$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca37cbf0-1692-3a20-a3ba-ade4f7ad0922.roa File: ca37cbf0-1692-3a20-a3ba-ade4f7ad0922.roa (raw, json) Hash identifier: TWfN8tOXV85AuXmuz1bdJPoQ1YjLfu8ZD4/tw4bz4cQ= Subject key identifier: FD:03:56:80:05:DD:35:93:69:CE:05:A5:87:12:86:E7:07:9F:66:0C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849F44A6259300497317E4C7900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca37cbf0-1692-3a20-a3ba-ade4f7ad0922.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 20940 IP address blocks: 184.86.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:62:59:30:04:97:31:7e:4c:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=23702219-f2f2-4c9b-b6f0-1ec0491374c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cf:fc:1e:12:10:a0:dc:7e:72:6e:c0:35:a7: 8a:0d:a8:cc:ef:37:f7:4a:80:65:c3:32:a3:a6:b6: 14:e2:d4:b1:7f:f6:cd:9d:1a:6a:f7:84:c6:95:38: 30:77:9f:c6:18:f5:d9:a1:a4:62:e8:d3:14:2f:eb: fa:21:39:e2:54:cc:53:e2:42:7e:a9:63:6c:23:6f: e1:9c:04:9d:46:17:58:81:c3:32:d9:bb:e2:b5:2c: 45:de:d0:42:36:22:34:5f:f0:15:8e:7e:47:41:5b: 78:bb:84:4e:1b:78:92:e7:88:26:83:b7:0c:44:28: ae:c6:07:90:41:c7:af:1e:d3:92:b9:47:25:a1:a2: b1:36:df:58:79:5b:08:f8:28:58:d0:b6:10:b0:35: 98:50:ce:43:73:32:1d:4e:5d:ad:a9:4c:47:5b:bd: d3:af:72:32:6b:e7:e9:25:80:ed:07:9b:d3:64:64: 64:c6:8e:a5:61:f1:c6:e5:2c:66:9e:d1:b8:3d:39: 6b:9f:2d:db:1f:1a:33:d5:06:cd:fd:ea:fa:f2:5f: eb:cc:c2:a7:a9:b2:f7:f4:b1:0a:2c:24:92:29:61: c9:2f:1a:a4:91:ac:84:87:58:e7:7a:14:25:27:dc: 33:d0:43:4d:bf:dc:2d:eb:53:a5:73:31:75:37:06: ad:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:03:56:80:05:DD:35:93:69:CE:05:A5:87:12:86:E7:07:9F:66:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca37cbf0-1692-3a20-a3ba-ade4f7ad0922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.86.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:5d:cb:36:20:27:7a:44:34:7d:22:a5:31:b3:e7:14:cc:69: 89:81:53:c8:ed:d0:72:89:61:f5:af:b1:bf:91:9b:30:7c:3e: d9:9b:d7:d6:a1:73:e8:7f:92:00:f7:7e:4f:17:cc:27:d2:93: 55:8c:d8:b2:a2:98:59:72:9f:10:92:d9:78:e6:05:fa:82:5c: 4b:a2:53:3d:74:ca:29:b1:07:f5:f5:23:27:73:c0:03:cb:71: d6:ef:14:6b:9a:58:17:f9:14:cc:2f:b4:51:4f:83:5a:8c:b4: 65:ba:58:c0:c5:59:c3:14:3b:18:2f:5d:84:5c:10:b8:48:13: c8:62:9c:a6:e4:dd:6a:a5:92:4d:18:6c:6f:8f:11:4f:94:ac: 31:46:f1:3c:ce:14:b7:c3:20:e0:71:d4:92:f7:48:b3:5a:5c: 45:d0:ee:64:49:98:72:0a:d3:5c:48:a7:3a:58:aa:fd:af:44: 6a:6a:ae:df:be:3e:6c:cd:89:a1:b4:49:bf:7a:71:5e:6a:b5: ce:d4:04:10:6a:79:59:2f:03:bb:6a:49:30:b6:5c:6b:25:d4: 64:c5:2b:97:b1:06:8e:a3:38:4b:86:67:a9:ce:bb:db:52:da: 01:af:45:63:17:bc:23:d5:cf:e3:c0:3f:71:84:c1:cc:b4:c6: 1b:f7:1e:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0SmJZMASXMX5MeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk MjM3MDIyMTktZjJmMi00YzliLWI2ZjAtMWVjMDQ5MTM3NGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8/8HhIQoNx+cm7ANaeKDajM7zf3SoBlwzKj prYU4tSxf/bNnRpq94TGlTgwd5/GGPXZoaRi6NMUL+v6ITniVMxT4kJ+qWNsI2/h nASdRhdYgcMy2bvitSxF3tBCNiI0X/AVjn5HQVt4u4ROG3iS54gmg7cMRCiuxgeQ QcevHtOSuUcloaKxNt9YeVsI+ChY0LYQsDWYUM5DczIdTl2tqUxHW73Tr3Iya+fp JYDtB5vTZGRkxo6lYfHG5SxmntG4PTlrny3bHxoz1QbN/er68l/rzMKnqbL39LEK LCSSKWHJLxqkkayEh1jnehQlJ9wz0ENNv9wt61OlczF1NwatLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0DVoAF3TWTac4FpYcShucHn2YMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2EzN2NiZjAtMTY5Mi0z YTIwLWEzYmEtYWRlNGY3YWQwOTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuFZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxdyzYgJ3pENH0ipTGz5xTMaYmBU8jt0HKJYfWvsb+RmzB8Ptmb19ah c+h/kgD3fk8XzCfSk1WM2LKimFlynxCS2XjmBfqCXEuiUz10yimxB/X1IydzwAPL cdbvFGuaWBf5FMwvtFFPg1qMtGW6WMDFWcMUOxgvXYRcELhIE8hinKbk3Wqlkk0Y bG+PEU+UrDFG8TzOFLfDIOBx1JL3SLNaXEXQ7mRJmHIK01xIpzpYqv2vRGpqrt++ PmzNiaG0Sb96cV5qtc7UBBBqeVkvA7tqSTC2XGsl1GTFK5exBo6jOEuGZ6nOu9tS 2gGvRWMXvCPVz+PAP3GEwcy0xhv3HsY= -----END CERTIFICATE-----Generated at Thu Jun 5 18:22:55 2025 by rpki-client