$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b618efe8-becc-316b-9411-5d09671fb618.roa File: b618efe8-becc-316b-9411-5d09671fb618.roa (raw, json) Hash identifier: pe+Kj0U5YxEy4hdFdsHXWvKjJq49i9z70oz6ymSbZAM= Subject key identifier: 35:8B:52:0A:50:3E:84:B5:9B:89:46:B4:46:77:27:56:B0:49:2A:E2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5141EF8F6CC59CC4AE6363C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b618efe8-becc-316b-9411-5d09671fb618.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 6762 IP address blocks: 184.28.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:ef:8f:6c:c5:9c:c4:ae:63:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=ba1af206-84b3-4656-9408-f50dcebcff73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ca:ed:99:2e:27:75:42:7d:db:e0:a4:a6:b3: 91:f2:db:58:3d:cc:5d:9b:73:b7:c8:a4:65:0f:0c: 36:ce:34:28:5d:2f:a4:a4:1d:fa:01:23:be:18:68: 40:9c:57:32:b0:bb:2f:52:a9:28:2e:20:9a:68:9f: 97:39:5a:df:2a:ae:b7:25:0f:f1:e8:a7:47:0c:a7: e0:11:ad:3f:78:92:ea:ed:a6:8b:41:77:2f:1d:fa: c3:74:ee:0c:a7:90:82:ca:a8:68:40:32:92:c7:84: a0:3e:3b:89:ec:33:b8:e0:5e:70:11:ac:55:4f:7d: dc:3b:c0:4a:69:72:c0:26:bb:4d:eb:37:04:38:54: 21:f0:33:9c:9f:ed:74:23:21:ce:ad:38:f6:4d:72: cb:9a:b4:d3:ca:5b:60:7c:34:7d:33:91:9c:25:d5: b6:3f:14:c5:db:8b:43:96:c3:8a:73:db:7a:9b:31: 8f:54:c7:28:6c:cb:43:dd:01:5a:15:bb:4c:41:b3: 29:c8:fb:84:3a:d9:63:59:ef:6d:52:f9:d3:f8:85: 29:f8:12:42:1e:cd:40:72:38:70:05:28:c9:9b:f4: 9d:ee:96:94:1e:ea:cf:b6:db:86:47:6b:15:90:68: 9e:4d:dd:46:ad:b4:dc:b0:23:c6:fa:59:f2:f3:05: f3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8B:52:0A:50:3E:84:B5:9B:89:46:B4:46:77:27:56:B0:49:2A:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b618efe8-becc-316b-9411-5d09671fb618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.28.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:08:48:27:d7:b7:76:ca:91:31:63:e9:dc:85:59:65:7b:f1: 0c:86:20:93:8e:88:c5:fb:ba:95:9e:48:3b:7f:7d:4a:5f:ae: 66:d3:ff:95:66:d2:dd:8f:de:a1:0e:f3:05:e8:78:fa:cf:78: 65:c1:26:f6:90:f4:17:c4:f2:ad:06:c6:70:8f:c7:ff:7f:db: c8:78:0a:18:b5:f4:10:0f:07:cf:21:3c:67:fc:cb:2c:a9:80: 37:5a:24:22:59:91:26:c7:f0:40:bd:8d:ac:48:18:2e:0b:1f: c0:7b:d6:39:2e:4a:5e:7a:b9:7d:3e:81:80:35:35:df:ba:0a: 66:40:14:2c:53:0d:98:50:6b:4b:05:a0:d3:0c:df:1b:08:da: b9:c0:af:08:28:44:bf:bc:b5:b2:72:d7:82:bc:4f:57:17:86: 5d:c2:a0:3b:bb:76:e8:75:03:99:37:1a:62:c8:13:59:b1:a9: 14:d5:48:9a:65:f4:2a:12:0e:49:e0:78:59:e5:d3:08:5b:b7: 6f:80:a9:d4:3d:77:aa:0c:e0:05:02:8a:da:12:e5:f7:ba:60: 19:3f:db:2a:70:74:72:be:c8:ab:d5:6d:d6:88:a3:e7:22:aa: c7:aa:59:29:5a:1f:4b:d7:22:82:33:43:39:b0:4d:fd:03:b9: 48:bb:7b:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQe+PbMWcxK5jY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk YmExYWYyMDYtODRiMy00NjU2LTk0MDgtZjUwZGNlYmNmZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8rtmS4ndUJ92+CkprOR8ttYPcxdm3O3yKRl Dww2zjQoXS+kpB36ASO+GGhAnFcysLsvUqkoLiCaaJ+XOVrfKq63JQ/x6KdHDKfg Ea0/eJLq7aaLQXcvHfrDdO4Mp5CCyqhoQDKSx4SgPjuJ7DO44F5wEaxVT33cO8BK aXLAJrtN6zcEOFQh8DOcn+10IyHOrTj2TXLLmrTTyltgfDR9M5GcJdW2PxTF24tD lsOKc9t6mzGPVMcobMtD3QFaFbtMQbMpyPuEOtljWe9tUvnT+IUp+BJCHs1Acjhw BSjJm/Sd7paUHurPttuGR2sVkGieTd1GrbTcsCPG+lny8wXzQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWLUgpQPoS1m4lGtEZ3J1awSSriMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjYxOGVmZTgtYmVjYy0z MTZiLTk0MTEtNWQwOTY3MWZiNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuByYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcISCfXt3bKkTFj6dyFWWV78QyGIJOOiMX7upWeSDt/fUpfrmbT/5Vm 0t2P3qEO8wXoePrPeGXBJvaQ9BfE8q0GxnCPx/9/28h4Chi19BAPB88hPGf8yyyp gDdaJCJZkSbH8EC9jaxIGC4LH8B71jkuSl56uX0+gYA1Nd+6CmZAFCxTDZhQa0sF oNMM3xsI2rnArwgoRL+8tbJy14K8T1cXhl3CoDu7duh1A5k3GmLIE1mxqRTVSJpl 9CoSDkngeFnl0whbt2+AqdQ9d6oM4AUCitoS5fe6YBk/2ypwdHK+yKvVbdaIo+ci qseqWSlaH0vXIoIzQzmwTf0DuUi7e3w= -----END CERTIFICATE-----Generated at Mon Oct 20 05:27:59 2025 by rpki-client