$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7559f7b-3de0-304e-b1d4-4a69f0207a53.roa File: b7559f7b-3de0-304e-b1d4-4a69f0207a53.roa (raw, json) Hash identifier: LhiBHnYyzYnb8GPQmHZD6IZofMlh3ir/I7Myp+zbtyk= Subject key identifier: D5:8A:30:4A:48:D9:11:D3:A7:74:04:72:44:A7:6E:1A:2A:F2:45:53 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE0319BC64A0DE0CC3E7BE280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7559f7b-3de0-304e-b1d4-4a69f0207a53.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 20940 IP address blocks: 184.25.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:9b:c6:4a:0d:e0:cc:3e:7b:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=25f18100-ebaf-4ec3-92ae-04279bab2a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5a:77:ce:dd:11:28:25:bd:a6:c5:71:0c:46: 31:bf:b4:b9:2f:21:8f:45:72:b8:38:1c:cc:05:93: 4b:0c:ca:20:d7:e9:f6:66:35:61:aa:91:3e:87:21: 67:3e:f1:fa:b3:aa:87:3c:28:ef:24:32:84:d2:8a: 39:17:5d:3c:39:5b:a9:be:b7:4c:2f:3b:18:04:69: 23:b6:05:0b:27:b8:61:ec:da:8b:5f:28:12:70:9c: ab:05:1e:11:20:c5:55:94:52:11:74:c5:e8:70:55: 3f:2f:93:2d:cc:95:a6:18:ba:cd:11:7f:4a:60:28: 4b:bf:f8:0e:0a:69:06:f8:4c:b4:e0:3e:2e:68:97: 0e:bf:a4:1c:9f:1c:58:34:da:f6:0f:40:40:0e:f6: 6b:1c:30:f7:96:c9:55:f5:18:9f:7f:fd:52:12:60: b4:d8:9a:68:bd:fc:f2:f7:55:7a:64:1b:5a:40:cf: 7e:24:20:a1:34:61:59:22:9a:82:62:42:ca:f3:08: 7d:cb:7e:8b:f3:2d:14:ff:4d:01:34:1c:1e:35:b5: b3:ed:e9:d5:18:26:3d:01:0e:20:d7:eb:f2:c5:81: 3a:54:f1:c6:ff:7a:0f:82:d9:a8:f5:b8:ba:37:5b: 49:55:71:a4:be:17:87:b2:0a:36:6a:3c:61:13:37: 33:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8A:30:4A:48:D9:11:D3:A7:74:04:72:44:A7:6E:1A:2A:F2:45:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7559f7b-3de0-304e-b1d4-4a69f0207a53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.25.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:cf:e9:9e:48:1e:11:f4:b6:24:95:e6:ea:d4:8c:97:9a:bd: 4f:c3:36:57:29:67:3a:1e:22:92:31:68:6a:4d:98:40:c3:1f: d4:3d:a8:a8:4f:55:ad:81:ad:80:b6:00:a7:a0:22:a4:64:98: 78:03:cf:32:22:d0:5f:c9:fe:01:50:44:c6:f6:bb:52:e6:ee: 87:c5:54:2e:88:58:fd:74:b8:93:ee:20:60:72:da:4a:36:23: b6:49:28:b9:16:f6:14:79:58:4f:6a:b7:ea:97:4b:79:6d:ee: e9:69:82:49:06:72:2c:1b:cd:3f:7b:53:cc:cd:ea:ca:f4:4c: b2:5e:ca:eb:59:17:03:77:fa:8d:f7:ff:bf:22:93:73:62:9f: ad:1a:a4:95:51:d4:87:87:46:08:f8:a4:5a:84:90:4f:7f:9e: 04:6d:61:9e:b7:a8:64:ce:7b:b2:a2:cd:49:0e:88:95:2f:a1: ff:1b:78:b1:b3:98:ac:eb:c4:90:3f:3d:96:c5:c4:ab:0f:61: 40:e9:25:3a:0d:9c:83:12:b7:92:aa:09:d6:ea:90:6a:49:95: 0f:a4:7a:27:5d:53:42:70:9e:2c:55:d4:ef:33:8f:6e:71:51: 19:93:77:59:47:8c:6d:06:37:b4:1e:d7:15:aa:37:b9:35:86: 25:19:92:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMZvGSg3gzD574oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk MjVmMTgxMDAtZWJhZi00ZWMzLTkyYWUtMDQyNzliYWIyYTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVp3zt0RKCW9psVxDEYxv7S5LyGPRXK4OBzM BZNLDMog1+n2ZjVhqpE+hyFnPvH6s6qHPCjvJDKE0oo5F108OVupvrdMLzsYBGkj tgULJ7hh7NqLXygScJyrBR4RIMVVlFIRdMXocFU/L5MtzJWmGLrNEX9KYChLv/gO CmkG+Ey04D4uaJcOv6QcnxxYNNr2D0BADvZrHDD3lslV9Riff/1SEmC02Jpovfzy 91V6ZBtaQM9+JCChNGFZIpqCYkLK8wh9y36L8y0U/00BNBweNbWz7enVGCY9AQ4g 1+vyxYE6VPHG/3oPgtmo9bi6N1tJVXGkvheHsgo2ajxhEzcz1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWKMEpI2RHTp3QEckSnbhoq8kVTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjc1NTlmN2ItM2RlMC0z MDRlLWIxZDQtNGE2OWYwMjA3YTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBmUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvP6Z5IHhH0tiSV5urUjJeavU/DNlcpZzoeIpIxaGpNmEDDH9Q9qKhP Va2BrYC2AKegIqRkmHgDzzIi0F/J/gFQRMb2u1Lm7ofFVC6IWP10uJPuIGBy2ko2 I7ZJKLkW9hR5WE9qt+qXS3lt7ulpgkkGciwbzT97U8zN6sr0TLJeyutZFwN3+o33 /78ik3Nin60apJVR1IeHRgj4pFqEkE9/ngRtYZ63qGTOe7KizUkOiJUvof8beLGz mKzrxJA/PZbFxKsPYUDpJToNnIMSt5KqCdbqkGpJlQ+keiddU0JwnixV1O8zj25x URmTd1lHjG0GN7Qe1xWqN7k1hiUZkms= -----END CERTIFICATE-----Generated at Sat Aug 23 12:57:21 2025 by rpki-client