:19:5a:03:3f:6e: ef:dd:4e:35:ba:b3:9d:83:a9:31:ed:fd:9c:17:bd: 2a:36:0f:95:6e:bb:03:57:d9:09:c6:a7:1e:7c:a5: a2:96:12:f4:eb:ac:b9:d0:db:75:0e:76:8b:78:6e: 27:72:a5:61:7c:06:1f:cd:62:a4:c8:f9:fb:c5:5d: e6:f1:28:d0:02:b7:24:c9:88:48:bd:3b:1b:2e:36: 4c:c9:90:1d:7b:68:91:f5:8e:29:b7:9d:f3:19:7d: d7:ca:32:0d:15:0f:f3:0f:39:48:21:57:3a:9f:58: 04:2c:58:54:05:24:df:2f:b7:98:21:24:5e:d3:be: 2e:9c:7b:a7:81:08:44:ce:63:f3:f8:bf:4c:83:eb: 5b:f5:20:5d:7d:2a:15:10:c6:6e:fd:23:09:64:ef: 74:c8:99:f1:f5:33:ab:fe:59:07:df:2c:0d:13:bf: 30:67:dc:b3:07:e7:9e:8d:b2:c8:34:58:da:bf:04: dd:87:f2:7b:ac:47:4f:7f:16:ec:69:06:94:0f:47: ca:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:90:C2:8E:52:0F:2E:57:FE:D3:D1:25:B2:4A:B5:C2:D0:70:D0:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9860b3cc-a398-38e6-af20-6b4478cb3025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.28.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:2d:6a:7c:b2:5a:66:07:f2:8a:b9:bc:2c:25:14:40:d7:91: 5f:2d:ac:af:50:d2:9a:a2:2b:5b:02:c2:e7:f4:5c:d5:0e:a5: ed:eb:d3:48:9c:b2:55:af:79:b1:06:63:c3:9e:e2:d8:d7:45: 0c:40:4b:d2:12:5d:13:a2:90:25:1d:ea:f1:e7:62:f2:4f:a4: 97:12:7a:cd:b2:ea:65:a2:42:83:3c:71:ee:21:35:c6:5f:34: 24:55:a7:da:0a:4e:da:62:81:f0:1d:39:ec:bd:7a:07:a7:18: 90:f6:48:ce:c7:7c:8a:b8:71:4e:5b:b3:a1:6a:fd:3b:7a:b7: 48:1b:76:aa:63:a0:17:2a:18:46:43:ce:4a:59:73:ec:fb:ad: 81:4f:d2:b0:6e:20:80:91:7d:4f:15:93:56:9f:9a:e1:63:19: 93:40:84:b3:40:64:3d:32:d1:aa:b0:77:0b:fc:96:75:2f:3b: bb:07:52:4e:12:d7:77:fa:af:12:1d:86:19:9c:15:53:73:0a: ec:ce:19:0d:0f:a3:61:23:85:32:3d:09:3e:ec:ce:ad:5f:95: 2f:1a:40:9b:71:0b:85:46:9a:e5:78:98:06:2e:b0:86:d3:d1: 3d:f8:92:c2:8b:3a:4f:db:51:cf:bb:cd:14:f9:14:a6:c4:e0: 28:42:25:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FS7vdAP6EDM9cYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk NWQ0MzhmMDEtODVhMy00ZjMwLWJlYzYtOTMwZWUxMmEwMzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJN1CamDC+z1sK8P7TYbRm8Nnn5nfgW/Hzap DeMAY77K1Ebwn6iPIuK9rAsIvrMKO8vKdFlmGVoDP27v3U41urOdg6kx7f2cF70q Ng+VbrsDV9kJxqcefKWilhL066y50Nt1DnaLeG4ncqVhfAYfzWKkyPn7xV3m8SjQ ArckyYhIvTsbLjZMyZAde2iR9Y4pt53zGX3XyjINFQ/zDzlIIVc6n1gELFhUBSTf L7eYISRe074unHungQhEzmPz+L9Mg+tb9SBdfSoVEMZu/SMJZO90yJnx9TOr/lkH 3ywNE78wZ9yzB+eejbLINFjavwTdh/J7rEdPfxbsaQaUD0fKfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICQwo5SDy5X/tPRJbJKtcLQcNA4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTg2MGIzY2MtYTM5OC0z OGU2LWFmMjAtNmI0NDc4Y2IzMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuBzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8tanyyWmYH8oq5vCwlFEDXkV8trK9Q0pqiK1sCwuf0XNUOpe3r00ic slWvebEGY8Oe4tjXRQxAS9ISXROikCUd6vHnYvJPpJcSes2y6mWiQoM8ce4hNcZf NCRVp9oKTtpigfAdOey9egenGJD2SM7HfIq4cU5bs6Fq/Tt6t0gbdqpjoBcqGEZD zkpZc+z7rYFP0rBuIICRfU8Vk1afmuFjGZNAhLNAZD0y0aqwdwv8lnUvO7sHUk4S 13f6rxIdhhmcFVNzCuzOGQ0Po2EjhTI9CT7szq1flS8aQJtxC4VGmuV4mAYusIbT 0T34ksKLOk/bUc+7zRT5FKbE4ChCJbI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:38:12 2025 by rpki-client