$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1e4b4c7-d6ce-3ae5-906e-b261ac02c9c9.roa File: d1e4b4c7-d6ce-3ae5-906e-b261ac02c9c9.roa (raw, json) Hash identifier: P03egHiOSfJD8u+eF6qRHUk6mcI9irbXNJaG67WF2MM= Subject key identifier: 1E:0E:15:A0:E9:28:A9:7D:DE:C7:F3:08:CC:07:28:BC:46:14:50:6D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584921842D19C1A5CC21F5840080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1e4b4c7-d6ce-3ae5-906e-b261ac02c9c9.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 20940 IP address blocks: 184.27.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:2d:19:c1:a5:cc:21:f5:84:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=b28a1e10-da7e-4565-b1b1-58299a530d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:92:b7:a9:c8:53:41:91:52:6b:6c:7b:83:9a: 10:e5:de:fc:d4:b9:49:86:07:60:5d:34:a2:e4:6b: 00:87:a3:0d:78:9e:ca:ae:0d:fb:2f:8f:ab:21:69: 2b:93:90:ef:b9:47:56:9b:51:ce:b1:09:cf:80:b2: 65:90:19:b7:bc:3f:61:cc:6a:c6:2f:ec:97:cc:b6: f1:f9:e3:5e:9e:a1:cb:5a:62:4c:fa:81:c9:77:e6: 01:d9:b5:ed:5c:51:f9:fc:cc:e6:4d:80:fb:a2:bb: 49:10:8c:7e:8a:77:39:1e:99:81:7c:5c:39:f8:5f: 45:fd:d1:07:b4:20:f0:69:44:6f:25:8d:52:dd:07: 2f:9a:3a:9c:55:a6:e9:1b:1d:e8:1b:1e:53:9d:8c: ad:42:1d:76:3d:9b:7a:f8:66:91:e1:0f:e8:44:32: ce:dd:01:63:89:6c:5b:0d:83:99:7a:a1:a6:af:b7: 65:1a:76:94:51:ae:7e:ec:a4:2f:15:2a:c8:21:da: 23:5e:00:08:e6:5a:37:31:73:8a:5f:3a:08:7f:8d: 37:f4:11:6b:3c:43:53:ff:15:3a:a8:21:04:c4:24: 2c:29:3f:90:7e:2a:b7:56:bd:3a:c1:5f:0b:15:e6: a6:32:f8:61:a1:33:9e:68:52:dc:24:63:54:21:52: 4d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0E:15:A0:E9:28:A9:7D:DE:C7:F3:08:CC:07:28:BC:46:14:50:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1e4b4c7-d6ce-3ae5-906e-b261ac02c9c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.27.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:cc:1c:c7:f8:2a:dc:39:d3:dc:4d:49:d7:12:09:5e:a9:c2: ef:1a:2d:5f:a1:c4:4a:57:c0:f0:2d:11:06:8b:1c:8c:d3:0c: de:aa:0e:e4:e0:96:9c:a8:6d:69:87:c7:b7:14:4d:bb:de:77: 6c:70:2b:42:7b:30:c2:1a:15:2b:08:ac:5e:64:1d:b4:f4:28: 06:c1:11:9d:d5:a7:bf:73:74:90:6b:44:9f:59:4f:b8:97:8e: b1:51:9a:d7:3f:9c:3c:55:81:7e:80:e0:70:74:c5:6f:10:d8: bf:42:13:a8:5e:ff:2f:89:72:24:b2:48:dd:f2:42:f6:6b:16: 0b:d5:c4:9b:de:6e:17:ec:ba:13:38:2e:f4:f8:61:fa:98:82: 0f:68:15:17:e4:24:20:f7:ca:a0:1a:c1:6f:ca:fd:b9:70:fa: 60:63:a9:fc:a5:f7:c0:6c:a2:5d:8c:7b:e4:2e:69:0c:cb:d2: 22:24:d1:56:62:f1:58:82:39:a2:2b:cc:b8:58:24:a6:2a:d2: 40:e5:31:e5:c0:de:00:35:0b:93:92:eb:18:49:6d:63:5b:74: 00:2b:20:ab:52:b1:68:80:27:fb:bf:bf:20:2d:b2:8e:81:cf: 2e:b2:fc:9b:ce:79:0b:03:bb:47:76:7e:81:e1:f4:8d:83:13: 0c:de:94:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhC0ZwaXMIfWEAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YjI4YTFlMTAtZGE3ZS00NTY1LWIxYjEtNTgyOTlhNTMwZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpK3qchTQZFSa2x7g5oQ5d781LlJhgdgXTSi 5GsAh6MNeJ7Krg37L4+rIWkrk5DvuUdWm1HOsQnPgLJlkBm3vD9hzGrGL+yXzLbx +eNenqHLWmJM+oHJd+YB2bXtXFH5/MzmTYD7ortJEIx+inc5HpmBfFw5+F9F/dEH tCDwaURvJY1S3QcvmjqcVabpGx3oGx5TnYytQh12PZt6+GaR4Q/oRDLO3QFjiWxb DYOZeqGmr7dlGnaUUa5+7KQvFSrIIdojXgAI5lo3MXOKXzoIf4039BFrPENT/xU6 qCEExCQsKT+Qfiq3Vr06wV8LFeamMvhhoTOeaFLcJGNUIVJNxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4OFaDpKKl93sfzCMwHKLxGFFBtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDFlNGI0YzctZDZjZS0z YWU1LTkwNmUtYjI2MWFjMDJjOWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuBsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnMHMf4Ktw509xNSdcSCV6pwu8aLV+hxEpXwPAtEQaLHIzTDN6qDuTg lpyobWmHx7cUTbved2xwK0J7MMIaFSsIrF5kHbT0KAbBEZ3Vp79zdJBrRJ9ZT7iX jrFRmtc/nDxVgX6A4HB0xW8Q2L9CE6he/y+JciSySN3yQvZrFgvVxJvebhfsuhM4 LvT4YfqYgg9oFRfkJCD3yqAawW/K/blw+mBjqfyl98Bsol2Me+QuaQzL0iIk0VZi 8ViCOaIrzLhYJKYq0kDlMeXA3gA1C5OS6xhJbWNbdAArIKtSsWiAJ/u/vyAtso6B zy6y/JvOeQsDu0d2foHh9I2DEwzelJY= -----END CERTIFICATE-----Generated at Sat Apr 26 18:34:17 2025 by rpki-client