$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5bd0ec1-fcc3-3771-955c-d06466d71491.roa File: d5bd0ec1-fcc3-3771-955c-d06466d71491.roa (raw, json) Hash identifier: qauNWFFdo7+iWww08aiQU1PElqNywAYkb2kQJiaggYw= Subject key identifier: 0E:54:39:74:45:CD:31:7A:59:10:4B:54:65:65:1E:1F:C5:BF:B2:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD50664AFFB3BC85B7F3FA480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5bd0ec1-fcc3-3771-955c-d06466d71491.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 20940 IP address blocks: 184.86.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:64:af:fb:3b:c8:5b:7f:3f:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=e4f79871-3648-42ef-930f-31bf198ea255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d3:6d:28:92:7f:65:7d:57:15:e2:0c:45:d5: b5:f8:c8:9c:7e:79:85:f2:8c:13:3a:de:d9:51:07: 49:7a:32:cd:b0:0d:90:61:f4:c0:4d:a1:de:18:8e: 69:9c:1b:e1:73:43:08:3f:09:8e:22:d0:d1:4b:39: 47:75:b1:c8:51:19:6d:be:c0:4b:04:25:02:6d:b8: 0a:d1:81:97:4d:df:fb:23:f4:f5:04:da:64:c0:a5: 33:66:07:d7:6b:a9:7c:79:b0:02:09:7a:c9:c8:90: 44:05:3f:bd:ac:2d:37:95:97:9c:ef:96:1f:b6:c6: 63:04:b7:11:ba:10:17:40:c4:ee:c1:bd:9c:28:e1: f3:ca:30:30:0f:b7:0f:b0:62:81:5a:ba:bf:9e:08: 1e:38:6d:58:3f:fd:34:6c:b4:1a:cd:38:fa:86:24: e0:a4:a7:17:24:98:af:33:36:2c:8f:16:71:9e:ff: a3:97:c7:90:8a:c9:eb:a0:f7:ea:22:f6:19:25:b8: 52:50:d4:aa:a6:7d:d1:88:04:d5:31:11:b7:b1:95: 3f:1d:a7:a0:28:26:a9:7d:a3:b9:cb:62:21:cf:c5: 48:c9:37:de:03:2f:f8:6f:65:a0:d7:b3:43:b7:18: 1a:db:12:cf:fc:ba:ee:5b:c0:b9:50:7f:92:1e:de: 15:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:54:39:74:45:CD:31:7A:59:10:4B:54:65:65:1E:1F:C5:BF:B2:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5bd0ec1-fcc3-3771-955c-d06466d71491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.86.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:37:fa:d8:14:39:36:25:20:0d:00:cf:b3:00:fe:54:3b:e1: 0d:08:dd:19:2c:d0:27:59:34:5e:77:5b:c0:4f:da:54:1c:a4: 6b:3d:02:d4:02:f7:ff:12:ab:81:cc:96:1f:e8:94:4c:74:cc: c3:e9:44:8a:35:27:1f:8b:d0:0f:d5:a6:88:6b:29:d3:57:c1: 66:da:d5:df:a7:86:4d:72:f2:1b:f8:ad:42:60:f7:96:3f:4a: f0:95:c2:35:b0:a9:35:4c:78:3b:eb:e9:d5:f8:ae:96:29:f7: f8:0a:d7:89:87:3f:e0:de:6c:a9:aa:c0:0b:47:af:70:96:15: c0:ed:d5:d8:44:b2:3d:76:68:e0:dc:d8:d7:b9:14:3a:56:b9: 28:3c:6d:85:4a:df:6f:99:d2:25:72:fd:04:83:50:e4:72:36: 8d:fe:94:f2:0b:22:b5:f1:4f:2e:63:ce:5d:16:3e:4c:71:47: b9:6a:a4:ac:f0:36:76:8c:a7:31:d8:07:42:45:20:69:97:1d: ec:a7:c9:fa:6e:f5:f3:08:84:b2:7c:43:9c:b2:c5:2b:61:82: 79:c8:e1:07:d0:be:2f:f2:89:fa:99:d7:4b:c7:80:04:24:d5: 11:e2:03:f3:2c:0e:47:ae:42:db:f1:fa:a7:1f:90:5a:29:d7: f3:92:ee:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBmSv+zvIW38/pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk ZTRmNzk4NzEtMzY0OC00MmVmLTkzMGYtMzFiZjE5OGVhMjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdNtKJJ/ZX1XFeIMRdW1+MicfnmF8owTOt7Z UQdJejLNsA2QYfTATaHeGI5pnBvhc0MIPwmOItDRSzlHdbHIURltvsBLBCUCbbgK 0YGXTd/7I/T1BNpkwKUzZgfXa6l8ebACCXrJyJBEBT+9rC03lZec75YftsZjBLcR uhAXQMTuwb2cKOHzyjAwD7cPsGKBWrq/nggeOG1YP/00bLQazTj6hiTgpKcXJJiv MzYsjxZxnv+jl8eQisnroPfqIvYZJbhSUNSqpn3RiATVMRG3sZU/HaegKCapfaO5 y2Ihz8VIyTfeAy/4b2Wg17NDtxga2xLP/LruW8C5UH+SHt4VHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5UOXRFzTF6WRBLVGVlHh/Fv7I4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDViZDBlYzEtZmNjMy0z NzcxLTk1NWMtZDA2NDY2ZDcxNDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuFb7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJM3+tgUOTYlIA0Az7MA/lQ74Q0I3Rks0CdZNF53W8BP2lQcpGs9AtQC 9/8Sq4HMlh/olEx0zMPpRIo1Jx+L0A/VpohrKdNXwWba1d+nhk1y8hv4rUJg95Y/ SvCVwjWwqTVMeDvr6dX4rpYp9/gK14mHP+DebKmqwAtHr3CWFcDt1dhEsj12aODc 2Ne5FDpWuSg8bYVK32+Z0iVy/QSDUORyNo3+lPILIrXxTy5jzl0WPkxxR7lqpKzw NnaMpzHYB0JFIGmXHeynyfpu9fMIhLJ8Q5yyxSthgnnI4QfQvi/yifqZ10vHgAQk 1RHiA/MsDkeuQtvx+qcfkFop1/OS7sY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:46:22 2025 by rpki-client