$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3715f9df-1dd6-3c2b-b03e-bb3bb2dc52d9.roa File: 3715f9df-1dd6-3c2b-b03e-bb3bb2dc52d9.roa (raw, json) Hash identifier: 0oLzziizWPeNg+OMR0bSuIs7r33ts57m6RURGTv0WoM= Subject key identifier: 54:DE:11:3F:69:43:03:E8:BB:68:A2:B8:B7:99:10:98:CD:A1:20:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD506677DB26D06D55A7A8460 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3715f9df-1dd6-3c2b-b03e-bb3bb2dc52d9.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 20940 IP address blocks: 184.85.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:67:7d:b2:6d:06:d5:5a:7a:84:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=d7a745a3-454a-4ae1-a34d-098913e5c40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8e:32:17:61:2d:6e:52:dc:08:49:ff:8f:f5: 92:06:6b:d4:9c:39:ea:b5:1b:a5:2e:72:bb:8d:87: 6a:eb:62:e3:0d:d5:db:5d:66:22:d6:a1:39:38:20: 65:6d:cb:71:3f:5c:e3:96:95:de:6a:1b:40:31:95: e5:8c:0b:08:72:89:23:50:5a:aa:2e:60:35:f6:9c: cb:1a:25:34:1d:4a:1d:ea:1f:94:b1:36:66:41:a6: 75:f7:68:47:1a:7d:fb:c5:b1:eb:c4:20:a0:61:bf: 4a:e9:bc:dc:a6:fc:46:f7:8a:50:01:de:19:5c:15: 89:02:09:3b:f8:21:19:7f:bb:ea:44:40:d4:5b:82: 85:ca:bb:69:74:7e:6a:a7:e6:61:a1:f8:20:59:b5: 56:b5:38:1f:60:b8:4b:1f:73:91:a8:02:3a:09:50: 19:89:e7:a0:79:37:dc:e6:9a:79:4e:e3:bd:62:74: b3:c6:c7:87:2a:34:a4:4c:e3:96:60:c2:73:70:34: 53:ab:d7:a8:50:8f:ca:99:72:5e:3b:b9:9b:52:be: 92:4b:3c:27:87:44:42:b2:dd:79:11:1b:f8:f8:72: 8c:11:50:c9:c7:cc:a6:4c:71:96:25:a5:22:b0:cb: b2:13:18:f0:97:10:d9:82:d4:7d:a1:e6:26:fa:36: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DE:11:3F:69:43:03:E8:BB:68:A2:B8:B7:99:10:98:CD:A1:20:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3715f9df-1dd6-3c2b-b03e-bb3bb2dc52d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.85.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:18:9d:d3:62:b2:e7:e3:10:a2:48:17:ef:c9:8b:bd:71:d0: dd:e6:38:e4:8c:4c:c0:f7:e7:9b:fd:6e:27:33:7f:c0:1e:75: 92:9c:01:19:ca:43:15:83:b3:a1:53:b2:66:8f:ff:54:42:7c: 9c:b8:a2:23:8f:02:98:f8:21:5f:a6:0d:73:be:89:99:5c:fa: 75:47:5c:a3:8c:08:48:6c:16:dc:a9:2a:58:1d:a7:f6:5c:20: 11:e4:19:e6:d0:b5:ef:43:ca:6c:20:61:fb:7c:77:95:07:84: ee:d2:98:bb:be:e0:6f:48:1d:06:a2:04:92:c2:0e:85:b1:da: 7f:fa:05:d1:9a:99:fe:9f:b0:64:cb:f8:7f:f2:f1:a7:38:8c: d1:d8:52:39:f7:36:00:e2:75:06:a8:9c:29:c9:1d:67:fa:ba: ab:59:d0:2e:eb:33:8e:ec:65:b9:87:2e:c6:d5:96:ad:cf:a6: 2c:33:b7:0a:8b:14:c6:b7:6e:77:27:79:92:69:64:64:0b:e6: e8:3b:e1:05:7d:34:5c:f9:a2:60:3f:69:46:cd:58:15:4f:b5: 7c:4f:ff:e7:b2:da:93:16:81:a5:5b:40:d0:27:0d:95:9c:47: 02:7b:61:65:47:3e:ec:a3:79:86:1a:10:f0:2a:cf:56:8c:f2: 30:f1:90:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBmd9sm0G1Vp6hGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk ZDdhNzQ1YTMtNDU0YS00YWUxLWEzNGQtMDk4OTEzZTVjNDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI4yF2EtblLcCEn/j/WSBmvUnDnqtRulLnK7 jYdq62LjDdXbXWYi1qE5OCBlbctxP1zjlpXeahtAMZXljAsIcokjUFqqLmA19pzL GiU0HUod6h+UsTZmQaZ192hHGn37xbHrxCCgYb9K6bzcpvxG94pQAd4ZXBWJAgk7 +CEZf7vqREDUW4KFyrtpdH5qp+ZhofggWbVWtTgfYLhLH3ORqAI6CVAZieegeTfc 5pp5TuO9YnSzxseHKjSkTOOWYMJzcDRTq9eoUI/KmXJeO7mbUr6SSzwnh0RCst15 ERv4+HKMEVDJx8ymTHGWJaUisMuyExjwlxDZgtR9oeYm+jZxnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTeET9pQwPou2iiuLeZEJjNoSAFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzcxNWY5ZGYtMWRkNi0z YzJiLWIwM2UtYmIzYmIyZGM1MmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuFXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoYndNisufjEKJIF+/Ji71x0N3mOOSMTMD355v9biczf8AedZKcARnK QxWDs6FTsmaP/1RCfJy4oiOPApj4IV+mDXO+iZlc+nVHXKOMCEhsFtypKlgdp/Zc IBHkGebQte9DymwgYft8d5UHhO7SmLu+4G9IHQaiBJLCDoWx2n/6BdGamf6fsGTL +H/y8ac4jNHYUjn3NgDidQaonCnJHWf6uqtZ0C7rM47sZbmHLsbVlq3PpiwztwqL FMa3bncneZJpZGQL5ug74QV9NFz5omA/aUbNWBVPtXxP/+ey2pMWgaVbQNAnDZWc RwJ7YWVHPuyjeYYaEPAqz1aM8jDxkME= -----END CERTIFICATE-----Generated at Sat Aug 23 14:57:20 2025 by rpki-client