$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99221fd4-3d41-3811-9f95-ed39b57b916a.roa File: 99221fd4-3d41-3811-9f95-ed39b57b916a.roa (raw, json) Hash identifier: XmLKSAb7gfQUc24xbGMYzxIyDJ7Bf1eSrAeXgfc6Yu0= Subject key identifier: BE:35:1C:34:3F:DB:E8:D2:D0:96:3E:58:54:9A:34:B7:42:2B:EC:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3C51B3AD86848C09A59A76C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99221fd4-3d41-3811-9f95-ed39b57b916a.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 184.26.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:b3:ad:86:84:8c:09:a5:9a:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=56531aaf-8675-4a3e-bf45-c643b2122f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:de:76:f0:11:63:93:65:e2:b4:6d:9c:54:b0: a8:fc:2c:1d:5b:b6:21:04:77:ee:7a:4e:dd:94:f8: 40:2c:81:56:76:cc:96:75:28:50:cf:fc:52:8a:71: fb:d0:30:bc:e6:37:dc:2b:96:06:f0:4f:7f:26:ce: 76:75:96:95:a8:0e:b0:5f:bb:8a:1a:90:63:d0:f7: 51:bc:26:7c:6b:15:02:ad:06:f4:f8:13:6d:0e:f1: d8:0e:7a:8e:72:f6:3e:93:3b:f0:68:c4:a4:44:f9: b7:97:9f:96:fe:b3:20:d8:72:ca:02:95:df:32:ea: a3:bc:26:42:5f:c7:5f:f5:d0:cf:d2:7a:4d:a9:ba: d4:bd:10:91:0d:1d:8c:9b:bb:14:48:e0:80:2e:a0: e8:d1:e1:c2:66:51:de:91:2a:56:0e:f1:8a:e9:c5: f9:0c:af:17:e4:d2:0e:5b:c1:4f:df:67:ae:2b:e6: db:13:58:d6:ac:25:cc:08:8d:9c:d8:fa:75:5d:d4: 61:c3:37:26:76:dd:84:bc:b7:44:21:01:ca:fc:e4: ad:03:05:77:d9:50:bd:cd:f4:16:b3:61:2d:a8:b2: 4f:59:c6:e6:6b:a0:94:1e:8e:40:45:01:24:9b:5a: 9c:74:1c:db:71:c5:64:59:18:76:3e:98:fd:be:2e: 9f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:35:1C:34:3F:DB:E8:D2:D0:96:3E:58:54:9A:34:B7:42:2B:EC:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99221fd4-3d41-3811-9f95-ed39b57b916a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.26.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:a7:b8:f3:04:c2:12:ad:53:5f:e1:d0:ba:d7:e7:af:7a:84: 42:47:3e:22:46:46:15:6e:67:29:8f:22:ff:7c:07:a8:f3:b3: 50:57:0e:0e:85:83:98:da:de:90:54:8a:2f:bf:51:9c:4c:96: 6c:63:04:5b:3d:ec:80:2f:68:b5:43:c5:d3:60:c3:58:af:8c: 87:c6:bb:af:5f:0e:7c:60:c1:ef:2f:61:6e:98:c6:d0:cf:4b: 5f:97:86:1f:3d:f5:be:19:db:19:dd:6d:6f:0e:59:a9:7e:a3: 6b:54:21:6b:e9:86:87:d2:93:56:bc:b1:bd:fc:29:ca:b3:77: 19:2c:e9:0f:87:dc:5b:f6:8f:66:35:54:d1:06:48:d8:11:e7: 8e:90:53:1a:e2:dd:46:d8:21:9a:03:96:38:15:7d:9f:ec:8e: b2:fd:56:08:d6:5d:2b:3d:a9:6c:1e:d4:99:0c:c8:96:32:de: 40:bb:92:60:9f:68:a6:fa:a2:93:6d:21:82:97:f0:83:fe:ec: 5f:e4:16:c9:e0:cb:c9:a4:4f:1b:13:51:1a:ad:b9:41:dd:47: 0a:25:b6:03:75:54:42:9d:21:f2:fe:45:ec:6e:d9:16:30:e8: 9b:62:51:bf:4b:05:ef:1d:2e:63:85:5b:7f:d8:7e:40:cd:5d: 30:f9:7e:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UbOthoSMCaWadsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk NTY1MzFhYWYtODY3NS00YTNlLWJmNDUtYzY0M2IyMTIyZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9528BFjk2XitG2cVLCo/CwdW7YhBHfuek7d lPhALIFWdsyWdShQz/xSinH70DC85jfcK5YG8E9/Js52dZaVqA6wX7uKGpBj0PdR vCZ8axUCrQb0+BNtDvHYDnqOcvY+kzvwaMSkRPm3l5+W/rMg2HLKApXfMuqjvCZC X8df9dDP0npNqbrUvRCRDR2Mm7sUSOCALqDo0eHCZlHekSpWDvGK6cX5DK8X5NIO W8FP32euK+bbE1jWrCXMCI2c2Pp1XdRhwzcmdt2EvLdEIQHK/OStAwV32VC9zfQW s2EtqLJPWcbma6CUHo5ARQEkm1qcdBzbccVkWRh2Ppj9vi6fVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL41HDQ/2+jS0JY+WFSaNLdCK+wFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTkyMjFmZDQtM2Q0MS0z ODExLTlmOTUtZWQzOWI1N2I5MTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuBocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+nuPMEwhKtU1/h0LrX5696hEJHPiJGRhVuZymPIv98B6jzs1BXDg6F g5ja3pBUii+/UZxMlmxjBFs97IAvaLVDxdNgw1ivjIfGu69fDnxgwe8vYW6YxtDP S1+Xhh899b4Z2xndbW8OWal+o2tUIWvphofSk1a8sb38Kcqzdxks6Q+H3Fv2j2Y1 VNEGSNgR546QUxri3UbYIZoDljgVfZ/sjrL9VgjWXSs9qWwe1JkMyJYy3kC7kmCf aKb6opNtIYKX8IP+7F/kFsngy8mkTxsTURqtuUHdRwoltgN1VEKdIfL+Rexu2RYw 6JtiUb9LBe8dLmOFW3/YfkDNXTD5fkQ= -----END CERTIFICATE-----Generated at Mon Oct 20 05:05:41 2025 by rpki-client