$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4439ef28-32cd-3aa1-a3e3-0d4c43330687.roa File: 4439ef28-32cd-3aa1-a3e3-0d4c43330687.roa (raw, json) Hash identifier: r6oufYBfb+1wk8/A1HE2GHU3kUAgj6lnMacK9DiddKQ= Subject key identifier: B1:CB:F9:9E:C6:45:B5:76:78:82:23:85:39:B6:BB:3D:DE:DC:F7:93 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE0319C9562986E9E44C63680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4439ef28-32cd-3aa1-a3e3-0d4c43330687.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 20940 IP address blocks: 184.25.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:9c:95:62:98:6e:9e:44:c6:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=2d74c3b7-20e9-44da-b4c7-f1fcfc6e4a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ca:35:e7:20:a7:d8:d0:80:3a:a3:2e:0f:e0: 91:bc:62:4b:ea:48:70:fb:bc:83:f3:43:f3:18:8f: 5c:72:43:36:bf:45:b6:57:e8:99:3d:87:0c:93:78: b6:c7:cc:fc:e2:29:89:1b:5b:ec:b8:12:1b:5d:f4: f5:23:ab:f0:62:fa:a7:9c:b4:9c:e3:af:5a:86:77: 52:6f:23:23:d0:39:94:7a:c8:2d:40:51:82:d7:28: e6:e8:3b:bd:8f:b6:81:79:93:6b:94:6e:bd:83:fa: 23:72:09:7c:3b:be:3f:d4:88:39:0b:6c:63:64:b7: d8:d3:3c:6f:df:91:12:58:b2:8f:8e:51:72:15:0f: 17:d4:a8:02:99:35:3a:7a:08:02:6c:7d:b3:2e:5e: 0b:73:c6:25:76:d7:cf:d9:47:0e:6b:86:b4:d8:a5: 15:4e:71:0f:a6:4d:bc:13:67:a4:91:27:bf:52:7e: fb:5b:8c:fc:56:4a:18:52:bc:d9:3b:68:81:10:59: b5:de:a0:37:88:fa:fd:4a:f7:d7:e3:f0:e4:05:c4: d4:a3:e4:42:5b:40:56:2f:a9:2e:02:9a:c2:15:a2: bf:29:ff:70:b9:68:25:0a:83:62:92:6b:9a:4d:5b: fd:9b:67:f7:63:b6:d2:23:18:aa:1b:4b:63:59:47: 48:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CB:F9:9E:C6:45:B5:76:78:82:23:85:39:B6:BB:3D:DE:DC:F7:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4439ef28-32cd-3aa1-a3e3-0d4c43330687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.25.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:6c:77:c7:25:e1:3b:2d:a2:dd:25:b0:53:f4:b2:82:a9:50: 52:18:ad:f4:ab:d7:9b:8a:e3:a1:af:e1:fe:12:7d:b2:4b:52: bc:db:f2:20:dc:82:cd:d3:29:2d:c6:77:2c:d7:e6:28:10:22: bd:b4:f5:9f:28:01:40:a0:71:e5:cf:f8:af:0d:3b:86:1b:d9: 19:b2:90:cb:4d:a4:80:7e:99:3f:cd:e1:7d:63:b0:02:a5:81: d6:be:37:24:5c:83:16:39:64:26:46:e3:95:96:cc:38:7a:47: 00:a4:78:cd:4e:28:49:59:d7:e7:dd:8c:fb:6d:f6:d2:dd:89: 23:90:de:f1:c2:80:3b:23:97:58:e4:22:36:b0:68:fc:0f:a9: b8:96:eb:ab:c2:6f:64:3c:17:eb:a9:4e:ff:7c:ea:bf:20:15: ab:19:cb:17:18:a8:c1:f0:84:c8:fc:98:58:da:f6:4e:89:26: f5:9d:be:5c:42:e5:ed:9e:81:e4:e0:11:73:3f:72:0f:92:89: 5f:d2:3d:c1:8b:0a:a8:e5:67:27:15:36:39:5f:e7:b6:9d:f4: 58:4d:7f:ab:40:a9:42:37:27:f6:80:6b:d4:1f:5d:7b:41:bc: c9:8a:bc:fc:60:80:3b:4e:c9:a4:d3:cb:53:f3:69:cf:95:39: da:de:b3:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMZyVYphunkTGNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk MmQ3NGMzYjctMjBlOS00NGRhLWI0YzctZjFmY2ZjNmU0YTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMo15yCn2NCAOqMuD+CRvGJL6khw+7yD80Pz GI9cckM2v0W2V+iZPYcMk3i2x8z84imJG1vsuBIbXfT1I6vwYvqnnLSc469ahndS byMj0DmUesgtQFGC1yjm6Du9j7aBeZNrlG69g/ojcgl8O74/1Ig5C2xjZLfY0zxv 35ESWLKPjlFyFQ8X1KgCmTU6eggCbH2zLl4Lc8YldtfP2UcOa4a02KUVTnEPpk28 E2ekkSe/Un77W4z8VkoYUrzZO2iBEFm13qA3iPr9SvfX4/DkBcTUo+RCW0BWL6ku AprCFaK/Kf9wuWglCoNikmuaTVv9m2f3Y7bSIxiqG0tjWUdI2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHL+Z7GRbV2eIIjhTm2uz3e3PeTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDQzOWVmMjgtMzJjZC0z YWExLWEzZTMtMGQ0YzQzMzMwNjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBnvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZsd8cl4Tstot0lsFP0soKpUFIYrfSr15uK46Gv4f4SfbJLUrzb8iDc gs3TKS3GdyzX5igQIr209Z8oAUCgceXP+K8NO4Yb2RmykMtNpIB+mT/N4X1jsAKl gda+NyRcgxY5ZCZG45WWzDh6RwCkeM1OKElZ1+fdjPtt9tLdiSOQ3vHCgDsjl1jk IjawaPwPqbiW66vCb2Q8F+upTv986r8gFasZyxcYqMHwhMj8mFja9k6JJvWdvlxC 5e2egeTgEXM/cg+SiV/SPcGLCqjlZycVNjlf57ad9FhNf6tAqUI3J/aAa9QfXXtB vMmKvPxggDtOyaTTy1Pzac+VOdres/w= -----END CERTIFICATE-----Generated at Sat Aug 23 14:55:30 2025 by rpki-client