$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09015d40-0ee8-32ec-b715-75b0f11de099.roa File: 09015d40-0ee8-32ec-b715-75b0f11de099.roa (raw, json) Hash identifier: +2jhrTQARCBIHUMkhqNw2O3c4ASjhxL6PvbGj84lDAA= Subject key identifier: 71:7C:BE:3E:8F:52:FD:8C:9A:FC:AE:30:44:19:D6:D5:7D:E1:0C:2E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE891439248C6BE09E41E0940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09015d40-0ee8-32ec-b715-75b0f11de099.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 16625 IP address blocks: 104.89.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:43:92:48:c6:be:09:e4:1e:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=18008aa6-6a2f-46df-a882-92a944da1471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c0:87:3f:fa:c2:d5:cd:b2:e2:f8:8f:44:1e: 04:e6:a4:f8:a4:35:03:e8:85:b6:62:be:b7:24:ac: a6:12:4e:17:95:f6:ac:09:d2:2a:a7:a9:2a:11:c4: 5f:69:c6:4f:1f:62:dd:81:d4:bb:7e:2a:9f:85:d3: 7b:04:0a:04:9e:25:f4:fe:77:56:7f:dc:9b:34:2c: 30:7f:b0:a5:9e:7c:41:6c:04:09:a1:d1:c0:10:ca: f1:38:3a:46:15:44:b0:2f:ab:53:1d:35:a8:07:8e: ed:8b:96:e2:23:50:35:1b:8b:f3:7d:cb:38:c4:45: d9:51:a8:d8:1c:6e:d5:79:8a:d5:6e:5a:ae:0d:59: e2:48:60:fb:0a:32:62:50:a5:db:38:e1:5a:86:a3: c2:12:14:af:14:90:ff:f5:9e:3f:8b:d3:52:40:bd: 22:53:31:be:a3:75:63:c0:bf:0b:83:a8:b9:ec:29: 8d:4a:d1:56:40:2d:ab:a1:34:d0:b5:19:fc:4c:56: a0:63:20:40:22:eb:96:23:c2:aa:ef:db:37:8b:42: 14:48:ae:be:91:8a:af:cf:a7:ff:45:01:b0:29:f9: bd:53:36:6e:ab:d1:aa:3e:06:5f:a2:8e:ec:11:dd: d2:0f:dd:73:5d:71:4f:62:c8:95:ce:0f:03:00:b0: 16:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7C:BE:3E:8F:52:FD:8C:9A:FC:AE:30:44:19:D6:D5:7D:E1:0C:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09015d40-0ee8-32ec-b715-75b0f11de099.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.89.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:fd:42:e7:ea:05:c5:3f:2d:72:56:af:55:e1:b6:ee:c2:65: ee:15:6a:73:c6:66:ac:40:f6:44:e0:20:56:05:a9:79:ed:50: 26:63:93:a8:b9:49:f9:4c:45:75:db:2f:48:41:9e:65:9d:c0: 84:73:a2:14:8c:17:cf:15:04:51:43:8d:92:51:12:fb:d6:52: c4:a0:19:07:f3:f4:a3:21:0d:b0:73:46:fd:62:99:55:53:a4: 49:f7:d4:ce:97:73:2d:d1:33:78:69:9f:49:5f:85:ec:09:29: 33:0d:e0:f3:70:58:97:db:96:41:dc:0b:38:c7:b0:4b:5f:71: 95:39:c3:08:69:a8:10:a6:5b:eb:f9:99:21:4b:fe:8b:af:c8: 37:3e:a2:28:73:f4:3a:51:03:c5:ca:b2:60:8d:46:2f:72:f3: 04:26:7e:94:f2:72:97:73:df:61:fc:86:fc:8e:e0:d6:2f:f2: 45:ba:3f:12:1a:b0:06:59:cf:5a:91:d3:e3:c7:ec:d3:95:64: 64:6c:aa:71:e9:6c:2b:ba:14:2d:1c:a6:23:e6:05:70:81:23: 62:2b:3d:cb:60:6f:17:ca:74:c2:08:b7:3f:1c:c2:e1:86:67: 1a:c9:56:b1:6e:86:ee:1f:c5:4a:b5:94:66:e5:76:c9:a5:24: a2:b3:83:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokUOSSMa+CeQeCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk MTgwMDhhYTYtNmEyZi00NmRmLWE4ODItOTJhOTQ0ZGExNDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycCHP/rC1c2y4viPRB4E5qT4pDUD6IW2Yr63 JKymEk4XlfasCdIqp6kqEcRfacZPH2LdgdS7fiqfhdN7BAoEniX0/ndWf9ybNCww f7ClnnxBbAQJodHAEMrxODpGFUSwL6tTHTWoB47ti5biI1A1G4vzfcs4xEXZUajY HG7VeYrVblquDVniSGD7CjJiUKXbOOFahqPCEhSvFJD/9Z4/i9NSQL0iUzG+o3Vj wL8Lg6i57CmNStFWQC2roTTQtRn8TFagYyBAIuuWI8Kq79s3i0IUSK6+kYqvz6f/ RQGwKfm9UzZuq9GqPgZfoo7sEd3SD91zXXFPYsiVzg8DALAW8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHF8vj6PUv2MmvyuMEQZ1tV94QwuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDkwMTVkNDAtMGVlOC0z MmVjLWI3MTUtNzViMGYxMWRlMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaFloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADX9QufqBcU/LXJWr1Xhtu7CZe4VanPGZqxA9kTgIFYFqXntUCZjk6i5 SflMRXXbL0hBnmWdwIRzohSMF88VBFFDjZJREvvWUsSgGQfz9KMhDbBzRv1imVVT pEn31M6Xcy3RM3hpn0lfhewJKTMN4PNwWJfblkHcCzjHsEtfcZU5wwhpqBCmW+v5 mSFL/ouvyDc+oihz9DpRA8XKsmCNRi9y8wQmfpTycpdz32H8hvyO4NYv8kW6PxIa sAZZz1qR0+PH7NOVZGRsqnHpbCu6FC0cpiPmBXCBI2IrPctgbxfKdMIItz8cwuGG ZxrJVrFuhu4fxUq1lGbldsmlJKKzg+A= -----END CERTIFICATE-----Generated at Sat Aug 23 13:04:46 2025 by rpki-client