$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4709a65-0670-33b5-837b-28291de190de.roa File: c4709a65-0670-33b5-837b-28291de190de.roa (raw, json) Hash identifier: TefkVXo9Qt84o7ZLbN9GQsFOKak/JOQWiTRJ6wroyH0= Subject key identifier: 05:7E:04:6F:23:C8:90:3E:F8:C2:23:80:DF:BB:48:B8:9D:DD:BC:35 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F44A5FD8F2F23B76A1FDFBC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4709a65-0670-33b5-837b-28291de190de.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 16625 IP address blocks: 184.87.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:5f:d8:f2:f2:3b:76:a1:fd:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=8970bc4f-7d74-40c2-87ef-f821da9b6373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ff:34:f2:09:e0:c8:63:44:21:9c:8a:87:df: d9:da:cf:ac:ba:48:7e:55:01:03:ee:3a:cc:ae:bf: 5d:2b:f7:19:85:55:1e:ca:a5:f4:d6:f8:0b:6a:6e: b9:06:73:a2:47:ef:8b:89:96:0d:84:07:f0:15:43: 75:18:72:4c:01:cd:0c:cc:f2:7a:15:62:0f:95:fa: cd:16:46:a4:f2:59:51:a1:c9:c8:01:f1:64:e7:10: 58:35:9d:d5:82:34:a3:7f:4f:9f:97:cf:81:3a:ce: 06:51:a8:89:d2:61:27:3c:f6:b9:ff:c9:57:d9:c5: 75:0b:ea:d1:da:c5:85:86:eb:d0:4b:a8:22:4b:cd: ed:2e:72:bd:33:21:da:89:c0:22:48:83:30:c4:b5: fc:71:df:4b:d9:d2:db:f1:cc:94:22:31:20:f1:7b: 21:e2:65:a1:1a:2b:5a:1b:3c:f8:45:33:96:cc:29: cb:d3:d0:b3:ea:99:d9:8b:cf:84:a5:eb:92:ea:41: 4c:f5:9e:e9:f8:12:d7:57:78:60:82:d3:83:a8:a3: 24:61:c4:e4:1d:fd:55:35:a6:3b:7a:bd:30:62:71: db:11:5d:d5:96:92:d2:58:19:7a:11:db:95:9d:24: e8:8d:1f:eb:e0:93:fc:07:a7:0c:dd:66:4b:7c:0f: de:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7E:04:6F:23:C8:90:3E:F8:C2:23:80:DF:BB:48:B8:9D:DD:BC:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4709a65-0670-33b5-837b-28291de190de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.87.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:8a:ed:56:cb:10:3b:83:86:fb:da:0f:8f:b1:f6:91:de:3d: 21:51:9a:26:c9:b0:f4:96:96:86:24:16:ea:a8:ee:9d:2b:ac: b3:f1:e6:c4:28:b5:2f:93:ff:29:f2:95:e5:a5:b4:c0:e3:8b: 1d:20:c3:c4:42:25:6f:29:74:70:b0:48:43:0d:d0:ef:44:84: 58:e3:23:80:6c:fb:ce:d8:3a:a1:b9:df:a1:d9:7b:a9:1a:a5: d5:bd:66:9b:d6:96:5a:a7:a2:99:bc:11:16:eb:d6:24:27:01: 61:c4:3d:93:74:b5:d8:96:8e:ce:2a:c5:12:be:e1:c6:24:b3: 30:7c:07:ed:95:cd:02:fe:3c:bb:9c:24:61:11:d4:1b:02:7f: 97:b2:fc:80:48:e1:7c:1b:ff:37:97:5d:3f:a5:4d:97:09:4b: 37:be:43:e3:53:00:87:cc:3a:45:d2:44:b6:48:db:f1:1a:7f: 37:ba:62:a8:65:8c:e1:5b:f1:0b:5e:0b:9d:7a:c0:c5:ed:20: dd:80:5d:67:b8:f0:15:31:42:59:f8:4b:a3:c6:3e:9b:34:74: 01:3d:8c:30:3f:63:ba:8f:46:99:0f:df:0f:9e:ea:4c:f2:ba: 00:06:99:6e:1c:5d:24:17:cd:2e:94:de:c3:2b:54:b5:c6:ca: cd:fb:5f:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0Sl/Y8vI7dqH9+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk ODk3MGJjNGYtN2Q3NC00MGMyLTg3ZWYtZjgyMWRhOWI2MzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/808gngyGNEIZyKh9/Z2s+sukh+VQED7jrM rr9dK/cZhVUeyqX01vgLam65BnOiR++LiZYNhAfwFUN1GHJMAc0MzPJ6FWIPlfrN Fkak8llRocnIAfFk5xBYNZ3VgjSjf0+fl8+BOs4GUaiJ0mEnPPa5/8lX2cV1C+rR 2sWFhuvQS6giS83tLnK9MyHaicAiSIMwxLX8cd9L2dLb8cyUIjEg8Xsh4mWhGita Gzz4RTOWzCnL09Cz6pnZi8+EpeuS6kFM9Z7p+BLXV3hggtODqKMkYcTkHf1VNaY7 er0wYnHbEV3VlpLSWBl6EduVnSTojR/r4JP8B6cM3WZLfA/e9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAV+BG8jyJA++MIjgN+7SLid3bw1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzQ3MDlhNjUtMDY3MC0z M2I1LTgzN2ItMjgyOTFkZTE5MGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuFeEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeK7VbLEDuDhvvaD4+x9pHePSFRmibJsPSWloYkFuqo7p0rrLPx5sQo tS+T/ynyleWltMDjix0gw8RCJW8pdHCwSEMN0O9EhFjjI4Bs+87YOqG536HZe6ka pdW9ZpvWllqnopm8ERbr1iQnAWHEPZN0tdiWjs4qxRK+4cYkszB8B+2VzQL+PLuc JGER1BsCf5ey/IBI4Xwb/zeXXT+lTZcJSze+Q+NTAIfMOkXSRLZI2/Eafze6Yqhl jOFb8QteC516wMXtIN2AXWe48BUxQln4S6PGPps0dAE9jDA/Y7qPRpkP3w+e6kzy ugAGmW4cXSQXzS6U3sMrVLXGys37X6o= -----END CERTIFICATE-----Generated at Sun Jun 8 03:04:19 2025 by rpki-client