$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/943a5e71-ae0a-321c-bfc7-e51507b399d6.roa File: 943a5e71-ae0a-321c-bfc7-e51507b399d6.roa (raw, json) Hash identifier: XyemBBVecxKUMNFbdCTppYHUK2tJRJL6HvWdqqH755Q= Subject key identifier: 52:34:B7:71:1A:D2:AA:53:C1:17:B7:67:8E:DA:E1:92:F0:9C:B4:D5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE1969BF2E0F22B07BA03EB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/943a5e71-ae0a-321c-bfc7-e51507b399d6.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 55836 IP address blocks: 184.27.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:9b:f2:e0:f2:2b:07:ba:03:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=f516a5f7-b392-4771-b9d9-6de645d99cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:78:b2:18:1b:07:14:aa:65:9f:bc:7f:ba:b4: 0c:62:c2:aa:a6:3b:9d:19:d3:b6:d3:71:f5:0d:0d: b1:a2:80:2e:90:8e:0f:64:2c:f3:62:fd:a1:72:49: 4d:be:d9:de:1e:ac:3f:29:5e:cd:15:cf:bd:5d:ff: 50:63:a1:c8:88:51:96:5c:02:e4:2a:d8:4c:3b:5c: 6e:55:32:d0:38:97:79:26:08:19:4c:30:12:c1:66: 49:6c:f8:ab:90:28:3e:7b:32:f9:28:39:96:66:ce: 47:e4:99:2c:02:86:e3:e0:3f:a4:7e:df:1d:49:36: 08:fc:7f:12:d9:03:0a:7d:08:15:c1:b6:8f:23:54: c3:56:a4:ab:f4:ff:8f:20:b7:89:99:a5:1e:e9:f3: 06:1a:ba:ac:0f:c7:4f:28:45:54:1a:1b:2f:63:e4: 03:9f:16:d6:d3:91:fc:31:13:05:59:d0:cd:71:af: cd:d9:56:ef:2b:a7:39:cb:89:7a:65:10:f6:29:88: 51:0a:91:10:57:fe:16:75:95:10:e8:5e:e5:40:ca: 67:fb:f7:b4:6a:47:a6:9b:fc:2f:e2:fe:a9:e7:eb: a1:99:bc:04:9f:e6:68:c1:30:21:07:c5:77:33:10: 53:b2:ef:98:c6:eb:c8:a7:da:08:f7:20:e8:a4:aa: b7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:34:B7:71:1A:D2:AA:53:C1:17:B7:67:8E:DA:E1:92:F0:9C:B4:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/943a5e71-ae0a-321c-bfc7-e51507b399d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.27.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ae:ab:4a:93:cc:e0:f9:f1:a3:0b:56:84:81:94:b3:6f:76: 76:e1:7a:82:c2:32:de:03:a6:45:be:85:7f:fb:c8:38:97:f3: 1f:0a:bb:f7:8b:86:e2:fe:d7:de:15:67:53:c3:3c:fe:00:5b: 54:25:7f:06:0f:1c:da:e2:cb:ae:ab:45:4e:05:91:ad:41:78: b1:6d:8e:af:43:26:93:10:d7:28:24:2f:cc:dd:92:45:a4:1b: a9:2a:af:78:b0:1c:17:09:e7:17:54:74:72:df:64:d8:3c:16: fb:ad:7c:d3:e5:c9:cf:1b:da:1b:8a:eb:0b:c6:bf:79:f3:37: 2d:cd:f0:63:46:bd:6c:44:34:a2:2a:98:38:fa:44:79:e2:7a: b2:c2:0e:29:b8:15:df:6f:c4:89:ea:fe:3d:04:ea:34:d3:04: 91:e2:f7:86:57:67:d8:fe:6e:87:aa:0d:89:35:5c:e0:85:0f: 92:2a:76:5b:39:70:ec:86:6a:82:fa:d0:da:a0:2c:46:af:92: 5b:90:76:dd:b5:17:dd:0a:ff:90:0c:f9:be:87:a0:b0:ba:9d: 74:85:1a:65:42:94:be:b7:bd:f4:a3:3e:5d:38:ab:3e:87:d8: ec:0b:fc:8f:ab:4d:d8:18:ce:d2:a9:94:ce:81:0c:0c:7d:34: bb:73:12:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlpvy4PIrB7oD64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk ZjUxNmE1ZjctYjM5Mi00NzcxLWI5ZDktNmRlNjQ1ZDk5Y2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3iyGBsHFKpln7x/urQMYsKqpjudGdO203H1 DQ2xooAukI4PZCzzYv2hcklNvtneHqw/KV7NFc+9Xf9QY6HIiFGWXALkKthMO1xu VTLQOJd5JggZTDASwWZJbPirkCg+ezL5KDmWZs5H5JksAobj4D+kft8dSTYI/H8S 2QMKfQgVwbaPI1TDVqSr9P+PILeJmaUe6fMGGrqsD8dPKEVUGhsvY+QDnxbW05H8 MRMFWdDNca/N2VbvK6c5y4l6ZRD2KYhRCpEQV/4WdZUQ6F7lQMpn+/e0akemm/wv 4v6p5+uhmbwEn+ZowTAhB8V3MxBTsu+YxuvIp9oI9yDopKq35wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFI0t3Ea0qpTwRe3Z47a4ZLwnLTVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTQzYTVlNzEtYWUwYS0z MjFjLWJmYzctZTUxNTA3YjM5OWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBu7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABauq0qTzOD58aMLVoSBlLNvdnbheoLCMt4DpkW+hX/7yDiX8x8Ku/eL huL+194VZ1PDPP4AW1QlfwYPHNriy66rRU4Fka1BeLFtjq9DJpMQ1ygkL8zdkkWk G6kqr3iwHBcJ5xdUdHLfZNg8FvutfNPlyc8b2huK6wvGv3nzNy3N8GNGvWxENKIq mDj6RHnierLCDim4Fd9vxInq/j0E6jTTBJHi94ZXZ9j+boeqDYk1XOCFD5Iqdls5 cOyGaoL60NqgLEavkluQdt21F90K/5AM+b6HoLC6nXSFGmVClL63vfSjPl04qz6H 2OwL/I+rTdgYztKplM6BDAx9NLtzEgk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:49:01 2025 by rpki-client