$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e20253f-39f0-3961-acc8-7a1207b86a45.roa File: 2e20253f-39f0-3961-acc8-7a1207b86a45.roa (raw, json) Hash identifier: NcR9itDAI2Yki473GcA3vYrj4GDbSrwg3E02qej+2IA= Subject key identifier: BC:E1:BB:C7:8A:EB:E3:AC:F0:A2:6B:F1:6D:8F:F4:99:0D:B0:3E:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD506634432FDB9A4D8C68E20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e20253f-39f0-3961-acc8-7a1207b86a45.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 16625 IP address blocks: 184.85.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:63:44:32:fd:b9:a4:d8:c6:8e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=c824900b-e8f8-4043-a152-bc2ec5cca39d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a0:9d:4a:3c:d6:a4:a6:d8:10:13:b2:3d:3f: 95:e2:1e:2f:72:05:66:cc:49:cb:99:77:72:c5:58: b2:35:8e:b5:1e:e6:26:9a:e9:6e:be:8a:7d:25:c7: b7:55:c2:ce:87:ab:41:eb:d1:39:24:99:27:54:87: 18:fb:a2:f8:db:97:92:b4:c4:29:2f:e7:f6:5f:20: 44:04:0c:bc:98:26:81:a1:85:88:6c:a3:62:c8:68: 2c:d1:be:b6:3f:62:5f:a4:86:a6:bc:fa:5d:41:13: 99:5a:b0:3c:38:fe:a7:8a:10:f3:72:52:96:5a:c9: eb:42:64:bd:ab:64:33:6a:cf:b2:60:c2:0f:01:8b: f2:16:38:ab:b7:7f:4d:ee:6b:58:f6:14:f9:bf:e3: 99:95:66:04:d2:4a:cf:dc:ab:39:48:6e:47:ff:78: da:3e:ce:06:a6:44:fa:e3:f5:15:a7:28:94:9a:1f: b8:46:2e:83:a0:4b:31:55:a7:b2:a2:be:c1:31:63: 3a:9f:23:f2:f7:b5:49:ef:f5:2c:75:f6:1f:1c:8b: c0:e1:27:fa:61:6b:52:b3:6d:5a:78:22:1d:d9:fd: 1f:97:e4:9e:7d:47:a3:b6:1b:27:48:a4:f9:a4:60: 50:dc:37:85:f1:d5:93:29:3c:df:b7:ba:1b:8d:1f: 2d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E1:BB:C7:8A:EB:E3:AC:F0:A2:6B:F1:6D:8F:F4:99:0D:B0:3E:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e20253f-39f0-3961-acc8-7a1207b86a45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.85.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:db:5e:8b:47:3d:16:ae:3b:99:23:03:18:80:9f:02:69:f4: ed:09:24:4d:6f:db:55:48:04:5e:8c:83:ba:22:46:aa:c3:3a: ab:48:01:01:2f:08:dd:9a:39:3b:b1:50:d8:f9:67:25:c1:a8: e5:03:19:9f:98:d8:8d:00:3f:8a:69:5f:ee:c7:a1:91:71:10: 95:59:59:ab:f0:4c:98:9e:e0:ca:e1:b4:8f:e6:db:d8:24:5b: 3d:03:23:a6:90:a9:be:92:85:6e:0b:1c:7c:cb:67:65:51:b2: 54:d3:fb:29:1f:96:29:e0:0a:51:13:52:c2:01:5c:85:c3:d7: 29:78:94:25:1f:b2:92:65:41:54:7e:14:ae:db:d3:a9:76:9a: 83:21:a4:62:d2:88:86:62:04:e5:23:b2:26:34:62:50:ac:07: a2:90:51:c2:93:24:57:c6:e3:1d:87:54:d4:96:56:9d:4b:bb: 84:56:94:1e:95:75:2e:0f:37:c8:0d:30:ad:2c:51:d2:bf:ef: 28:91:40:5f:6b:de:4a:ee:e0:02:19:05:1e:2b:51:ee:50:0e: 2b:a1:98:e7:26:17:86:3c:93:15:73:9d:6d:92:a7:ca:e2:94: 08:1b:4f:d1:f6:52:e3:79:08:d9:38:5e:f9:b2:8f:aa:76:de: 8c:8b:e6:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBmNEMv25pNjGjiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk YzgyNDkwMGItZThmOC00MDQzLWExNTItYmMyZWM1Y2NhMzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6CdSjzWpKbYEBOyPT+V4h4vcgVmzEnLmXdy xViyNY61HuYmmuluvop9Jce3VcLOh6tB69E5JJknVIcY+6L425eStMQpL+f2XyBE BAy8mCaBoYWIbKNiyGgs0b62P2JfpIamvPpdQROZWrA8OP6nihDzclKWWsnrQmS9 q2Qzas+yYMIPAYvyFjirt39N7mtY9hT5v+OZlWYE0krP3Ks5SG5H/3jaPs4GpkT6 4/UVpyiUmh+4Ri6DoEsxVaeyor7BMWM6nyPy97VJ7/UsdfYfHIvA4Sf6YWtSs21a eCId2f0fl+SefUejthsnSKT5pGBQ3DeF8dWTKTzft7objR8thQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzhu8eK6+Os8KJr8W2P9JkNsD4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmUyMDI1M2YtMzlmMC0z OTYxLWFjYzgtN2ExMjA3Yjg2YTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuFVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHbXotHPRauO5kjAxiAnwJp9O0JJE1v21VIBF6Mg7oiRqrDOqtIAQEv CN2aOTuxUNj5ZyXBqOUDGZ+Y2I0AP4ppX+7HoZFxEJVZWavwTJie4MrhtI/m29gk Wz0DI6aQqb6ShW4LHHzLZ2VRslTT+ykflingClETUsIBXIXD1yl4lCUfspJlQVR+ FK7b06l2moMhpGLSiIZiBOUjsiY0YlCsB6KQUcKTJFfG4x2HVNSWVp1Lu4RWlB6V dS4PN8gNMK0sUdK/7yiRQF9r3kru4AIZBR4rUe5QDiuhmOcmF4Y8kxVznW2Sp8ri lAgbT9H2UuN5CNk4Xvmyj6p23oyL5mE= -----END CERTIFICATE-----Generated at Sat Aug 23 13:11:17 2025 by rpki-client