$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3d1b890-f3e6-39d1-a621-9793222791ae.roa File: c3d1b890-f3e6-39d1-a621-9793222791ae.roa (raw, json) Hash identifier: Bl5RnNc7B4hULN9tMpeOppQbvZjuCkyDFxPqKxEJv6I= Subject key identifier: 12:9A:C1:42:23:6B:09:D4:E2:D7:35:16:3B:23:EB:F9:6C:B9:D8:4D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD5066636D249138AE4B8DE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3d1b890-f3e6-39d1-a621-9793222791ae.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 16625 IP address blocks: 184.84.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:66:36:d2:49:13:8a:e4:b8:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=4997e3f7-2145-4239-9336-32c9e9f8ef0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:30:6c:eb:02:57:27:31:f8:c6:ee:5d:4f:fd: d4:ca:00:82:d3:b4:ef:8f:d0:cf:15:a2:ba:59:c1: cb:e4:79:f7:26:6f:36:d8:f7:b8:12:68:8c:7d:3a: 3e:fc:da:f6:44:2e:b3:ea:b6:6c:05:a0:f1:e1:6f: 23:e2:97:bd:42:c5:a1:fa:b8:2a:e1:8d:fe:b7:bd: ba:a3:68:1a:ed:fb:34:ca:62:1d:01:f5:99:26:cf: e0:34:e4:73:c9:f6:d5:99:eb:44:c1:54:0d:71:49: 52:34:c9:bd:45:87:4d:59:ca:2f:fe:b0:b7:73:49: e9:cd:a5:92:e1:33:20:c4:b4:37:35:77:8b:9b:2c: 0f:77:1e:0c:0d:a7:40:cc:51:3c:de:db:c1:80:a7: f5:f6:e6:f4:02:60:b3:14:f4:07:57:88:0d:b3:80: 25:ef:32:4c:40:71:eb:68:0d:74:77:3b:9b:f0:fb: cc:23:84:d2:d1:d1:d8:e1:6d:c9:43:76:5f:69:13: e0:65:bb:12:3b:54:16:ca:55:4a:54:cb:45:e2:75: 7b:6d:c2:0f:9a:63:7c:a0:b7:10:9d:02:d4:6e:71: 7d:62:37:60:eb:eb:50:1e:7d:32:16:1c:cd:d7:0c: 8b:12:bd:4f:e7:75:16:ff:09:9a:c4:45:9d:7d:19: 82:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9A:C1:42:23:6B:09:D4:E2:D7:35:16:3B:23:EB:F9:6C:B9:D8:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3d1b890-f3e6-39d1-a621-9793222791ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.84.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:79:3f:28:7a:c3:37:46:db:52:e2:52:fd:87:1d:89:6d:5b: 70:22:eb:68:e3:c2:86:aa:63:a4:5a:b9:16:d8:81:5b:24:be: c4:53:a9:c5:42:a0:57:80:9d:e7:e2:e9:11:7b:3c:bd:6f:13: 3a:16:39:e3:24:23:60:41:df:1d:6b:a1:7e:2d:2c:71:8e:2f: d4:1b:99:67:12:1f:f8:e6:54:28:05:15:1a:7a:18:86:d6:18: 70:88:d2:97:cd:c4:35:1b:71:5f:e4:7e:c0:94:75:1f:d8:4a: fd:44:47:36:15:ef:ac:e3:cd:c5:88:d2:82:96:b3:db:db:20: 32:dc:c7:e6:ac:0b:2b:64:a3:2a:5e:38:7a:c6:55:b9:15:71: 1a:df:f1:34:26:a4:a4:74:ec:00:9b:6c:d2:21:d2:eb:5c:25: 0f:d9:16:8f:93:d0:fa:95:cc:7b:44:45:80:90:90:ea:02:4b: c4:d8:56:98:b4:b1:5f:e4:3c:56:ac:ea:a0:fd:20:d0:8f:b3: 08:8c:c6:96:e5:a6:9c:30:b2:ed:4c:ac:34:7b:51:dc:77:48: 2a:5d:f1:53:a2:61:0e:f6:59:52:3b:b5:31:b7:40:5a:e2:09: 67:a5:e6:a0:3f:b1:f0:e8:d5:15:44:b2:20:bf:41:eb:24:ce: 1a:f7:4d:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBmY20kkTiuS43gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk NDk5N2UzZjctMjE0NS00MjM5LTkzMzYtMzJjOWU5ZjhlZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjBs6wJXJzH4xu5dT/3UygCC07Tvj9DPFaK6 WcHL5Hn3Jm822Pe4EmiMfTo+/Nr2RC6z6rZsBaDx4W8j4pe9QsWh+rgq4Y3+t726 o2ga7fs0ymIdAfWZJs/gNORzyfbVmetEwVQNcUlSNMm9RYdNWcov/rC3c0npzaWS 4TMgxLQ3NXeLmywPdx4MDadAzFE83tvBgKf19ub0AmCzFPQHV4gNs4Al7zJMQHHr aA10dzub8PvMI4TS0dHY4W3JQ3ZfaRPgZbsSO1QWylVKVMtF4nV7bcIPmmN8oLcQ nQLUbnF9Yjdg6+tQHn0yFhzN1wyLEr1P53UW/wmaxEWdfRmCmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKawUIjawnU4tc1Fjsj6/lsudhNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzNkMWI4OTAtZjNlNi0z OWQxLWE2MjEtOTc5MzIyMjc5MWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuFScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACR5Pyh6wzdG21LiUv2HHYltW3Ai62jjwoaqY6RauRbYgVskvsRTqcVC oFeAnefi6RF7PL1vEzoWOeMkI2BB3x1roX4tLHGOL9QbmWcSH/jmVCgFFRp6GIbW GHCI0pfNxDUbcV/kfsCUdR/YSv1ERzYV76zjzcWI0oKWs9vbIDLcx+asCytkoype OHrGVbkVcRrf8TQmpKR07ACbbNIh0utcJQ/ZFo+T0PqVzHtERYCQkOoCS8TYVpi0 sV/kPFas6qD9INCPswiMxpblppwwsu1MrDR7Udx3SCpd8VOiYQ72WVI7tTG3QFri CWel5qA/sfDo1RVEsiC/Qeskzhr3TYg= -----END CERTIFICATE-----Generated at Sat Aug 23 17:30:47 2025 by rpki-client