$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64aaacd9-e534-3987-b9fa-dc82847a6187.roa File: 64aaacd9-e534-3987-b9fa-dc82847a6187.roa (raw, json) Hash identifier: KOT7KnUrE/yi3zd2+LnkpVGTnr7FTy4n7pDQy6vOTL0= Subject key identifier: AF:1C:7F:62:8C:CD:B7:79:99:55:6C:78:AC:11:4C:4B:C0:A3:53:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB88D445A551A714C10F94CA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64aaacd9-e534-3987-b9fa-dc82847a6187.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 16625 IP address blocks: 184.25.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:44:5a:55:1a:71:4c:10:f9:4c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=ee28d960-381f-41d1-a6b0-86fa6fe9c3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f3:10:84:2c:94:8b:3c:d5:2a:7a:b3:b4:a8: 4f:01:be:5a:11:65:05:2e:4e:61:5a:ea:7b:aa:77: 8d:9a:b0:93:94:af:40:ca:2d:38:0d:af:60:56:2e: 3d:ca:65:0a:80:03:73:fa:2e:e3:6b:5a:4b:45:52: bd:db:97:43:3e:0d:d7:76:58:84:8e:b3:9e:df:52: 25:33:6b:54:79:e4:80:3a:c2:23:86:af:1b:c6:b2: 20:71:f5:8c:bd:89:5c:9a:6b:8b:13:e7:e1:8d:26: 10:6f:27:4f:34:44:25:24:97:73:e3:7a:f3:a0:4d: 6c:4a:8b:ad:d0:5e:8c:80:c4:2c:e2:13:3c:41:9f: 5b:0d:ba:76:bd:65:2f:71:0f:84:b7:b2:7d:98:a9: d9:d0:9b:87:de:b5:d4:3d:02:be:a3:b7:9d:b6:d9: 83:4d:ce:81:2d:d0:3a:f8:48:da:d4:c7:4c:c1:43: f4:30:2c:55:b2:4f:b0:a6:17:83:ac:f5:55:94:41: f7:92:94:2a:34:1b:d5:5c:06:9c:a0:ab:c5:3b:a0: 14:b4:ac:0a:7f:23:56:11:12:fb:dc:55:01:1d:c9: cb:5b:b6:ac:57:25:f9:f8:1b:eb:55:0c:2a:c6:79: a6:c6:7a:ca:ad:c9:d0:cc:06:cf:e2:85:a7:dd:fc: 1a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1C:7F:62:8C:CD:B7:79:99:55:6C:78:AC:11:4C:4B:C0:A3:53:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64aaacd9-e534-3987-b9fa-dc82847a6187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.25.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:39:62:dd:f1:66:a3:d7:d9:22:1f:b1:98:0d:1c:b3:d1:f3: fc:c7:1a:82:29:4f:50:9b:4b:0b:e6:5a:26:e7:c4:f2:12:7f: 5e:62:2e:f3:4d:72:05:78:0c:4b:89:3e:0b:45:bc:f2:d9:97: ff:c2:fc:4e:9b:6b:22:f9:73:45:02:8a:b9:57:ec:ca:60:5e: ac:60:ce:f4:b5:70:7a:c4:d6:b5:d9:b6:6c:85:ac:91:2d:be: 15:cb:cc:7c:f9:d1:65:41:4b:05:4a:55:9b:31:1a:8f:2e:08: dc:96:c6:9d:73:b6:33:83:d0:60:d1:02:35:38:b6:b8:ca:3b: d7:79:7c:72:a9:53:81:a1:7c:33:49:85:a0:54:25:0c:8c:ef: 66:62:15:d6:08:c3:75:c5:ef:bd:10:bd:0c:98:19:97:85:62: 66:0b:d7:82:27:d5:5d:ff:6b:1d:48:7b:ac:7f:cb:49:a5:75: 29:95:eb:66:16:99:33:93:e0:33:d2:a5:70:12:1e:f1:91:8a: 3c:0a:05:c0:38:a5:1d:80:90:a4:0a:a0:1c:0e:18:4d:b1:10: e9:fb:85:5e:c6:3c:24:c5:8e:9f:fa:41:a4:bb:d7:6d:c8:df: a6:c7:d1:f7:b9:dc:9e:8f:24:bf:c0:6d:29:1c:43:46:2d:d7: 14:44:99:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jURaVRpxTBD5TKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZWUyOGQ5NjAtMzgxZi00MWQxLWE2YjAtODZmYTZmZTljM2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/MQhCyUizzVKnqztKhPAb5aEWUFLk5hWup7 qneNmrCTlK9Ayi04Da9gVi49ymUKgANz+i7ja1pLRVK925dDPg3XdliEjrOe31Il M2tUeeSAOsIjhq8bxrIgcfWMvYlcmmuLE+fhjSYQbydPNEQlJJdz43rzoE1sSout 0F6MgMQs4hM8QZ9bDbp2vWUvcQ+Et7J9mKnZ0JuH3rXUPQK+o7edttmDTc6BLdA6 +Eja1MdMwUP0MCxVsk+wpheDrPVVlEH3kpQqNBvVXAacoKvFO6AUtKwKfyNWERL7 3FUBHcnLW7asVyX5+BvrVQwqxnmmxnrKrcnQzAbP4oWn3fwanQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8cf2KMzbd5mVVseKwRTEvAo1MRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjRhYWFjZDktZTUzNC0z OTg3LWI5ZmEtZGM4Mjg0N2E2MTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuBm8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGU5Yt3xZqPX2SIfsZgNHLPR8/zHGoIpT1CbSwvmWibnxPISf15iLvNN cgV4DEuJPgtFvPLZl//C/E6bayL5c0UCirlX7MpgXqxgzvS1cHrE1rXZtmyFrJEt vhXLzHz50WVBSwVKVZsxGo8uCNyWxp1ztjOD0GDRAjU4trjKO9d5fHKpU4GhfDNJ haBUJQyM72ZiFdYIw3XF770QvQyYGZeFYmYL14In1V3/ax1Ie6x/y0mldSmV62YW mTOT4DPSpXASHvGRijwKBcA4pR2AkKQKoBwOGE2xEOn7hV7GPCTFjp/6QaS7123I 36bH0fe53J6PJL/AbSkcQ0Yt1xREmVo= -----END CERTIFICATE-----Generated at Tue Nov 4 21:08:44 2025 by rpki-client