$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a6dac34-f69e-3d51-b6e7-6b01e75a7651.roa File: 6a6dac34-f69e-3d51-b6e7-6b01e75a7651.roa (raw, json) Hash identifier: h+jPnCcBqEWwPeFRSM4xDJzr/RzRffTG6vlYR9YZ5Eg= Subject key identifier: 98:D1:90:32:3E:09:07:8F:36:CD:00:69:6E:94:7B:5B:45:C1:A0:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA93291EB538EB0D503096F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a6dac34-f69e-3d51-b6e7-6b01e75a7651.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 16625 IP address blocks: 184.25.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:91:eb:53:8e:b0:d5:03:09:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=ed22c86f-4126-4d9e-8a3b-32e83bd01e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:4c:b2:ec:89:b6:a4:c8:a8:ba:65:18:85:2d: 91:42:f7:57:e0:73:18:d7:b7:31:c1:3f:74:43:ae: 99:d4:84:4f:2a:c3:d4:f9:44:c9:16:bf:66:27:9d: 50:7e:2b:7e:74:23:f3:ea:c8:4d:7a:b5:08:6a:8a: bb:f3:80:4e:3f:88:1b:60:3a:05:ec:df:ef:b6:7b: 41:7b:b7:29:18:01:ef:51:2f:8c:9a:e0:52:18:fb: 69:b9:48:1b:e4:04:f1:2b:b3:e5:91:47:17:ce:a0: 25:7f:dd:a4:b6:d8:69:07:d2:6b:77:e7:bf:78:ed: be:cb:0a:eb:69:59:2b:4e:79:9a:be:fb:6e:13:02: 55:1a:6d:37:05:cb:59:87:d7:20:90:44:a1:3b:28: 52:a8:58:5a:7e:a1:65:53:14:a9:21:80:a9:87:7b: cb:99:ae:0f:0f:b8:6f:f2:b2:6d:39:60:02:28:ee: e3:38:fe:72:44:eb:94:a4:34:af:c7:4a:2d:ba:15: 25:27:39:6e:bb:46:91:b1:77:51:44:dc:67:fd:e8: e5:35:b4:fb:66:51:0f:f4:e4:1a:86:e1:69:43:d6: 31:a2:34:91:34:6e:2e:c2:87:94:bf:f1:87:76:00: 82:b6:f7:b9:a4:1e:01:ce:68:d0:e5:3b:91:78:75: cb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D1:90:32:3E:09:07:8F:36:CD:00:69:6E:94:7B:5B:45:C1:A0:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a6dac34-f69e-3d51-b6e7-6b01e75a7651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.25.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:c2:5d:94:77:d0:3c:fb:ea:e7:c4:fb:1c:43:53:16:86:68: 8b:b8:ec:92:e8:c1:70:54:d1:19:42:56:06:aa:88:6f:85:64: 0b:ba:8e:31:67:24:b7:84:f7:34:57:7a:a2:80:ea:8d:32:60: 3d:ad:56:85:d9:a1:53:c0:1a:91:80:a9:a4:d7:07:45:b7:39: 4e:a2:94:85:b6:1b:f7:e6:5e:de:f6:56:69:0c:54:d3:11:e5: 2e:00:c8:a8:7e:31:dc:52:01:6b:06:94:1d:4d:ec:a1:03:be: 97:7d:6c:45:b2:2c:39:c6:1f:f5:df:52:82:74:27:c8:8d:30: d7:b7:9c:9c:d1:2e:12:fe:26:bf:05:aa:b2:e0:e9:0b:fe:0d: 26:73:0b:37:82:4a:5a:18:12:9e:11:46:8c:10:62:20:9b:16: 30:21:03:8c:ec:24:ff:c1:62:43:e8:0f:91:c3:df:95:a7:29: 1b:32:2a:72:b0:66:3a:40:44:be:ac:70:14:4a:b8:6f:f3:03: 61:b3:9d:4e:67:68:14:9f:c1:53:de:a7:26:2a:54:af:c6:c4: 1f:4c:fd:8d:ce:72:6d:5c:bc:5e:45:28:4f:b9:95:90:99:32: cf:35:bd:0f:26:66:78:40:60:58:97:28:fd:8d:34:c9:93:65: b0:9d:cf:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMpHrU46w1QMJb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZWQyMmM4NmYtNDEyNi00ZDllLThhM2ItMzJlODNiZDAxZTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Uyy7Im2pMioumUYhS2RQvdX4HMY17cxwT90 Q66Z1IRPKsPU+UTJFr9mJ51Qfit+dCPz6shNerUIaoq784BOP4gbYDoF7N/vtntB e7cpGAHvUS+MmuBSGPtpuUgb5ATxK7PlkUcXzqAlf92ktthpB9Jrd+e/eO2+ywrr aVkrTnmavvtuEwJVGm03BctZh9cgkEShOyhSqFhafqFlUxSpIYCph3vLma4PD7hv 8rJtOWACKO7jOP5yROuUpDSvx0otuhUlJzluu0aRsXdRRNxn/ejlNbT7ZlEP9OQa huFpQ9YxojSRNG4uwoeUv/GHdgCCtve5pB4BzmjQ5TuReHXLSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjRkDI+CQePNs0AaW6Ue1tFwaAPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmE2ZGFjMzQtZjY5ZS0z ZDUxLWI2ZTctNmIwMWU3NWE3NjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuBmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7CXZR30Dz76ufE+xxDUxaGaIu47JLowXBU0RlCVgaqiG+FZAu6jjFn JLeE9zRXeqKA6o0yYD2tVoXZoVPAGpGAqaTXB0W3OU6ilIW2G/fmXt72VmkMVNMR 5S4AyKh+MdxSAWsGlB1N7KEDvpd9bEWyLDnGH/XfUoJ0J8iNMNe3nJzRLhL+Jr8F qrLg6Qv+DSZzCzeCSloYEp4RRowQYiCbFjAhA4zsJP/BYkPoD5HD35WnKRsyKnKw ZjpARL6scBRKuG/zA2GznU5naBSfwVPepyYqVK/GxB9M/Y3Ocm1cvF5FKE+5lZCZ Ms81vQ8mZnhAYFiXKP2NNMmTZbCdz3I= -----END CERTIFICATE-----Generated at Tue Nov 4 21:01:57 2025 by rpki-client