$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2b26684-0b2d-3609-8fe3-e8c4012f6b1d.roa File: b2b26684-0b2d-3609-8fe3-e8c4012f6b1d.roa (raw, json) Hash identifier: oaBXY+SanjM2KVxclZBwJTEq11OXeMGOt/T9wQSC6r4= Subject key identifier: F0:8C:2B:CC:F2:B6:05:DB:5C:51:87:F3:49:6B:32:D8:07:5A:F3:E7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849FF75857205793401FD3B4890 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2b26684-0b2d-3609-8fe3-e8c4012f6b1d.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 16625 IP address blocks: 184.24.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:85:72:05:79:34:01:fd:3b:48:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=a437d7c4-52a1-4f2d-9501-b11c643a5020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:87:44:59:0c:e2:2a:a0:2e:74:bf:91:f5:d8: 30:e7:fe:76:03:52:27:46:2c:a0:eb:4b:75:86:e1: 98:15:78:6f:7e:c6:ed:7e:ec:be:a2:84:15:ad:03: 35:71:f4:14:b4:87:2e:dc:df:72:b0:e3:f5:2d:39: 58:10:2a:e8:6c:cf:9d:1f:e4:44:15:8f:6f:24:6d: dd:cf:e1:04:b9:ad:fc:64:3f:71:05:96:c9:d0:44: e3:a9:31:a5:91:60:d8:96:ec:bb:0f:b4:b7:ea:96: bb:02:40:2d:69:96:d2:fe:bb:3d:c5:e2:e7:6a:3b: 00:0d:10:89:14:4e:82:06:88:ae:6e:60:4f:c8:0b: 27:ab:59:1d:10:72:8f:56:a5:80:b7:df:a8:0e:cf: 88:79:78:41:b2:db:ef:87:32:39:32:a7:89:b0:4a: cf:e9:8b:c2:3a:1c:7a:02:84:0b:6f:d3:89:6f:6c: 57:fd:a4:82:23:33:36:ea:0d:24:c6:11:13:50:ad: 16:7c:95:31:bc:e9:e6:4f:db:d5:4e:36:4f:47:7d: 42:3c:60:6a:60:2d:d0:41:e9:3a:a2:57:8b:30:b4: 41:20:3f:45:9f:b2:a1:f7:2c:e1:53:17:9f:6d:0b: cc:ac:fc:04:76:b8:be:85:38:21:ed:5c:68:26:25: 68:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8C:2B:CC:F2:B6:05:DB:5C:51:87:F3:49:6B:32:D8:07:5A:F3:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2b26684-0b2d-3609-8fe3-e8c4012f6b1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.24.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:7a:09:e7:a4:a9:39:24:5b:f2:4a:36:5e:b8:bb:bc:a3:30: b5:09:2c:b8:80:54:e0:96:00:6a:95:5a:f0:0d:0e:cb:ee:d0: a1:ae:d0:f4:31:31:8e:05:6f:8b:63:f1:9b:ea:14:4c:63:14: 35:57:e1:ad:92:62:2f:c5:5d:b8:48:5a:f2:c3:e2:01:98:d5: c8:11:be:17:ce:4a:27:a7:5e:dd:dd:18:82:46:76:1a:1b:ae: 66:da:fe:d9:a3:44:83:c1:5b:e8:9c:2d:45:bd:8e:8c:c4:9a: 18:4b:ff:c4:54:3a:a9:6e:1d:c2:ec:af:b8:0b:8b:47:d2:f5: 8f:1f:27:d0:9d:de:ef:c6:ea:02:15:18:18:23:a4:b7:41:f7: 58:ff:dc:74:b5:f7:b9:04:ac:b0:2d:71:7e:4d:e2:c3:3c:b0: 02:f5:c6:c2:a3:1f:ef:55:b1:02:71:c3:bc:fe:8f:ff:45:73: 92:0f:b8:17:db:1b:81:a1:16:75:85:d1:46:7d:01:71:b1:31: 2a:38:d0:22:a2:ab:4b:fc:66:5c:28:06:d6:66:3d:2c:dc:69: 21:c6:20:a1:4a:d1:b3:d1:c5:3b:ea:59:62:d6:47:28:76:59: d4:6d:e5:5b:32:4b:83:d1:bd:7f:db:d0:b6:2a:03:52:0c:79: ae:2d:7d:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dYVyBXk0Af07SJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk YTQzN2Q3YzQtNTJhMS00ZjJkLTk1MDEtYjExYzY0M2E1MDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IdEWQziKqAudL+R9dgw5/52A1InRiyg60t1 huGYFXhvfsbtfuy+ooQVrQM1cfQUtIcu3N9ysOP1LTlYECrobM+dH+REFY9vJG3d z+EEua38ZD9xBZbJ0ETjqTGlkWDYluy7D7S36pa7AkAtaZbS/rs9xeLnajsADRCJ FE6CBoiubmBPyAsnq1kdEHKPVqWAt9+oDs+IeXhBstvvhzI5MqeJsErP6YvCOhx6 AoQLb9OJb2xX/aSCIzM26g0kxhETUK0WfJUxvOnmT9vVTjZPR31CPGBqYC3QQek6 oleLMLRBID9Fn7Kh9yzhUxefbQvMrPwEdri+hTgh7VxoJiVoVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCMK8zytgXbXFGH80lrMtgHWvPnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjJiMjY2ODQtMGIyZC0z NjA5LThmZTMtZThjNDAxMmY2YjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuBjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEx6CeekqTkkW/JKNl64u7yjMLUJLLiAVOCWAGqVWvANDsvu0KGu0PQx MY4Fb4tj8ZvqFExjFDVX4a2SYi/FXbhIWvLD4gGY1cgRvhfOSienXt3dGIJGdhob rmba/tmjRIPBW+icLUW9jozEmhhL/8RUOqluHcLsr7gLi0fS9Y8fJ9Cd3u/G6gIV GBgjpLdB91j/3HS197kErLAtcX5N4sM8sAL1xsKjH+9VsQJxw7z+j/9Fc5IPuBfb G4GhFnWF0UZ9AXGxMSo40CKiq0v8ZlwoBtZmPSzcaSHGIKFK0bPRxTvqWWLWRyh2 WdRt5VsyS4PRvX/b0LYqA1IMea4tfUE= -----END CERTIFICATE-----Generated at Sun Jun 15 19:03:31 2025 by rpki-client