$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/223f7d80-536f-3632-b648-68b39bcbe5f9.roa File: 223f7d80-536f-3632-b648-68b39bcbe5f9.roa (raw, json) Hash identifier: p2QJLRfxMijpjvq5/v2lua2cN/p/gXIG5S+3gxcADSo= Subject key identifier: 53:10:C9:2F:67:73:5A:42:2A:A1:07:80:CD:E5:DE:B0:CA:1F:7F:2B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858498FC9BBFB663856927339E000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/223f7d80-536f-3632-b648-68b39bcbe5f9.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 16625 IP address blocks: 184.28.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:bb:fb:66:38:56:92:73:39:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=9531db67-1981-4cc9-aba2-3aa55439ea93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d9:df:e9:79:ae:8a:97:c4:7f:7e:8e:1a:9b: 45:50:30:af:3e:73:6a:27:1f:25:7d:53:fd:18:08: 8b:ca:64:4e:e5:7d:51:99:bb:70:b4:35:73:97:95: 2f:de:36:45:2f:f3:8b:c4:c7:c4:35:6d:a9:84:b6: 85:89:9d:8f:bf:03:02:30:1a:31:ac:7d:1c:37:fa: 16:f6:be:ee:c0:06:81:7d:15:6b:7a:09:cb:5b:69: 14:db:58:7b:68:81:9a:cf:41:31:23:33:9c:a3:ba: 67:d4:ba:73:7a:3f:6a:ff:c9:bd:81:c7:95:d2:dd: ba:ef:11:b2:bc:14:2c:8c:5e:88:8f:7b:9c:e6:6e: 24:bf:71:38:de:dd:32:67:e1:64:3d:8d:d7:21:91: e0:5f:8f:44:b6:f3:b6:94:36:af:4e:5c:ea:f0:06: 90:a2:57:7c:20:1a:3d:a3:79:9d:fc:51:f4:da:dd: f1:82:6a:d4:50:38:6f:1a:a1:28:8c:07:81:f5:e0: 5a:c3:24:d0:8e:8c:5b:0b:15:47:99:93:5f:d2:ce: 57:0b:37:25:57:c1:d1:74:cf:c9:d0:97:47:37:39: 80:d1:c3:69:50:8c:4a:cf:73:d2:c7:c9:81:67:37: b4:1d:3f:cb:50:2e:9d:49:32:75:36:a5:1a:39:fe: 57:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:10:C9:2F:67:73:5A:42:2A:A1:07:80:CD:E5:DE:B0:CA:1F:7F:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/223f7d80-536f-3632-b648-68b39bcbe5f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.28.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:69:9d:49:fd:f2:ea:90:e9:37:d0:90:54:29:89:b2:3c:a6: 64:35:7e:20:a5:9c:c6:70:2b:da:38:dd:d3:6d:f3:78:61:11: 8e:97:0f:68:7a:c6:1a:d2:18:53:df:48:d4:97:7d:62:8d:5e: 24:a4:07:9c:85:dc:a0:9d:c1:4a:2e:fb:4b:8d:ba:20:3e:cb: 05:da:17:9c:2e:38:fd:f3:bc:a6:51:83:af:7a:c9:d6:c1:80: 14:ff:5c:c4:3f:d9:bf:61:e7:2b:9d:30:af:c4:10:a7:31:1c: 43:86:8b:b4:6c:6a:34:ff:b9:87:5b:a3:bc:d6:96:2f:13:04: a0:fe:04:59:ba:64:08:e8:73:de:d6:8b:f7:a0:db:cb:56:59: 63:8d:cf:17:6a:9c:b2:4e:4d:26:01:cb:97:78:63:fb:b6:6d: 80:4a:2e:e3:e6:d7:42:81:cb:88:f2:82:03:28:50:fa:c3:46: 2d:f3:9d:01:6d:a9:b0:ba:6e:cc:55:82:8f:09:d1:c3:3f:1f: d8:c8:e0:3c:d3:4f:42:a3:89:69:d0:26:f4:2d:be:9b:a5:3b: 69:89:8c:90:73:38:8a:bc:af:70:82:57:d8:17:83:a4:b8:7e: 29:ae:dc:2e:6a:81:8a:32:7b:f9:4e:9b:14:8c:2f:8c:28:1f: 44:c8:0f:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybv7ZjhWknM54AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk OTUzMWRiNjctMTk4MS00Y2M5LWFiYTItM2FhNTU0MzllYTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9nf6XmuipfEf36OGptFUDCvPnNqJx8lfVP9 GAiLymRO5X1RmbtwtDVzl5Uv3jZFL/OLxMfENW2phLaFiZ2PvwMCMBoxrH0cN/oW 9r7uwAaBfRVregnLW2kU21h7aIGaz0ExIzOco7pn1Lpzej9q/8m9gceV0t267xGy vBQsjF6Ij3uc5m4kv3E43t0yZ+FkPY3XIZHgX49EtvO2lDavTlzq8AaQold8IBo9 o3md/FH02t3xgmrUUDhvGqEojAeB9eBawyTQjoxbCxVHmZNf0s5XCzclV8HRdM/J 0JdHNzmA0cNpUIxKz3PSx8mBZze0HT/LUC6dSTJ1NqUaOf5X/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMQyS9nc1pCKqEHgM3l3rDKH38rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjIzZjdkODAtNTM2Zi0z NjMyLWI2NDgtNjhiMzliY2JlNWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuBxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxpnUn98uqQ6TfQkFQpibI8pmQ1fiClnMZwK9o43dNt83hhEY6XD2h6 xhrSGFPfSNSXfWKNXiSkB5yF3KCdwUou+0uNuiA+ywXaF5wuOP3zvKZRg696ydbB gBT/XMQ/2b9h5yudMK/EEKcxHEOGi7RsajT/uYdbo7zWli8TBKD+BFm6ZAjoc97W i/eg28tWWWONzxdqnLJOTSYBy5d4Y/u2bYBKLuPm10KBy4jyggMoUPrDRi3znQFt qbC6bsxVgo8J0cM/H9jI4DzTT0KjiWnQJvQtvpulO2mJjJBzOIq8r3CCV9gXg6S4 fimu3C5qgYoye/lOmxSML4woH0TIDwM= -----END CERTIFICATE-----Generated at Sun Apr 27 05:46:22 2025 by rpki-client