$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7c7562e-6a21-3609-b478-251a2de02574.roa File: b7c7562e-6a21-3609-b478-251a2de02574.roa (raw, json) Hash identifier: zq9jzOTkJVIedRmj6O4eTtsNmqEKvWUIBRmpjQtgq+E= Subject key identifier: 29:78:20:C8:10:45:FD:67:57:16:DA:91:FF:81:1B:5F:9A:19:CC:A4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F44A600C6D268AEBF65C5D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7c7562e-6a21-3609-b478-251a2de02574.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 20940 IP address blocks: 184.87.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:60:0c:6d:26:8a:eb:f6:5c:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=a2805417-1d05-4126-bab0-a58b79113bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1c:1d:23:fa:7e:d1:0c:8f:b3:8f:f4:cb:d4: 80:68:cf:46:9b:22:00:44:98:43:28:1b:ec:04:af: 62:39:94:a5:f4:53:bf:83:50:44:70:0e:3b:8e:6d: 29:5c:6e:2c:ea:73:56:fa:a9:ad:81:5c:c1:cd:fa: fd:b0:b2:bb:63:72:ae:ad:be:21:bf:79:86:de:46: 44:3c:75:c0:8f:d4:53:f1:70:85:c1:a8:b2:2c:5b: 84:c8:71:93:ca:4d:96:db:39:9f:2f:2d:ba:d9:b2: 7b:78:bc:54:19:a7:88:b4:ee:65:47:8d:bb:97:b8: 32:cc:00:e7:91:09:b1:6d:2d:f0:6a:79:66:d9:5b: 07:64:f5:92:86:4b:f6:34:be:02:67:92:8f:4d:ff: 0c:b1:d2:b1:c3:58:b1:ec:50:3e:9f:46:24:ef:80: be:48:b4:53:d9:3d:14:0f:86:7b:44:cb:f9:15:3e: 9e:8b:bf:4e:17:27:ce:4b:ce:a6:96:75:81:d3:ca: 47:99:13:41:de:88:7d:33:c8:c8:1e:78:e3:5a:18: 02:0a:07:87:10:7b:78:c1:40:16:ea:c2:f6:8d:aa: 96:77:fd:b8:5a:31:56:fa:77:09:cb:a4:45:22:89: 06:ca:e9:11:36:61:47:bf:9d:38:d6:95:af:80:c7: 7d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:78:20:C8:10:45:FD:67:57:16:DA:91:FF:81:1B:5F:9A:19:CC:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7c7562e-6a21-3609-b478-251a2de02574.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.87.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b7:ec:f3:97:12:c9:1c:ed:9c:63:6b:e8:aa:99:8c:4d:4c: 84:08:18:22:b2:77:e3:c1:98:13:9f:f6:b2:20:40:4c:21:46: 58:7d:cc:e9:8a:6f:10:8b:6d:a5:39:47:c0:81:84:71:4a:80: 7d:64:55:7c:d7:32:28:b7:02:ce:1b:74:f8:03:5b:14:f3:4f: 5e:04:83:99:bf:73:40:05:fd:db:b8:77:b7:be:a6:26:65:1c: 6a:eb:32:5e:25:49:77:e7:4d:bf:d0:c0:cf:3e:77:d4:31:22: 1e:f6:e8:ea:f2:56:da:5f:bd:17:3b:a4:c3:3e:0d:24:bd:a7: a3:62:22:7c:3f:f4:55:77:ce:bb:0e:5e:d2:00:b6:65:0c:b5: bb:61:9f:44:ec:d4:30:69:4e:cf:72:88:8e:5c:f5:f0:89:47: b1:5a:11:d8:77:53:a4:8b:3b:a9:b1:f6:62:96:8a:c4:f3:61: 2a:fc:22:3e:ff:de:75:08:14:08:00:5c:e3:85:57:49:0e:c7: 62:cb:aa:fb:a1:04:10:91:ec:85:72:39:9b:77:f6:71:c8:90: 0e:a9:eb:a9:f1:23:9b:57:a2:47:26:8b:f3:49:f4:ca:87:31: 7f:2f:24:d8:dd:32:e9:d0:57:48:1a:e7:2d:76:bb:32:71:cb: 65:e9:46:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0SmAMbSaK6/ZcXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk YTI4MDU0MTctMWQwNS00MTI2LWJhYjAtYTU4Yjc5MTEzYmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBwdI/p+0QyPs4/0y9SAaM9GmyIARJhDKBvs BK9iOZSl9FO/g1BEcA47jm0pXG4s6nNW+qmtgVzBzfr9sLK7Y3Kurb4hv3mG3kZE PHXAj9RT8XCFwaiyLFuEyHGTyk2W2zmfLy262bJ7eLxUGaeItO5lR427l7gyzADn kQmxbS3wanlm2VsHZPWShkv2NL4CZ5KPTf8MsdKxw1ix7FA+n0Yk74C+SLRT2T0U D4Z7RMv5FT6ei79OFyfOS86mlnWB08pHmRNB3oh9M8jIHnjjWhgCCgeHEHt4wUAW 6sL2jaqWd/24WjFW+ncJy6RFIokGyukRNmFHv5041pWvgMd9nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCl4IMgQRf1nVxbakf+BG1+aGcykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjdjNzU2MmUtNmEyMS0z NjA5LWI0NzgtMjUxYTJkZTAyNTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuFfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABq37POXEskc7Zxja+iqmYxNTIQIGCKyd+PBmBOf9rIgQEwhRlh9zOmK bxCLbaU5R8CBhHFKgH1kVXzXMii3As4bdPgDWxTzT14Eg5m/c0AF/du4d7e+piZl HGrrMl4lSXfnTb/QwM8+d9QxIh726OryVtpfvRc7pMM+DSS9p6NiInw/9FV3zrsO XtIAtmUMtbthn0Ts1DBpTs9yiI5c9fCJR7FaEdh3U6SLO6mx9mKWisTzYSr8Ij7/ 3nUIFAgAXOOFV0kOx2LLqvuhBBCR7IVyOZt39nHIkA6p66nxI5tXokcmi/NJ9MqH MX8vJNjdMunQV0ga5y12uzJxy2XpRvQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:35:27 2025 by rpki-client