$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8917e5fe-6b12-3804-9883-7a75cbc60100.roa File: 8917e5fe-6b12-3804-9883-7a75cbc60100.roa (raw, json) Hash identifier: KbU8zGxvZ1vhj8/EsNKgggWxFasSkQPrtnB+CZBwL2I= Subject key identifier: 6A:EE:A6:1A:89:06:2F:3E:5A:53:48:5F:4B:9D:36:13:15:0D:BC:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849218430A1700AEE3C7AAA8A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8917e5fe-6b12-3804-9883-7a75cbc60100.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 16625 IP address blocks: 184.29.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:30:a1:70:0a:ee:3c:7a:aa:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=a5e7e0d4-d66a-4e7c-8a0b-3d84ac317af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fd:28:b2:1f:41:01:d3:42:d5:74:1c:84:aa: b3:5a:7e:75:21:d7:42:c4:9b:ec:f5:87:96:d8:81: 5c:7b:d7:74:75:25:5f:ec:4d:07:84:08:ac:6a:b9: dd:b6:29:12:cd:cd:bd:3d:6b:73:1a:f1:ac:46:d8: 43:7c:ac:38:b8:f1:cb:6e:a6:0e:4f:59:fb:33:75: e0:c4:02:32:2d:f5:50:df:4c:eb:06:5e:7e:4a:60: 06:bf:f9:3d:02:d8:5b:8d:2e:83:22:8f:35:e1:16: 15:32:6a:cd:5e:33:5e:d4:14:0a:1d:3f:96:49:b4: 59:9a:57:13:ef:2e:a1:16:89:cb:f9:d9:c9:19:64: 71:76:a8:24:1b:38:dd:56:31:69:df:ec:07:87:4e: 58:68:7e:28:e3:fb:77:bb:6c:25:01:c9:cc:6b:9a: 84:08:d2:6e:18:99:57:50:55:0d:f7:a0:5f:c5:8a: f2:d2:0a:79:88:9c:83:42:28:16:a9:b9:05:32:74: 86:83:f4:44:95:87:d8:5f:54:5a:a3:1a:88:ed:18: 47:0f:69:98:6c:b0:fc:ea:b8:ed:97:ec:fd:54:6a: 6c:6e:9e:b0:6f:cb:0c:3e:36:94:23:0b:9c:56:86: 9c:69:07:82:54:85:bb:27:78:f3:b3:30:77:7b:e8: 38:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EE:A6:1A:89:06:2F:3E:5A:53:48:5F:4B:9D:36:13:15:0D:BC:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8917e5fe-6b12-3804-9883-7a75cbc60100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.29.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:e5:f8:86:04:83:56:03:51:57:8b:a4:7f:2d:eb:62:75:f9: ec:e0:f8:af:7b:cf:08:25:fa:97:a8:e5:23:0a:83:c2:b3:07: 24:98:16:a9:94:40:ff:d5:37:5c:32:f8:b1:4c:15:15:b1:5d: 9e:de:11:e9:53:12:b0:5e:a5:af:5b:05:ee:31:be:56:d6:d4: 51:34:36:87:ed:e9:bd:3a:78:f6:7d:cd:e7:4a:51:26:57:26: fc:3f:cb:24:6d:df:af:3d:03:4d:85:53:73:af:09:21:dd:ff: 0e:48:5e:c8:f7:8f:e9:ae:01:c3:d2:26:40:4b:52:6a:74:62: 26:ec:b7:be:35:e4:62:2e:f5:2a:e8:92:79:cc:7e:0c:40:be: 2e:26:c0:8f:c4:54:28:42:17:97:4d:53:a4:f7:40:35:3a:84: ef:8c:38:74:c7:12:70:1e:f8:7d:19:61:e7:9d:bc:03:f8:dc: 10:5a:9e:e1:01:84:d8:6f:9d:e9:df:7e:a9:e7:88:fc:b0:f9: ba:ef:5b:ea:57:f4:66:a8:f4:a5:3c:54:a4:15:fb:b2:01:81: da:27:3e:cf:b8:2d:7f:0b:66:f3:e8:f4:32:b4:5a:1b:1a:28: 43:c2:9b:74:38:65:ab:a7:7c:81:a3:e5:bb:ff:03:de:09:1d: e8:a3:4e:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhDChcAruPHqqioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YTVlN2UwZDQtZDY2YS00ZTdjLThhMGItM2Q4NGFjMzE3YWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv0osh9BAdNC1XQchKqzWn51IddCxJvs9YeW 2IFce9d0dSVf7E0HhAisarndtikSzc29PWtzGvGsRthDfKw4uPHLbqYOT1n7M3Xg xAIyLfVQ30zrBl5+SmAGv/k9AthbjS6DIo814RYVMmrNXjNe1BQKHT+WSbRZmlcT 7y6hFonL+dnJGWRxdqgkGzjdVjFp3+wHh05YaH4o4/t3u2wlAcnMa5qECNJuGJlX UFUN96BfxYry0gp5iJyDQigWqbkFMnSGg/RElYfYX1RaoxqI7RhHD2mYbLD86rjt l+z9VGpsbp6wb8sMPjaUIwucVoacaQeCVIW7J3jzszB3e+g4XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGruphqJBi8+WlNIX0udNhMVDbxDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODkxN2U1ZmUtNmIxMi0z ODA0LTk4ODMtN2E3NWNiYzYwMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuB0CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfl+IYEg1YDUVeLpH8t62J1+ezg+K97zwgl+peo5SMKg8KzBySYFqmU QP/VN1wy+LFMFRWxXZ7eEelTErBepa9bBe4xvlbW1FE0Noft6b06ePZ9zedKUSZX Jvw/yyRt3689A02FU3OvCSHd/w5IXsj3j+muAcPSJkBLUmp0Yibst7415GIu9Sro knnMfgxAvi4mwI/EVChCF5dNU6T3QDU6hO+MOHTHEnAe+H0ZYeedvAP43BBanuEB hNhvnenffqnniPyw+brvW+pX9Gao9KU8VKQV+7IBgdonPs+4LX8LZvPo9DK0Whsa KEPCm3Q4ZaunfIGj5bv/A94JHeijTn8= -----END CERTIFICATE-----Generated at Sat Apr 26 22:16:32 2025 by rpki-client