$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac53caf9-1d66-33da-8134-188f191b1dad.roa File: ac53caf9-1d66-33da-8134-188f191b1dad.roa (raw, json) Hash identifier: S/1/BBDBpBHYrgVa6H/F57BkC1DT6ekiPMvXSTUYelI= Subject key identifier: CC:68:0A:E4:C0:7B:07:72:69:B5:FD:92:B0:29:54:48:3F:87:65:5B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849FF7585636DD0C7898EF01B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac53caf9-1d66-33da-8134-188f191b1dad.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 16625 IP address blocks: 184.24.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:85:63:6d:d0:c7:89:8e:f0:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=0b10bdcf-fced-4895-b2c4-9e3c4b8c3764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b0:fd:82:7b:1f:7b:d0:98:51:a3:a1:d4:e3: 80:10:0d:c7:51:d5:f8:b3:a7:1c:7b:ab:81:7b:de: bc:68:ef:0b:1d:fb:28:15:55:9a:73:40:9c:dd:74: b4:05:4a:83:19:91:b7:7a:20:09:72:e4:59:b0:a3: 7f:d0:73:8d:34:b0:4d:99:f4:ea:ff:33:ab:a1:59: a2:47:9e:c9:11:37:46:32:1d:62:f4:07:21:5a:89: fe:af:13:61:e6:df:b5:82:16:e8:13:a8:da:60:28: 4c:0d:98:93:5d:38:8a:ce:37:1e:a4:8a:6a:a9:32: 6e:9f:ef:12:98:5a:32:54:45:1e:fc:6c:87:90:cf: 60:8d:80:cd:f8:91:17:a4:6f:58:4f:a1:6d:8b:31: b6:5e:4d:ef:99:5f:05:1d:5e:43:c9:e3:6f:5c:c4: 24:8e:62:56:9c:43:d0:13:17:94:b0:49:72:5a:f2: 7f:c9:a2:7d:85:e1:59:ac:55:1d:c9:5c:4a:ec:88: a1:00:a9:d6:19:dc:4d:95:f4:8f:b3:3a:21:ff:cf: 40:71:2d:2a:0d:cb:32:6a:55:71:f5:2a:87:e2:c5: 1d:2a:5d:c4:2f:fb:dd:f1:fa:dd:7c:16:42:4e:01: ba:eb:37:d5:cc:a9:c0:a7:ef:fa:7f:e0:0a:b9:43: e5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:68:0A:E4:C0:7B:07:72:69:B5:FD:92:B0:29:54:48:3F:87:65:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac53caf9-1d66-33da-8134-188f191b1dad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.24.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:6d:4b:e2:ae:cd:88:21:6b:77:6f:9e:5a:23:72:8f:50:40: eb:dc:93:33:ce:07:6e:9c:74:50:8f:9a:2c:d9:d2:b2:a5:ad: 93:ab:f3:4b:75:16:58:06:b5:ef:48:e1:db:50:f4:98:06:e6: d8:07:20:72:16:89:65:79:b8:92:78:17:35:7e:cf:f7:09:10: 22:c6:09:fc:8c:96:97:09:89:e5:35:f7:26:0b:31:25:35:56: 31:9c:8a:89:d8:82:50:01:3d:ad:ea:6c:8a:76:38:f4:37:7f: 18:16:30:8b:cd:cd:77:07:fc:1a:86:7d:71:8e:2a:d4:9a:c9: ee:5b:3f:ec:17:d2:8f:6b:da:53:d5:a9:80:9d:ff:fb:a8:d4: 25:4d:4f:df:bc:9e:8e:f6:63:40:1d:7f:e5:5b:33:b4:6d:f8: c6:98:fb:79:98:04:02:f4:21:17:51:97:a6:5d:1f:06:8b:27: 04:d8:76:bb:74:5f:bc:0a:70:cc:3a:7a:5f:39:86:56:27:9b: ca:f2:ae:98:ae:9c:aa:e3:5f:32:18:da:d1:65:e9:ed:e1:b0: ac:34:15:8e:fb:b2:cf:d8:df:69:ab:da:08:84:37:65:66:c1: 7e:b6:93:a8:1e:92:03:a5:17:74:bf:54:68:1a:4b:cc:84:96: aa:74:27:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dYVjbdDHiY7wG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk MGIxMGJkY2YtZmNlZC00ODk1LWIyYzQtOWUzYzRiOGMzNzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorD9gnsfe9CYUaOh1OOAEA3HUdX4s6cce6uB e968aO8LHfsoFVWac0Cc3XS0BUqDGZG3eiAJcuRZsKN/0HONNLBNmfTq/zOroVmi R57JETdGMh1i9AchWon+rxNh5t+1ghboE6jaYChMDZiTXTiKzjcepIpqqTJun+8S mFoyVEUe/GyHkM9gjYDN+JEXpG9YT6FtizG2Xk3vmV8FHV5DyeNvXMQkjmJWnEPQ ExeUsElyWvJ/yaJ9heFZrFUdyVxK7IihAKnWGdxNlfSPszoh/89AcS0qDcsyalVx 9SqH4sUdKl3EL/vd8frdfBZCTgG66zfVzKnAp+/6f+AKuUPl9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxoCuTAewdyabX9krApVEg/h2VbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWM1M2NhZjktMWQ2Ni0z M2RhLTgxMzQtMTg4ZjE5MWIxZGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuBjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFtS+KuzYgha3dvnlojco9QQOvckzPOB26cdFCPmizZ0rKlrZOr80t1 FlgGte9I4dtQ9JgG5tgHIHIWiWV5uJJ4FzV+z/cJECLGCfyMlpcJieU19yYLMSU1 VjGcionYglABPa3qbIp2OPQ3fxgWMIvNzXcH/BqGfXGOKtSaye5bP+wX0o9r2lPV qYCd//uo1CVNT9+8no72Y0Adf+VbM7Rt+MaY+3mYBAL0IRdRl6ZdHwaLJwTYdrt0 X7wKcMw6el85hlYnm8ryrpiunKrjXzIY2tFl6e3hsKw0FY77ss/Y32mr2giEN2Vm wX62k6gekgOlF3S/VGgaS8yElqp0J/k= -----END CERTIFICATE-----Generated at Sun Jun 8 06:25:23 2025 by rpki-client