$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e989b668-2df1-3041-9f61-70408c2eb989.roa File: e989b668-2df1-3041-9f61-70408c2eb989.roa (raw, json) Hash identifier: PGYAfiOe2+abQMf/Faft4uWc2lf+ENAnhdzQfLeJ79c= Subject key identifier: 1D:04:8E:E9:C5:31:35:BF:2A:A4:82:2E:E8:A3:D4:31:2B:73:95:C5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AD7D13FD4A0AE8BED632EC740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e989b668-2df1-3041-9f61-70408c2eb989.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 184.24.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:3f:d4:a0:ae:8b:ed:63:2e:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=3d8e790c-7121-4f4b-808f-548a1785f87f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:63:11:33:d4:ce:52:59:dd:98:d4:34:94:22: dd:f7:b2:c8:69:ca:11:dd:c4:94:9a:c7:32:a6:0c: dd:37:bc:7f:0b:bb:ca:af:ff:60:99:fb:eb:a4:c6: 55:ed:b6:6a:3a:48:7d:58:2d:76:0a:19:f6:17:8c: c7:64:52:41:ad:4b:1d:5a:f4:e3:83:6c:6a:64:c6: fd:4b:2a:94:ff:62:7e:c7:18:3f:40:02:4e:06:f7: 61:9b:97:b5:4b:e7:7e:a0:6b:52:8d:14:82:c1:8c: 44:b1:55:44:ea:77:9f:6d:01:f3:0a:fb:c6:c7:c0: ec:af:dd:c4:95:e3:e3:00:3d:76:07:d4:33:cb:e5: de:f3:d1:1a:c1:ba:6d:2f:69:65:15:c0:36:b0:ee: d4:ef:9c:be:87:88:db:a0:f6:78:cc:49:83:7f:79: db:ba:df:6f:21:46:95:c4:74:46:6c:85:a8:12:56: ba:da:ac:5c:24:8c:40:92:cb:b3:87:43:38:56:75: 4c:c4:fc:8d:27:ce:13:38:a1:3e:69:01:6c:3e:39: 66:f2:6c:f4:e1:53:bc:18:b8:b8:04:6f:27:0a:c2: e7:c3:1b:fe:27:8a:f1:60:87:42:42:88:5b:7c:ec: 59:eb:81:5f:06:b0:c8:c0:63:8c:dc:df:e9:06:ce: ab:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:04:8E:E9:C5:31:35:BF:2A:A4:82:2E:E8:A3:D4:31:2B:73:95:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e989b668-2df1-3041-9f61-70408c2eb989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.24.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:93:bb:70:e2:45:d3:77:be:63:e5:bb:85:11:14:9b:4b:2b: 11:d2:e6:11:05:02:ff:5f:ef:9b:fb:08:fd:71:f5:7f:7e:bc: 96:37:c4:40:26:7c:1e:5b:71:49:c7:b7:da:83:7c:16:c0:4f: 64:42:6a:63:16:41:34:c9:90:9a:7a:1a:75:f0:4f:a0:7c:72: 93:da:9a:97:f4:cb:29:09:77:d7:3b:c3:b7:2f:cf:02:ce:bc: 3b:32:63:bc:53:ba:e6:91:86:9e:a2:c7:5a:ac:29:6c:f8:6e: 92:0b:a4:f9:45:6c:13:f1:8e:9f:92:88:b5:77:68:f0:28:58: 0f:17:e3:0c:65:a2:c8:fe:ad:cf:bf:bf:c6:35:d3:8a:56:ed: af:4b:bc:3e:ef:dd:6c:d9:6a:28:7e:49:d1:a7:9d:0a:d1:4c: 7b:b4:d9:df:33:cd:ce:ed:33:07:fe:83:3a:ff:8e:53:0e:30: 43:d9:1a:15:47:b0:ff:6b:b0:48:85:5a:c6:5d:5d:38:e5:2d: a7:4e:e6:98:fd:1c:19:28:f7:12:aa:04:b5:f6:fe:50:3c:d4: 0e:c7:9d:7e:18:6e:be:0e:d1:39:72:09:07:92:2d:ec:e1:cc: 82:29:36:35:cf:9c:e3:70:e4:95:f5:92:3b:f7:0c:89:de:4a: d4:f6:61:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0T/UoK6L7WMux0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk M2Q4ZTc5MGMtNzEyMS00ZjRiLTgwOGYtNTQ4YTE3ODVmODdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWMRM9TOUlndmNQ0lCLd97LIacoR3cSUmscy pgzdN7x/C7vKr/9gmfvrpMZV7bZqOkh9WC12Chn2F4zHZFJBrUsdWvTjg2xqZMb9 SyqU/2J+xxg/QAJOBvdhm5e1S+d+oGtSjRSCwYxEsVVE6nefbQHzCvvGx8Dsr93E lePjAD12B9Qzy+Xe89EawbptL2llFcA2sO7U75y+h4jboPZ4zEmDf3nbut9vIUaV xHRGbIWoEla62qxcJIxAksuzh0M4VnVMxPyNJ84TOKE+aQFsPjlm8mz04VO8GLi4 BG8nCsLnwxv+J4rxYIdCQohbfOxZ64FfBrDIwGOM3N/pBs6r4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0EjunFMTW/KqSCLuij1DErc5XFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTk4OWI2NjgtMmRmMS0z MDQxLTlmNjEtNzA0MDhjMmViOTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWTu3DiRdN3vmPlu4URFJtLKxHS5hEFAv9f75v7CP1x9X9+vJY3xEAm fB5bcUnHt9qDfBbAT2RCamMWQTTJkJp6GnXwT6B8cpPampf0yykJd9c7w7cvzwLO vDsyY7xTuuaRhp6ix1qsKWz4bpILpPlFbBPxjp+SiLV3aPAoWA8X4wxlosj+rc+/ v8Y104pW7a9LvD7v3WzZaih+SdGnnQrRTHu02d8zzc7tMwf+gzr/jlMOMEPZGhVH sP9rsEiFWsZdXTjlLadO5pj9HBko9xKqBLX2/lA81A7HnX4Ybr4O0TlyCQeSLezh zIIpNjXPnONw5JX1kjv3DIneStT2YWY= -----END CERTIFICATE-----Generated at Sat Aug 23 13:47:21 2025 by rpki-client