$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa File: 86e34e6c-0e06-342b-9c88-f3f080f46e40.roa (raw, json) Hash identifier: y4qG683JLu+NBh+J0RAQUMs4a2n3LlyMoxUjc4T0i4A= Subject key identifier: DB:26:8F:DA:D3:B0:6B:DA:7A:AE:E5:DE:A9:35:BB:0B:57:7B:7E:8E Certificate issuer: /CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7 Certificate serial: 010D0C9F4328584A9FFB8DE3E356E62CEF426900 Authority key identifier: 98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 399507 IP address blocks: 91.106.220.0/22 maxlen: 24 204.52.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:8d:e3:e3:56:e6:2c:ef:42:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=d461b48b-85d2-4b49-a5b2-86d4ae469fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e3:ef:f7:af:2b:b6:7f:ac:d2:77:c5:90:65: 5a:7a:e5:90:96:6d:a3:18:f9:77:5b:43:17:c3:4e: 4b:2b:34:e1:fe:d4:dc:5d:90:f8:90:ff:d1:8f:05: 6e:cb:64:4c:41:73:03:ce:f8:ca:61:de:0f:60:99: e1:b5:7c:2a:85:a3:20:6d:2c:9c:96:83:66:17:5a: 65:aa:20:7b:81:e3:43:1b:48:07:d7:89:3c:9a:55: fd:ef:4b:e2:54:74:d8:61:24:70:55:49:8d:8e:a3: 75:1b:d6:a9:c0:e7:cd:14:11:e3:3e:3b:e2:62:e2: 56:57:66:0b:08:91:a2:af:4a:e3:d8:1a:4e:ae:18: f4:36:b9:af:0a:e6:4d:9f:a6:bd:ea:ef:86:1f:a0: 9b:99:d9:ba:1f:b8:aa:69:14:3b:87:37:c4:03:c5: 6e:61:34:34:32:de:f3:df:27:ec:df:56:ed:d2:02: cd:ed:ad:c5:57:53:c8:7a:d4:01:bf:ae:be:09:c8: 8e:fc:3f:be:5a:68:79:30:38:ee:c3:d0:ab:da:61: cc:a4:c1:67:6f:88:4d:f0:ac:19:31:f8:1f:19:61: a4:38:fc:52:5a:9a:dc:74:37:52:e1:64:c9:ef:14: 0b:1d:c4:5f:86:c1:e3:8c:96:19:a3:88:e4:5b:46: a8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:26:8F:DA:D3:B0:6B:DA:7A:AE:E5:DE:A9:35:BB:0B:57:7B:7E:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl X509v3 Authority Key Identifier: keyid:98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer sbgp-ipAddrBlock: critical IPv4: 91.106.220.0/22 204.52.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:2f:46:c4:e0:18:ed:8f:6c:9c:cc:6f:7b:20:be:91:4c:12: a4:f6:a0:c1:03:76:2d:a6:38:3d:c9:05:01:f4:86:40:fa:09: 17:eb:dc:bd:fb:3d:78:bd:d2:2c:cd:b6:7c:2b:a4:c0:bd:96: 04:5f:b7:06:50:5a:42:57:3c:8f:5c:fa:19:b6:8a:25:8f:f8: cf:c5:9c:91:b3:a7:6f:af:17:49:08:be:31:db:51:d9:51:ca: c2:b1:96:87:04:fd:da:47:3a:5b:1d:69:ae:0f:d7:74:e8:27: 0e:7f:1b:09:32:59:2f:02:54:89:7f:63:e1:d4:c0:2e:a0:59: 5d:52:67:53:91:21:c1:6b:e2:60:1b:07:f8:a2:b6:09:89:6e: 47:39:64:e4:2a:89:dd:83:ed:80:07:93:0c:77:85:21:ea:fe: ac:6e:86:48:56:ba:53:42:85:e7:d0:b5:f6:7b:59:9a:ca:e9: 08:e8:0e:78:3c:1f:b4:46:31:bc:45:57:21:ea:fd:7f:8d:cf: 8d:eb:0d:b5:25:f5:ff:41:7c:ae:d5:88:24:b3:4e:7f:64:da: 57:49:28:e6:96:48:d7:f3:74:60:df:eb:a5:1a:5d:03:55:50: c0:23:d0:c8:d6:58:1e:14:df:1e:d6:66:97:4f:a0:66:97:af: 98:e5:1b:ee -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqf+43j41bmLO9CaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzE3OGQyMWItOWJmMC00MTcyLTllY2UtNGE0ZDg0ZmM2 NmU3MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ZDQ2MWI0OGItODVkMi00YjQ5LWE1YjItODZkNGFlNDY5ZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguPv968rtn+s0nfFkGVaeuWQlm2jGPl3W0MX w05LKzTh/tTcXZD4kP/RjwVuy2RMQXMDzvjKYd4PYJnhtXwqhaMgbSycloNmF1pl qiB7geNDG0gH14k8mlX970viVHTYYSRwVUmNjqN1G9apwOfNFBHjPjviYuJWV2YL CJGir0rj2BpOrhj0NrmvCuZNn6a96u+GH6Cbmdm6H7iqaRQ7hzfEA8VuYTQ0Mt7z 3yfs31bt0gLN7a3FV1PIetQBv66+CciO/D++Wmh5MDjuw9Cr2mHMpMFnb4hN8KwZ MfgfGWGkOPxSWprcdDdS4WTJ7xQLHcRfhsHjjJYZo4jkW0aoEQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNsmj9rTsGvaeq7l3qk1uwtXe36OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jMTc4 ZDIxYi05YmYwLTQxNzItOWVjZS00YTRkODRmYzY2ZTcvODZlMzRlNmMtMGUwNi0z NDJiLTljODgtZjNmMDgwZjQ2ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzE3OGQyMWItOWJmMC00MTcyLTll Y2UtNGE0ZDg0ZmM2NmU3L2MxNzhkMjFiLTliZjAtNDE3Mi05ZWNlLTRhNGQ4NGZj NjZlNy5jcmwwHwYDVR0jBBgwFoAUmBsiJHtMzI26D1mpAZmK2c++z4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jMTc4ZDIxYi05YmYwLTQxNzItOWVjZS00YTRk ODRmYzY2ZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW2rcAwQE zDQQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEQvRsTgGO2PbJzMb3sgvpFMEqT2oMEDdi2mOD3JBQH0hkD6 CRfr3L37PXi90izNtnwrpMC9lgRftwZQWkJXPI9c+hm2iiWP+M/FnJGzp2+vF0kI vjHbUdlRysKxlocE/dpHOlsdaa4P13ToJw5/GwkyWS8CVIl/Y+HUwC6gWV1SZ1OR IcFr4mAbB/iitgmJbkc5ZOQqid2D7YAHkwx3hSHq/qxuhkhWulNChefQtfZ7WZrK 6QjoDng8H7RGMbxFVyHq/X+Nz43rDbUl9f9BfK7ViCSzTn9k2ldJKOaWSNfzdGDf 66UaXQNVUMAj0MjWWB4U3x7WZpdPoGaXr5jlG+4= -----END CERTIFICATE-----Generated at Sun Aug 24 08:20:08 2025 by rpki-client