$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca37cbf0-1692-3a20-a3ba-ade4f7ad0922.roa File: ca37cbf0-1692-3a20-a3ba-ade4f7ad0922.roa (raw, json) Hash identifier: EepeiRjMxh2XAS0XEjxc0aoWgTMC7LBlIUKDBdMA3Bg= Subject key identifier: A0:05:19:1C:BB:96:48:01:80:B1:38:53:95:D1:FE:63:20:83:6D:FC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD50668039A37921BB2238400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca37cbf0-1692-3a20-a3ba-ade4f7ad0922.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 20940 IP address blocks: 184.86.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:68:03:9a:37:92:1b:b2:23:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=24bba90a-f0b3-48c3-b053-bd4ec1275497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d0:6e:04:92:fa:7e:3d:6e:43:8a:51:73:9a: 7a:e0:c3:75:91:52:8e:99:6c:bb:b7:09:9c:5a:6f: f4:a5:1f:49:2a:d4:f8:e2:e1:ba:e2:de:c3:d0:b7: 69:d2:5b:de:8b:da:dc:5c:59:98:b5:b3:59:e4:a2: c1:49:de:5c:ed:14:ff:63:0d:b8:42:43:10:b5:c7: 4d:d2:ae:5f:7c:54:52:af:7f:30:7c:b2:b0:c0:40: b0:0e:c7:fd:dc:23:13:a1:98:20:a4:3a:4f:e5:6d: 11:d6:a4:49:fc:3f:8d:ce:da:1e:8a:17:a7:26:03: 4c:30:a3:f2:6d:ce:c4:ed:c7:66:e4:15:21:e7:99: e0:cb:80:be:25:e2:03:40:ab:d7:88:1c:7e:90:a5: 75:70:42:d6:15:d4:44:59:22:de:47:a3:00:5b:3b: 60:39:b1:9a:5f:f7:2f:26:77:40:7e:35:9e:fb:46: cb:ae:06:66:cd:f1:52:43:1d:e7:c8:b7:a9:f7:22: a6:8c:13:bb:d5:9c:8a:cf:a2:00:43:09:40:7e:c8: d5:59:f9:98:4d:fb:f8:8b:c7:d2:92:8d:b0:b8:0a: 41:10:54:50:51:c1:69:d2:61:98:af:d7:6b:34:a5: 53:5e:cc:d3:1d:32:a4:6d:ed:37:a8:6a:2f:01:ad: ba:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:05:19:1C:BB:96:48:01:80:B1:38:53:95:D1:FE:63:20:83:6D:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca37cbf0-1692-3a20-a3ba-ade4f7ad0922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.86.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:40:4a:de:ad:1e:1a:15:0b:42:b1:b8:d2:19:43:4f:31:fd: d1:a9:2d:5c:b1:12:9e:65:2e:72:23:22:35:b5:8e:7b:f4:54: fa:86:6c:bb:99:a6:e7:0c:45:40:58:74:fe:8c:4b:b0:ef:cd: bc:1f:f6:82:0e:1e:24:81:b1:14:5d:cc:54:fb:bc:58:73:3d: 19:bd:9d:71:a9:2f:a5:ff:0b:3c:a5:60:a3:ea:d4:80:6e:7e: 28:60:0e:1d:0a:c4:24:9a:49:0a:26:a5:e7:2a:d0:e8:a3:a7: 00:91:53:93:b0:a1:44:7d:a5:c2:81:49:ee:3c:a5:55:7d:0c: e0:de:21:16:94:20:80:18:4c:2d:37:0e:cc:10:e2:ff:5e:6e: 55:5c:31:c4:34:8e:12:56:32:1f:3d:b8:a7:bf:9e:f6:f5:5a: 78:6a:e5:bb:96:f9:55:bd:a3:66:99:ce:6f:bb:13:80:90:45: 33:ee:41:b2:da:02:4f:c5:04:04:e9:c4:a3:84:78:15:bf:d1: f6:9d:5a:b3:90:35:e1:a5:5e:6d:14:5a:40:0b:6e:6e:1c:7f: bb:2b:61:ae:b7:de:08:20:0e:8f:00:44:5c:66:bf:54:c7:cf: 38:e8:ac:e0:b9:0f:c8:2a:23:43:3a:f3:ce:31:9d:39:33:a2: 76:e2:d8:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBmgDmjeSG7IjhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk MjRiYmE5MGEtZjBiMy00OGMzLWIwNTMtYmQ0ZWMxMjc1NDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9BuBJL6fj1uQ4pRc5p64MN1kVKOmWy7twmc Wm/0pR9JKtT44uG64t7D0Ldp0lvei9rcXFmYtbNZ5KLBSd5c7RT/Yw24QkMQtcdN 0q5ffFRSr38wfLKwwECwDsf93CMToZggpDpP5W0R1qRJ/D+NztoeihenJgNMMKPy bc7E7cdm5BUh55ngy4C+JeIDQKvXiBx+kKV1cELWFdREWSLeR6MAWztgObGaX/cv JndAfjWe+0bLrgZmzfFSQx3nyLep9yKmjBO71ZyKz6IAQwlAfsjVWfmYTfv4i8fS ko2wuApBEFRQUcFp0mGYr9drNKVTXszTHTKkbe03qGovAa26QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAFGRy7lkgBgLE4U5XR/mMgg238MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2EzN2NiZjAtMTY5Mi0z YTIwLWEzYmEtYWRlNGY3YWQwOTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuFZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlASt6tHhoVC0KxuNIZQ08x/dGpLVyxEp5lLnIjIjW1jnv0VPqGbLuZ pucMRUBYdP6MS7Dvzbwf9oIOHiSBsRRdzFT7vFhzPRm9nXGpL6X/CzylYKPq1IBu fihgDh0KxCSaSQompecq0OijpwCRU5OwoUR9pcKBSe48pVV9DODeIRaUIIAYTC03 DswQ4v9eblVcMcQ0jhJWMh89uKe/nvb1Wnhq5buW+VW9o2aZzm+7E4CQRTPuQbLa Ak/FBATpxKOEeBW/0fadWrOQNeGlXm0UWkALbm4cf7srYa633gggDo8ARFxmv1TH zzjorOC5D8gqI0M6884xnTkzonbi2HM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:51:01 2025 by rpki-client