$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5a7e39d-2917-33d0-b9ce-722b88e0a0f1.roa File: e5a7e39d-2917-33d0-b9ce-722b88e0a0f1.roa (raw, json) Hash identifier: eK1NDqhAis8efeAsqBhjO6RdJNSEuD6tg+AgiN6s7to= Subject key identifier: C7:77:08:29:CE:4B:FC:BE:AB:84:6B:91:6F:DD:BE:D5:82:5D:D8:2D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849203C7979A1BB4DA4C860F500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5a7e39d-2917-33d0-b9ce-722b88e0a0f1.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 20940 IP address blocks: 184.25.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:79:79:a1:bb:4d:a4:c8:60:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=a630abcb-a37b-44e0-a188-40e6b514208f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e1:3c:85:a1:c5:33:a6:4b:d1:8b:bc:4a:3e: 0c:cc:90:76:b6:2b:2e:26:00:6a:13:07:67:49:eb: 5f:05:90:24:8c:e0:31:e1:d9:91:a6:cf:f8:a5:6e: 39:4c:a3:b2:75:b7:06:78:db:53:95:ba:f3:3f:73: b1:ec:52:81:13:3f:8a:3f:6b:cd:2e:14:55:88:97: 72:cc:aa:3c:69:21:93:98:6d:00:db:4a:71:d5:bf: a3:6c:1c:3c:89:e6:90:ca:58:15:68:fe:b0:32:93: 40:af:e2:5f:d7:24:09:dc:fa:d1:5e:95:88:ee:3c: e8:f1:ba:2b:42:0f:d4:9f:40:43:ee:29:81:58:cc: 3a:21:9b:c0:4a:56:17:61:2f:a5:33:eb:f3:71:11: 6f:d4:29:cf:6c:8d:98:d0:75:39:eb:07:3c:73:7b: 71:cc:ac:38:f2:61:1e:37:84:db:8a:f2:5e:e9:92: ce:87:30:ed:57:70:c7:a3:b6:65:49:a9:12:85:43: 5f:c0:3d:78:f5:7a:8b:53:c0:32:4a:3f:40:8b:3e: ee:9c:30:cf:4e:27:d7:b6:5a:89:07:b5:9f:8f:d7: 6c:4d:8a:19:1d:4a:7f:f9:30:ba:90:74:b9:73:b3: 1a:bc:83:6d:a8:4b:88:ae:8a:31:96:b5:72:d2:6b: f5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:77:08:29:CE:4B:FC:BE:AB:84:6B:91:6F:DD:BE:D5:82:5D:D8:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e5a7e39d-2917-33d0-b9ce-722b88e0a0f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.25.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f4:f9:1f:59:8d:22:68:ed:65:1b:ab:e7:0a:a9:2a:29:07: de:de:6e:28:b1:95:32:17:3a:32:e3:bc:f4:69:40:18:1d:bf: 92:7e:0e:81:56:6d:e3:dd:51:38:5c:87:2e:3d:95:f3:fc:86: 52:f2:0d:55:9f:9d:2f:00:74:55:84:0c:4c:35:c3:a7:5b:54: 21:60:9e:ff:92:70:a2:28:a8:f5:21:1d:df:42:d0:e6:38:55: fe:d4:27:c7:e3:58:30:de:31:5b:f5:ff:38:70:ac:a9:42:e8: 3f:67:b0:ac:d7:57:04:f6:88:45:2d:cb:ca:5c:a5:73:ed:94: 50:80:88:40:88:e0:1b:03:a5:0e:8f:59:1b:e4:12:94:1d:ea: c4:cd:92:51:ce:f4:c9:34:63:95:82:31:42:eb:96:7f:97:a5: ca:ca:c4:aa:45:c8:9b:98:1e:a7:5d:90:fe:8f:90:2a:24:11: 1f:e1:ac:c2:8b:1a:67:15:4d:4f:c6:b8:73:92:bc:d9:13:40: 62:96:8a:89:86:2e:7c:ab:2f:11:59:ef:f5:a7:19:d6:92:18: f4:82:a7:a3:85:9c:07:86:4c:c1:41:5a:32:c4:e7:4d:42:fc: b8:d9:92:29:a2:c7:42:a6:e9:90:6f:42:86:4b:5e:78:fe:d7: f3:49:8c:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPHl5obtNpMhg9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk YTYzMGFiY2ItYTM3Yi00NGUwLWExODgtNDBlNmI1MTQyMDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuE8haHFM6ZL0Yu8Sj4MzJB2tisuJgBqEwdn SetfBZAkjOAx4dmRps/4pW45TKOydbcGeNtTlbrzP3Ox7FKBEz+KP2vNLhRViJdy zKo8aSGTmG0A20px1b+jbBw8ieaQylgVaP6wMpNAr+Jf1yQJ3PrRXpWI7jzo8bor Qg/Un0BD7imBWMw6IZvASlYXYS+lM+vzcRFv1CnPbI2Y0HU56wc8c3txzKw48mEe N4TbivJe6ZLOhzDtV3DHo7ZlSakShUNfwD149XqLU8AySj9Aiz7unDDPTifXtlqJ B7Wfj9dsTYoZHUp/+TC6kHS5c7MavINtqEuIrooxlrVy0mv1rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMd3CCnOS/y+q4RrkW/dvtWCXdgtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTVhN2UzOWQtMjkxNy0z M2QwLWI5Y2UtNzIyYjg4ZTBhMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBk7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFn0+R9ZjSJo7WUbq+cKqSopB97ebiixlTIXOjLjvPRpQBgdv5J+DoFW bePdUThchy49lfP8hlLyDVWfnS8AdFWEDEw1w6dbVCFgnv+ScKIoqPUhHd9C0OY4 Vf7UJ8fjWDDeMVv1/zhwrKlC6D9nsKzXVwT2iEUty8pcpXPtlFCAiECI4BsDpQ6P WRvkEpQd6sTNklHO9Mk0Y5WCMULrln+XpcrKxKpFyJuYHqddkP6PkCokER/hrMKL GmcVTU/GuHOSvNkTQGKWiomGLnyrLxFZ7/WnGdaSGPSCp6OFnAeGTMFBWjLE501C /LjZkimix0Km6ZBvQoZLXnj+1/NJjGQ= -----END CERTIFICATE-----Generated at Sat Apr 5 12:24:52 2025 by rpki-client