$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85604a7c-b0e6-39c7-9011-6f96128586c3.roa File: 85604a7c-b0e6-39c7-9011-6f96128586c3.roa (raw, json) Hash identifier: i6V8yWElohWgLxLPDvqkJ5hsg6xnsu1a2asrM1FRuww= Subject key identifier: DB:ED:88:BA:A6:31:03:5C:01:4A:D8:E6:B7:AB:D0:5E:30:6E:98:5C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584A4F05CEE0490441C55D171200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85604a7c-b0e6-39c7-9011-6f96128586c3.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 4775 IP address blocks: 184.87.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:ce:e0:49:04:41:c5:5d:17:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=ec1142b9-8d57-4b36-99a0-ca2094eface8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8d:ce:7c:10:d8:dc:89:61:c1:68:9c:55:6b: f5:a4:6c:9e:eb:43:ee:e0:2d:3d:50:c9:a6:91:b0: bc:c9:ac:61:46:98:4d:73:0a:54:27:ed:5f:c1:c9: a1:64:e7:47:95:7e:da:8c:a4:7d:25:3e:e5:43:05: a8:7d:aa:4a:ff:56:38:23:5e:a7:a2:60:ab:66:b1: 6f:67:97:8b:5b:e5:0d:f9:6d:4c:12:09:5e:ab:54: 82:a2:65:4f:67:dc:d9:80:03:5d:38:df:64:17:18: dd:3e:73:6c:7a:92:56:21:ea:94:54:e9:cf:4f:49: ee:21:00:5c:57:8f:ab:05:12:ce:4e:6c:41:58:fd: 40:12:f3:9e:fc:b3:c2:7c:88:8b:b2:e2:22:82:a6: 75:4d:2f:e8:26:3c:b2:ef:28:cf:f6:32:57:18:00: eb:bc:fa:ce:f5:2d:d3:8c:bb:74:da:f2:8c:18:e9: 94:99:48:3b:e3:c0:eb:5c:fd:60:68:8f:c3:52:d5: 6a:34:b4:f1:d5:94:2f:5c:05:e4:18:69:2b:48:aa: 91:63:09:5f:a2:3f:ed:13:a7:73:a7:ad:20:a3:c8: 18:43:89:82:5a:d7:52:d3:91:f6:22:a3:13:81:7a: a8:37:a2:50:21:93:8b:2e:6b:eb:0f:7b:71:85:cd: 1b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:ED:88:BA:A6:31:03:5C:01:4A:D8:E6:B7:AB:D0:5E:30:6E:98:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85604a7c-b0e6-39c7-9011-6f96128586c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.87.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:f9:c7:20:56:5b:31:7f:d9:ca:6c:0d:64:e9:fb:38:c8:80: e3:a8:37:49:25:25:7f:3d:60:35:69:2b:17:a7:b8:fa:6c:a8: 57:c9:36:70:36:ac:27:dd:c8:83:15:d4:96:a5:9a:99:cb:f3: 6b:38:48:49:e1:64:74:89:d5:da:09:8c:6a:a0:d9:bb:23:4a: a6:6f:af:60:52:f0:ff:64:81:19:73:3b:a2:d1:24:78:94:d3: 9b:ca:84:ce:e6:a9:49:02:3d:e7:9f:47:75:d9:37:ba:51:e0: e0:6e:ca:13:e0:aa:fa:ba:ff:53:ae:6b:05:28:e8:e1:dc:3f: 00:23:3e:57:17:16:db:56:0f:ac:53:38:1e:78:f5:b8:79:2e: d6:90:a3:dc:70:e7:eb:ad:58:5e:e8:4b:73:75:db:e2:7a:07: f5:6a:d3:fc:5a:ce:e8:a7:20:35:1a:70:5f:7b:8c:fa:6f:28: 28:d9:25:d7:b4:1a:d6:29:52:88:2d:11:52:78:d2:53:bf:ff: 5c:2b:9c:1a:8f:72:21:12:d3:27:c5:b1:bb:cf:e7:3b:3c:b9: 49:e0:95:05:85:9f:11:f7:43:ad:42:63:9e:31:22:88:59:99: 46:1b:48:eb:13:a4:85:8c:4f:e9:fe:ab:8f:3d:bf:68:9e:8c: cc:ec:f5:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBc7gSQRBxV0XEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk ZWMxMTQyYjktOGQ1Ny00YjM2LTk5YTAtY2EyMDk0ZWZhY2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs43OfBDY3IlhwWicVWv1pGye60Pu4C09UMmm kbC8yaxhRphNcwpUJ+1fwcmhZOdHlX7ajKR9JT7lQwWofapK/1Y4I16nomCrZrFv Z5eLW+UN+W1MEgleq1SComVPZ9zZgANdON9kFxjdPnNsepJWIeqUVOnPT0nuIQBc V4+rBRLOTmxBWP1AEvOe/LPCfIiLsuIigqZ1TS/oJjyy7yjP9jJXGADrvPrO9S3T jLt02vKMGOmUmUg748DrXP1gaI/DUtVqNLTx1ZQvXAXkGGkrSKqRYwlfoj/tE6dz p60go8gYQ4mCWtdS05H2IqMTgXqoN6JQIZOLLmvrD3txhc0b1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvtiLqmMQNcAUrY5rer0F4wbphcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODU2MDRhN2MtYjBlNi0z OWM3LTkwMTEtNmY5NjEyODU4NmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuFfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADT5xyBWWzF/2cpsDWTp+zjIgOOoN0klJX89YDVpKxenuPpsqFfJNnA2 rCfdyIMV1JalmpnL82s4SEnhZHSJ1doJjGqg2bsjSqZvr2BS8P9kgRlzO6LRJHiU 05vKhM7mqUkCPeefR3XZN7pR4OBuyhPgqvq6/1OuawUo6OHcPwAjPlcXFttWD6xT OB549bh5LtaQo9xw5+utWF7oS3N12+J6B/Vq0/xazuinIDUacF97jPpvKCjZJde0 GtYpUogtEVJ40lO//1wrnBqPciES0yfFsbvP5zs8uUnglQWFnxH3Q61CY54xIohZ mUYbSOsTpIWMT+n+q489v2iejMzs9Zg= -----END CERTIFICATE-----Generated at Sun Jun 29 13:48:23 2025 by rpki-client