$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b560e71-199b-3ac5-aed7-a2c4ea9333d7.roa File: 8b560e71-199b-3ac5-aed7-a2c4ea9333d7.roa (raw, json) Hash identifier: U2OPnsCu7Mpd2sxQrB2CYi9diG03zvXSpF6tud27Sj4= Subject key identifier: BB:A2:70:81:8D:15:D3:C0:62:1A:D7:FE:14:CC:18:A6:2E:77:18:84 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BF3F7F96BC9025E3836C7640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b560e71-199b-3ac5-aed7-a2c4ea9333d7.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 16625 IP address blocks: 184.31.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:7f:96:bc:90:25:e3:83:6c:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=8c2bbf6c-dc50-4867-a5d4-f3a5d75d3374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6c:93:04:05:bb:83:e8:b8:1b:e9:4e:25:03: a2:70:53:38:17:91:3c:b1:f5:cc:86:42:34:ac:fb: 3f:c2:dc:78:46:0b:a4:e7:af:03:43:df:97:2a:28: 25:58:ad:bc:09:26:a7:02:4e:88:42:e1:cb:ae:2e: 36:50:1c:64:9b:50:f5:28:10:7d:c6:04:5e:50:3c: 55:e8:ec:d0:6b:1b:2c:22:80:15:ab:5c:ba:0a:1a: 9b:a4:08:28:dc:8d:51:ee:eb:39:fa:b7:5d:38:ce: 48:93:21:94:2a:7b:aa:3e:3f:cd:0c:52:9b:10:8a: 76:71:94:ba:50:e5:d7:37:e8:64:a9:22:b4:37:dd: 5b:30:33:46:37:46:26:7c:18:84:5b:4a:c4:3b:01: a6:90:d4:4e:fc:7b:d5:13:13:08:20:cb:8c:5d:47: 5f:3b:b6:dc:96:69:74:8c:15:6e:ed:f8:8f:21:cb: 88:f6:4b:64:24:bd:e5:2c:51:fe:78:d4:2c:35:da: be:fd:2d:9f:de:13:e3:2f:3f:bc:2f:f8:b4:9e:43: 87:e6:45:be:d4:06:68:85:01:1f:04:77:d3:00:15: 8f:41:2f:86:94:76:23:58:08:a3:50:88:19:60:75: 79:2e:dc:cc:5b:15:4b:fd:85:b3:fe:81:7e:88:22: 53:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A2:70:81:8D:15:D3:C0:62:1A:D7:FE:14:CC:18:A6:2E:77:18:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b560e71-199b-3ac5-aed7-a2c4ea9333d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.31.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a3:94:64:c9:6a:f8:35:e2:53:d7:ec:55:99:a3:7a:e5:e8: d9:5d:f7:87:0f:5b:0f:f9:3b:be:86:fb:72:e1:c0:c6:79:e2: 2d:92:79:5a:1c:7c:27:23:82:b5:20:23:81:54:c6:35:92:57: 8d:e5:17:36:69:08:70:e8:c8:e3:35:84:f5:39:eb:68:20:e3: 94:05:30:bd:ca:49:b3:04:da:5d:30:32:13:3e:fc:b8:d1:9d: a4:98:31:41:8c:95:d8:85:de:e5:33:e1:d9:c6:d7:73:5c:35: 56:bb:59:a2:89:fc:97:ca:e5:08:c3:a0:05:1a:43:e5:71:26: e7:21:58:8f:45:e9:25:d6:41:0f:27:52:83:25:95:eb:9a:36: 03:c1:8b:57:78:ef:9f:b5:e3:7b:a3:e5:24:07:cb:f1:24:b2: de:07:3e:e9:67:3f:fe:0a:7e:58:59:c0:65:45:27:9d:d0:9a: 3c:a1:a6:1c:28:7a:72:c8:a8:f5:3a:5b:2e:26:52:84:b4:c8: d3:8a:3d:64:1d:34:4d:70:9b:5b:18:3a:2b:e9:1e:ac:a8:f3: be:6d:89:f8:6c:40:d6:9e:fa:a9:5f:fe:8c:a5:ca:f6:84:01: d7:f8:c3:d7:83:32:e4:d8:59:e1:98:b0:ff:4b:91:dd:40:09: eb:ea:cd:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P3+WvJAl44NsdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk OGMyYmJmNmMtZGM1MC00ODY3LWE1ZDQtZjNhNWQ3NWQzMzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGyTBAW7g+i4G+lOJQOicFM4F5E8sfXMhkI0 rPs/wtx4Rguk568DQ9+XKiglWK28CSanAk6IQuHLri42UBxkm1D1KBB9xgReUDxV 6OzQaxssIoAVq1y6ChqbpAgo3I1R7us5+rddOM5IkyGUKnuqPj/NDFKbEIp2cZS6 UOXXN+hkqSK0N91bMDNGN0YmfBiEW0rEOwGmkNRO/HvVExMIIMuMXUdfO7bclml0 jBVu7fiPIcuI9ktkJL3lLFH+eNQsNdq+/S2f3hPjLz+8L/i0nkOH5kW+1AZohQEf BHfTABWPQS+GlHYjWAijUIgZYHV5LtzMWxVL/YWz/oF+iCJT5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuicIGNFdPAYhrX/hTMGKYudxiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGI1NjBlNzEtMTk5Yi0z YWM1LWFlZDctYTJjNGVhOTMzM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuB/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6jlGTJavg14lPX7FWZo3rl6Nld94cPWw/5O76G+3LhwMZ54i2SeVoc fCcjgrUgI4FUxjWSV43lFzZpCHDoyOM1hPU562gg45QFML3KSbME2l0wMhM+/LjR naSYMUGMldiF3uUz4dnG13NcNVa7WaKJ/JfK5QjDoAUaQ+VxJuchWI9F6SXWQQ8n UoMlleuaNgPBi1d475+143uj5SQHy/Ekst4HPulnP/4KflhZwGVFJ53Qmjyhphwo enLIqPU6Wy4mUoS0yNOKPWQdNE1wm1sYOivpHqyo875tifhsQNae+qlf/oylyvaE Adf4w9eDMuTYWeGYsP9Lkd1ACevqzbQ= -----END CERTIFICATE-----Generated at Mon May 5 09:55:23 2025 by rpki-client