$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21d82588-cab9-3c31-8abd-a281fdf9e3a7.roa File: 21d82588-cab9-3c31-8abd-a281fdf9e3a7.roa (raw, json) Hash identifier: L1104F3T4KSb4XygPCgauli6X0LLg4lIb5FgpAyGDII= Subject key identifier: 1A:7E:32:32:21:B6:32:BD:AE:60:28:06:7A:FE:7C:83:32:AD:E2:6D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD7D1418BBD835D05F17A1B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21d82588-cab9-3c31-8abd-a281fdf9e3a7.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 184.29.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:41:8b:bd:83:5d:05:f1:7a:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=1f571258-acae-48d4-b362-d616c48fc658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d0:17:4e:5f:f9:07:9b:a3:e1:dc:bc:48:15: 4f:1b:61:0f:4c:7c:3e:4d:f4:71:4c:b3:ed:a3:79: 26:9e:31:c6:8b:5c:dd:ba:6b:aa:7c:df:dd:ed:5d: 8c:67:dd:88:bd:df:cb:dd:a9:7e:1c:11:e2:d7:0b: 91:6c:70:2b:c4:54:d5:b6:26:6f:57:58:09:45:35: 83:f4:56:dc:fe:f6:8d:31:ba:9b:a1:dc:57:dd:25: 3f:e6:0f:61:2a:bb:1c:f5:54:11:68:bc:94:64:3d: c1:2d:80:d8:11:d2:f7:69:65:0d:84:28:a9:56:e9: 76:ba:66:fd:7a:c8:7b:8d:3c:19:8a:59:79:46:ee: 19:fa:25:28:c7:d7:37:cf:b2:b4:85:6c:81:e9:49: 49:48:96:76:94:0d:0d:4c:f3:68:4b:98:4d:40:a2: 76:c2:32:fd:8a:7b:29:b8:de:87:19:86:aa:26:9a: 55:45:8e:4f:15:46:bc:70:85:6d:42:b2:8a:13:90: ce:00:54:c6:b3:00:cb:4d:24:4a:5d:2d:a3:22:28: 09:46:58:01:1e:62:08:f2:ff:94:ac:74:85:66:c7: 2c:db:c4:6c:e3:4a:37:b1:49:3d:b7:93:9b:2e:9c: 5f:90:ab:76:f4:bc:f8:2c:75:62:00:d6:6b:2b:f9: 1e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7E:32:32:21:B6:32:BD:AE:60:28:06:7A:FE:7C:83:32:AD:E2:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21d82588-cab9-3c31-8abd-a281fdf9e3a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.29.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:44:cb:30:e6:79:17:99:3b:16:fb:b1:93:79:1c:8a:f8:5f: 25:29:e8:d5:c7:65:04:7a:f7:6e:88:4a:f5:00:77:4c:2a:33: 6d:34:55:a0:fe:5c:83:27:83:54:4c:68:1d:e8:74:7c:24:2a: d5:57:76:05:22:86:8b:cf:db:2b:dd:89:43:cc:27:24:65:36: ae:59:6d:e4:b6:56:69:5c:07:5a:b4:01:6e:a6:d7:e9:65:da: 17:71:77:95:b9:89:01:7c:b3:60:02:b3:e3:fe:53:b5:7a:69: 72:57:3b:44:ce:dc:5e:c5:f5:f8:f3:17:f4:fc:fb:27:0f:7b: fe:3e:99:2d:c5:43:e2:dc:76:52:c8:62:01:4b:6d:03:aa:e6: bb:2f:99:db:42:38:fb:9d:9f:51:f8:3a:2a:fb:79:d8:2d:21: 64:7c:12:f5:b0:6e:79:e2:44:d7:33:66:77:1d:88:1f:57:bf: 81:99:88:e2:c7:f5:bc:96:05:eb:67:f7:3c:7e:a4:ce:eb:4e: 35:8a:d9:8b:21:19:a4:2a:72:bd:38:6c:be:25:b6:d6:85:7e: 96:7b:31:ce:93:67:46:b9:2d:24:77:5c:f8:68:9a:13:42:9f: b1:4b:09:53:86:8d:6e:c2:12:92:d3:cc:5e:de:46:b2:73:b3: a1:04:42:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0UGLvYNdBfF6G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MWY1NzEyNTgtYWNhZS00OGQ0LWIzNjItZDYxNmM0OGZjNjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntAXTl/5B5uj4dy8SBVPG2EPTHw+TfRxTLPt o3kmnjHGi1zdumuqfN/d7V2MZ92Ivd/L3al+HBHi1wuRbHArxFTVtiZvV1gJRTWD 9Fbc/vaNMbqbodxX3SU/5g9hKrsc9VQRaLyUZD3BLYDYEdL3aWUNhCipVul2umb9 esh7jTwZill5Ru4Z+iUox9c3z7K0hWyB6UlJSJZ2lA0NTPNoS5hNQKJ2wjL9insp uN6HGYaqJppVRY5PFUa8cIVtQrKKE5DOAFTGswDLTSRKXS2jIigJRlgBHmII8v+U rHSFZscs28Rs40o3sUk9t5ObLpxfkKt29Lz4LHViANZrK/kevQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBp+MjIhtjK9rmAoBnr+fIMyreJtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjFkODI1ODgtY2FiOS0z YzMxLThhYmQtYTI4MWZkZjllM2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuB1sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVEyzDmeReZOxb7sZN5HIr4XyUp6NXHZQR6926ISvUAd0wqM200VaD+ XIMng1RMaB3odHwkKtVXdgUihovP2yvdiUPMJyRlNq5ZbeS2VmlcB1q0AW6m1+ll 2hdxd5W5iQF8s2ACs+P+U7V6aXJXO0TO3F7F9fjzF/T8+ycPe/4+mS3FQ+LcdlLI YgFLbQOq5rsvmdtCOPudn1H4Oir7edgtIWR8EvWwbnniRNczZncdiB9Xv4GZiOLH 9byWBetn9zx+pM7rTjWK2YshGaQqcr04bL4lttaFfpZ7Mc6TZ0a5LSR3XPhomhNC n7FLCVOGjW7CEpLTzF7eRrJzs6EEQrg= -----END CERTIFICATE-----Generated at Sat Aug 23 17:34:19 2025 by rpki-client