$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e96187fd-d385-3ad9-ac15-7237fd45a906.roa File: e96187fd-d385-3ad9-ac15-7237fd45a906.roa (raw, json) Hash identifier: vufWocabW7I7wZKp0QZW631lMkOO2v6V3HHZAzukCbk= Subject key identifier: 8F:EF:80:68:B9:C2:F8:44:AC:3E:D5:95:71:FC:76:C0:E2:5A:33:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD7D14245AF8C746567EB32C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e96187fd-d385-3ad9-ac15-7237fd45a906.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 184.29.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:42:45:af:8c:74:65:67:eb:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=11fa8b4c-e659-43b9-8601-66fe379c8eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c9:c6:41:73:a5:48:59:17:a0:46:5c:e9:d4: 53:79:f3:0a:0d:eb:02:7a:07:c6:30:93:46:33:e6: 58:79:9e:e7:e8:e0:96:b6:91:1d:d9:df:be:e0:57: eb:0a:9b:39:4e:0c:6d:1c:f9:be:53:6a:6c:cd:a9: 82:73:0b:a3:80:89:7f:ee:0e:c5:1f:65:cf:67:55: 80:22:ee:49:e8:96:c4:32:2e:36:8f:33:1c:d9:40: 9f:a2:3b:c4:16:8f:16:86:72:9d:6c:0d:d3:7d:f4: cc:bc:a9:aa:07:c8:b7:94:cd:e2:c0:cb:87:b6:d8: 02:ac:b9:86:c7:f2:19:d4:7a:a9:58:d4:41:70:04: 2b:bf:0c:59:97:ff:13:e2:10:05:ef:10:da:d7:3e: f8:34:61:24:ce:89:d2:f1:c8:52:e8:28:2a:83:13: af:58:29:98:aa:a9:ef:cf:18:a5:50:18:17:3c:ac: 03:23:8b:f5:1c:e0:a3:db:9c:10:89:e4:bb:6f:27: 0d:c5:bd:b7:08:c7:9d:11:71:32:8d:f1:d0:81:4c: 76:7c:2f:b9:1b:97:a3:df:f3:a5:cb:61:f2:28:bd: 90:44:1a:3b:9c:15:dc:9e:49:4d:f0:14:cf:60:86: c4:9e:f5:d5:e2:b1:99:b5:b3:03:a6:0a:74:a8:49: 31:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EF:80:68:B9:C2:F8:44:AC:3E:D5:95:71:FC:76:C0:E2:5A:33:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e96187fd-d385-3ad9-ac15-7237fd45a906.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.29.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e1:c9:78:4f:f4:34:92:c5:62:db:44:c9:77:69:44:6c:e0: 60:14:3c:e4:32:e1:8f:b3:ea:f9:c7:fb:bc:92:59:d9:3c:14: 40:24:61:1a:27:3f:05:ef:8e:83:8e:16:4e:46:20:9d:dd:94: a0:5d:25:7c:b0:df:7d:c1:31:a3:d2:36:6a:ab:50:4a:d9:9c: ee:a9:82:68:b0:7f:97:17:dd:8c:03:cf:e4:f8:6c:4b:0b:77: ba:0c:36:39:3e:fc:ba:54:d0:6b:a1:ac:6d:dd:ab:ba:2e:ab: b9:28:7b:3f:a7:21:90:a7:a7:a4:59:97:c1:37:51:d2:cd:f5: 04:b8:94:66:e7:b9:90:a4:52:98:73:49:8a:c7:44:96:7f:b8: d0:cb:5b:d9:44:28:0b:45:90:63:99:54:9f:93:d2:16:cc:d7: cf:bf:48:63:70:7c:73:6a:03:f7:95:ae:99:ff:71:56:c5:57: f2:79:0f:fe:a4:a0:60:48:1c:6b:b8:3f:f5:aa:7a:a3:1c:af: e1:10:b1:1e:7b:01:d7:eb:99:f6:5e:ff:c9:1f:08:54:fe:03: dc:91:7a:92:7e:ea:d0:e9:8f:ff:7d:20:bf:4b:6f:72:8f:bc: 3f:ba:ac:de:b8:d6:90:f0:55:4b:f4:c6:56:7e:ea:2e:14:dd: 4c:77:30:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0UJFr4x0ZWfrMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MTFmYThiNGMtZTY1OS00M2I5LTg2MDEtNjZmZTM3OWM4ZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncnGQXOlSFkXoEZc6dRTefMKDesCegfGMJNG M+ZYeZ7n6OCWtpEd2d++4FfrCps5TgxtHPm+U2pszamCcwujgIl/7g7FH2XPZ1WA Iu5J6JbEMi42jzMc2UCfojvEFo8WhnKdbA3TffTMvKmqB8i3lM3iwMuHttgCrLmG x/IZ1HqpWNRBcAQrvwxZl/8T4hAF7xDa1z74NGEkzonS8chS6CgqgxOvWCmYqqnv zxilUBgXPKwDI4v1HOCj25wQieS7bycNxb23CMedEXEyjfHQgUx2fC+5G5ej3/Ol y2HyKL2QRBo7nBXcnklN8BTPYIbEnvXV4rGZtbMDpgp0qEkxCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/vgGi5wvhErD7VlXH8dsDiWjOQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTk2MTg3ZmQtZDM4NS0z YWQ5LWFjMTUtNzIzN2ZkNDVhOTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuB1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvhyXhP9DSSxWLbRMl3aURs4GAUPOQy4Y+z6vnH+7ySWdk8FEAkYRon PwXvjoOOFk5GIJ3dlKBdJXyw333BMaPSNmqrUErZnO6pgmiwf5cX3YwDz+T4bEsL d7oMNjk+/LpU0GuhrG3dq7ouq7koez+nIZCnp6RZl8E3UdLN9QS4lGbnuZCkUphz SYrHRJZ/uNDLW9lEKAtFkGOZVJ+T0hbM18+/SGNwfHNqA/eVrpn/cVbFV/J5D/6k oGBIHGu4P/WqeqMcr+EQsR57AdfrmfZe/8kfCFT+A9yRepJ+6tDpj/99IL9Lb3KP vD+6rN641pDwVUv0xlZ+6i4U3Ux3MA8= -----END CERTIFICATE-----Generated at Sat Aug 23 13:07:27 2025 by rpki-client