$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b2c63b9-6556-32c6-b3e0-e17459359e3a.roa File: 9b2c63b9-6556-32c6-b3e0-e17459359e3a.roa (raw, json) Hash identifier: QkUgxRJj7UcrtkYR8SIy4xUledB0SVv16pHFug3GydQ= Subject key identifier: 56:3A:E2:C9:23:28:9D:0C:01:C2:05:3A:42:EC:12:54:D9:E7:06:18 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849BF3FA658D0EF8989F771E300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b2c63b9-6556-32c6-b3e0-e17459359e3a.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 16625 IP address blocks: 184.25.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a6:58:d0:ef:89:89:f7:71:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=4772b9f6-5700-4a09-b67d-fab2a20fc4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5e:40:e0:52:c0:fe:ef:01:be:31:0a:bc:fa: ca:06:ce:bc:3a:21:3c:53:17:29:cf:2c:8d:55:9f: 36:2e:2e:3d:d0:cb:de:d5:d5:60:d6:0d:eb:92:0f: 24:4e:d3:83:6e:ea:2f:94:44:c9:14:ff:42:96:04: d4:9a:02:7f:06:67:08:67:d3:ca:1c:46:05:bc:34: 1a:b8:53:ce:9a:fb:a2:e0:6c:65:48:51:59:1b:bd: a9:04:84:68:59:cf:62:32:c3:1b:89:93:8c:a1:ae: 35:e7:c8:46:e2:6b:20:3d:f5:e4:a4:e5:e3:5c:32: 01:1c:a3:c0:3c:41:ab:da:ef:7e:9e:02:a1:b3:28: b6:54:11:17:48:3d:11:33:51:a1:68:a2:c3:0f:d4: 75:11:63:0b:10:b8:88:5c:61:b3:b4:89:b2:79:f7: 52:cb:d5:28:3c:8a:70:45:f1:1d:a3:0d:74:76:42: d7:e0:7c:bf:c7:79:42:ec:6a:4f:19:83:29:ee:c8: 22:85:2b:1b:16:1c:66:9b:e5:02:05:a0:65:67:58: 01:84:ee:e7:6b:b1:cc:6e:27:49:ad:30:9a:55:c3: 3d:92:81:b7:5a:70:46:b2:52:8b:c9:17:07:01:28: c7:d3:aa:57:94:75:61:0c:9c:ea:61:8c:c1:aa:ab: e5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3A:E2:C9:23:28:9D:0C:01:C2:05:3A:42:EC:12:54:D9:E7:06:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b2c63b9-6556-32c6-b3e0-e17459359e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.25.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4f:2b:52:50:af:79:6f:47:7e:6b:21:ac:ea:21:fd:50:65: 30:a1:bf:fd:7f:b2:11:ec:3c:e8:60:c7:90:59:92:df:64:f7: 99:a0:40:5d:fa:53:9f:df:86:e5:a8:c8:21:74:bc:3f:c0:24: 8b:ec:dc:ce:fa:2e:36:8a:09:1d:70:45:5f:79:83:18:0b:eb: 24:34:9f:6d:77:a9:00:e6:d4:93:82:7f:c6:c9:ac:e0:ca:22: 52:18:9a:e6:d6:bc:74:59:50:2b:c5:ea:a5:d4:cd:4b:f3:e1: 8c:a2:61:f4:11:00:c9:94:a5:ca:60:cd:8c:04:c9:24:af:9e: 80:ee:5a:e5:ad:f8:d1:38:22:4a:d9:8d:e2:5b:db:f9:55:88: 3c:16:7e:27:7c:40:f6:9a:04:da:e3:e5:98:74:a4:c4:93:81: 12:7f:b7:c4:2d:d3:d6:85:f4:32:60:64:8e:86:2f:26:1b:28: c8:db:68:3c:5e:17:8e:b5:b4:46:5a:41:40:ab:5d:ca:13:f0: 8e:e8:03:34:d8:59:28:f4:ee:a2:c5:32:5b:c4:f4:86:17:46: 7f:f2:60:dd:85:ad:84:41:8b:d0:c8:eb:ff:80:77:6f:55:54: 30:14:fe:f4:c6:62:2a:b8:49:6c:7f:a1:c8:cf:ba:5e:3b:c7: 54:6f:73:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6ZY0O+Jifdx4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NDc3MmI5ZjYtNTcwMC00YTA5LWI2N2QtZmFiMmEyMGZjNGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF5A4FLA/u8BvjEKvPrKBs68OiE8UxcpzyyN VZ82Li490Mve1dVg1g3rkg8kTtODbuovlETJFP9ClgTUmgJ/BmcIZ9PKHEYFvDQa uFPOmvui4GxlSFFZG72pBIRoWc9iMsMbiZOMoa4158hG4msgPfXkpOXjXDIBHKPA PEGr2u9+ngKhsyi2VBEXSD0RM1GhaKLDD9R1EWMLELiIXGGztImyefdSy9UoPIpw RfEdow10dkLX4Hy/x3lC7GpPGYMp7sgihSsbFhxmm+UCBaBlZ1gBhO7na7HMbidJ rTCaVcM9koG3WnBGslKLyRcHASjH06pXlHVhDJzqYYzBqqvlDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFY64skjKJ0MAcIFOkLsElTZ5wYYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWIyYzYzYjktNjU1Ni0z MmM2LWIzZTAtZTE3NDU5MzU5ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuBnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZPK1JQr3lvR35rIazqIf1QZTChv/1/shHsPOhgx5BZkt9k95mgQF36 U5/fhuWoyCF0vD/AJIvs3M76LjaKCR1wRV95gxgL6yQ0n213qQDm1JOCf8bJrODK IlIYmubWvHRZUCvF6qXUzUvz4YyiYfQRAMmUpcpgzYwEySSvnoDuWuWt+NE4IkrZ jeJb2/lViDwWfid8QPaaBNrj5Zh0pMSTgRJ/t8Qt09aF9DJgZI6GLyYbKMjbaDxe F461tEZaQUCrXcoT8I7oAzTYWSj07qLFMlvE9IYXRn/yYN2FrYRBi9DI6/+Ad29V VDAU/vTGYiq4SWx/ocjPul47x1Rvcxc= -----END CERTIFICATE-----Generated at Mon May 5 05:11:17 2025 by rpki-client