$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65f51e65-acbc-312a-bbd6-7456d5d1206e.roa File: 65f51e65-acbc-312a-bbd6-7456d5d1206e.roa (raw, json) Hash identifier: jFWBCnr4yUWkP5nf2FB1/MlxyOPL5Y4FA29w5ImeeJk= Subject key identifier: 1A:3C:20:41:7F:CE:F2:A9:84:4A:6F:E7:CD:2A:F2:0C:67:4D:66:26 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE196B466807DF3761FC3B800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65f51e65-acbc-312a-bbd6-7456d5d1206e.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 16625 IP address blocks: 184.28.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:b4:66:80:7d:f3:76:1f:c3:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=96c77a03-9229-4d5c-8331-4a7edc985444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:76:b2:d8:dd:a7:f5:54:c9:98:ba:65:f3:2c: e9:f5:33:f5:55:51:c2:1e:81:3c:93:01:af:10:db: d4:1b:2b:81:c5:2b:05:b5:63:30:1a:78:b7:c9:96: 92:7a:82:3a:40:47:d6:62:aa:41:da:64:30:a8:77: e4:3d:78:08:74:99:6c:94:5e:fb:43:6c:2f:1b:17: bc:61:ad:fa:8d:07:0f:02:c4:8b:b9:fa:9f:70:9b: 8b:de:3f:47:5b:9e:16:7e:6d:f6:7d:4b:75:d7:33: 04:0c:9e:66:c9:ff:69:e4:2e:ea:77:8f:87:df:3a: 53:e6:53:44:fa:c3:07:71:27:d5:c2:89:a1:02:9a: c9:7f:1c:e9:6c:22:0f:f5:9d:68:21:b2:59:61:37: 02:48:a6:b9:42:40:b4:f5:f9:a5:fe:ca:b6:1d:90: 17:95:98:6e:30:f6:89:6b:28:7e:fc:05:d8:b3:4e: 22:15:ba:a4:cc:cc:1a:ae:37:b8:3e:86:0f:d1:b8: 41:e8:3f:2e:91:d5:95:b6:c1:bf:02:db:61:12:ba: 25:60:08:fd:3d:7c:af:6c:36:c0:f5:d5:ee:37:47: 37:a8:b9:01:14:29:64:62:2e:5e:e8:65:0b:39:1b: 75:62:3b:c6:32:26:b5:ef:31:e7:92:26:89:82:c9: 66:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3C:20:41:7F:CE:F2:A9:84:4A:6F:E7:CD:2A:F2:0C:67:4D:66:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65f51e65-acbc-312a-bbd6-7456d5d1206e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.28.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:da:22:58:77:c7:e0:6a:bc:fa:53:21:b6:14:aa:81:12:9a: bc:d9:24:05:bf:2f:00:68:de:c6:85:bb:31:41:39:6c:56:fc: 04:92:e7:98:c0:7f:84:26:92:86:47:d2:68:07:3e:8d:19:e2: b6:52:86:d4:03:9f:b0:dd:69:22:a3:ce:4c:85:07:f8:51:37: 65:2f:20:14:e7:34:ff:d1:bf:87:2c:8d:ec:c7:dc:75:97:f6: a6:9a:53:cf:a4:f9:7d:68:fc:86:93:06:09:e2:2f:8c:8b:a1: 12:82:58:40:65:69:30:39:75:09:05:35:8e:47:5e:4a:fb:d2: cf:a9:ce:5e:2f:61:ce:c5:f0:ed:ff:a0:9a:70:d2:76:51:e9: 48:f7:7f:05:58:e6:b0:6a:4d:f9:16:5c:d5:e7:4e:25:27:61: 44:6b:8a:e1:5c:25:9a:2c:53:b7:0a:8a:01:53:f8:4c:ec:68: ea:fc:64:ce:36:de:6e:7a:39:03:49:54:a0:ea:f7:c5:92:e7: 9c:15:d8:41:7b:f0:0c:2b:8d:11:77:78:5e:17:2e:32:0e:9e: 4a:27:29:76:70:0d:02:ca:3e:aa:fb:6f:7b:b9:13:68:18:e1: 0f:48:f2:cb:2f:3e:02:80:87:ce:76:53:dc:ac:fb:cb:24:e9: b0:f2:9d:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlrRmgH3zdh/DuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk OTZjNzdhMDMtOTIyOS00ZDVjLTgzMzEtNGE3ZWRjOTg1NDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHay2N2n9VTJmLpl8yzp9TP1VVHCHoE8kwGv ENvUGyuBxSsFtWMwGni3yZaSeoI6QEfWYqpB2mQwqHfkPXgIdJlslF77Q2wvGxe8 Ya36jQcPAsSLufqfcJuL3j9HW54Wfm32fUt11zMEDJ5myf9p5C7qd4+H3zpT5lNE +sMHcSfVwomhAprJfxzpbCIP9Z1oIbJZYTcCSKa5QkC09fml/sq2HZAXlZhuMPaJ ayh+/AXYs04iFbqkzMwarje4PoYP0bhB6D8ukdWVtsG/AtthErolYAj9PXyvbDbA 9dXuN0c3qLkBFClkYi5e6GULORt1YjvGMia17zHnkiaJgslmLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBo8IEF/zvKphEpv580q8gxnTWYmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjVmNTFlNjUtYWNiYy0z MTJhLWJiZDYtNzQ1NmQ1ZDEyMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuBx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHaIlh3x+BqvPpTIbYUqoESmrzZJAW/LwBo3saFuzFBOWxW/ASS55jA f4QmkoZH0mgHPo0Z4rZShtQDn7DdaSKjzkyFB/hRN2UvIBTnNP/Rv4csjezH3HWX 9qaaU8+k+X1o/IaTBgniL4yLoRKCWEBlaTA5dQkFNY5HXkr70s+pzl4vYc7F8O3/ oJpw0nZR6Uj3fwVY5rBqTfkWXNXnTiUnYURriuFcJZosU7cKigFT+EzsaOr8ZM42 3m56OQNJVKDq98WS55wV2EF78AwrjRF3eF4XLjIOnkonKXZwDQLKPqr7b3u5E2gY 4Q9I8ssvPgKAh852U9ys+8sk6bDynZg= -----END CERTIFICATE-----Generated at Sat Aug 23 13:46:29 2025 by rpki-client