$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae38751c-839d-367b-9548-3c14f1a48b99.roa File: ae38751c-839d-367b-9548-3c14f1a48b99.roa (raw, json) Hash identifier: lAhl2yhmuRDy41DpUZ7+o884fK0QF7fLAdW/lnhDbPs= Subject key identifier: 80:17:89:89:F5:C6:07:A4:8D:43:BE:BD:29:42:CF:AA:82:DC:93:FE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ACE0BAB2919464D9B43E64C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae38751c-839d-367b-9548-3c14f1a48b99.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 16625 IP address blocks: 184.51.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:ab:29:19:46:4d:9b:43:e6:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=3485c176-9c34-4429-96b4-0a67f90fcadc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:eb:8f:53:d3:99:af:f2:3a:db:73:8f:27:e1: 87:18:1b:4b:52:4f:ec:3f:00:31:72:9e:e8:44:05: 31:cb:ad:1b:38:98:43:d8:2d:ab:61:25:bf:84:ca: 5e:60:02:60:00:89:17:79:66:c3:b5:6a:7c:30:90: 54:73:0c:73:a6:64:00:60:8e:d8:d5:3d:6d:79:c1: 94:e4:2b:c2:ef:8d:ce:8c:fc:90:4f:aa:a9:df:f7: 7b:2d:8b:4d:59:17:7d:8c:a6:ce:5c:3a:29:4d:7e: 29:cb:66:bd:09:80:4c:f5:ae:54:27:08:95:04:ef: 0f:1e:06:2f:36:2f:1e:b8:fa:c3:e9:fc:84:45:57: 2e:ca:1f:f1:f0:23:96:ed:a3:44:71:17:83:47:79: 48:ef:93:d5:1f:d2:47:a8:6f:a5:39:a4:71:cc:43: 2a:1f:79:72:82:fd:4e:36:2f:7e:fe:02:a7:7e:f0: 66:e7:35:ff:e2:32:4d:7a:3c:96:ab:37:ef:b5:c8: 29:7a:8b:a1:85:cd:bf:34:4a:a4:a4:08:92:07:74: ef:85:9e:d6:68:44:af:7e:5c:da:f9:5d:da:fc:85: 8e:82:b8:5d:32:ed:32:9c:ec:6a:70:25:35:e0:46: b5:f2:dd:f4:0e:d6:24:bb:11:91:9b:f4:32:d8:c3: c1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:17:89:89:F5:C6:07:A4:8D:43:BE:BD:29:42:CF:AA:82:DC:93:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae38751c-839d-367b-9548-3c14f1a48b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.51.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:91:27:c1:9f:78:1c:43:c4:8e:89:da:14:c8:46:a1:00:90: 01:ac:4f:dc:69:9e:a0:cc:2e:26:41:e9:1f:a2:a2:3b:73:86: b5:d4:76:8e:c3:b1:54:d8:15:f3:7a:2c:8f:c4:0f:ac:50:2a: 35:ab:89:3b:ec:a8:ab:4f:21:8f:91:b0:bb:bf:c3:9e:eb:0e: 1d:54:7c:f0:92:6d:91:51:37:f9:53:f2:6a:16:7f:4b:a6:64: 75:a9:3d:92:64:ea:fa:0c:44:8b:78:3e:cc:58:9e:8b:12:ee: df:cc:91:42:8e:5c:38:ca:fd:83:c4:0e:38:ec:5e:40:7f:83: 0c:69:e9:9d:f2:26:50:a1:79:ad:65:25:37:0e:b9:77:4e:54: 49:af:28:65:67:93:07:c2:e3:94:2f:4b:e2:fd:06:f5:e8:15: 83:ef:ee:a6:0e:c7:3a:84:d1:cf:a0:52:ce:a8:a4:2d:5b:57: 84:a5:e3:e0:8b:06:9f:22:bd:e1:15:3b:9f:b8:1a:68:79:83: 37:14:16:a3:6a:d9:c3:08:5a:09:47:0f:85:af:2d:2d:cc:b9: 1a:ae:9b:9f:0b:7c:23:0f:3d:5b:1d:78:28:61:0e:17:e4:84: 9f:7a:56:f2:17:77:67:5e:71:2d:f4:97:84:f0:a5:2b:fa:f2: bf:02:e1:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC6spGUZNm0PmTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk MzQ4NWMxNzYtOWMzNC00NDI5LTk2YjQtMGE2N2Y5MGZjYWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOuPU9OZr/I623OPJ+GHGBtLUk/sPwAxcp7o RAUxy60bOJhD2C2rYSW/hMpeYAJgAIkXeWbDtWp8MJBUcwxzpmQAYI7Y1T1tecGU 5CvC743OjPyQT6qp3/d7LYtNWRd9jKbOXDopTX4py2a9CYBM9a5UJwiVBO8PHgYv Ni8euPrD6fyERVcuyh/x8COW7aNEcReDR3lI75PVH9JHqG+lOaRxzEMqH3lygv1O Ni9+/gKnfvBm5zX/4jJNejyWqzfvtcgpeouhhc2/NEqkpAiSB3TvhZ7WaESvflza +V3a/IWOgrhdMu0ynOxqcCU14Ea18t30DtYkuxGRm/Qy2MPBwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAXiYn1xgekjUO+vSlCz6qC3JP+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWUzODc1MWMtODM5ZC0z NjdiLTk1NDgtM2MxNGYxYTQ4Yjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuDPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKRJ8GfeBxDxI6J2hTIRqEAkAGsT9xpnqDMLiZB6R+iojtzhrXUdo7D sVTYFfN6LI/ED6xQKjWriTvsqKtPIY+RsLu/w57rDh1UfPCSbZFRN/lT8moWf0um ZHWpPZJk6voMRIt4PsxYnosS7t/MkUKOXDjK/YPEDjjsXkB/gwxp6Z3yJlChea1l JTcOuXdOVEmvKGVnkwfC45QvS+L9BvXoFYPv7qYOxzqE0c+gUs6opC1bV4Sl4+CL Bp8iveEVO5+4Gmh5gzcUFqNq2cMIWglHD4WvLS3MuRqum58LfCMPPVsdeChhDhfk hJ96VvIXd2decS30l4TwpSv68r8C4XY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:49:42 2025 by rpki-client