$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0abb02bb-a987-3937-9466-1c918e8033f5.roa File: 0abb02bb-a987-3937-9466-1c918e8033f5.roa (raw, json) Hash identifier: Wmv3SkZ7vSq1bCGUXizHjnGgABxjQnouFLIwkUbxubA= Subject key identifier: 5C:8E:89:47:2C:1B:FC:03:E9:4D:DA:2E:2B:48:EF:A2:5B:9A:BD:0C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE8913B14733DE219F9F1EE60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0abb02bb-a987-3937-9466-1c918e8033f5.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 20940 IP address blocks: 104.71.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:3b:14:73:3d:e2:19:f9:f1:ee:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=b2b46ce8-9a64-4c86-9bb3-147078924bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2b:54:1d:58:07:9c:d6:a6:ac:8d:b6:48:55: 75:fa:91:2e:c9:9e:1e:a9:cd:b3:df:77:72:b4:ab: ea:73:67:5b:36:d2:0c:3a:07:ec:59:c1:90:e7:9c: 30:27:b1:f9:3d:f5:8d:2f:1d:a7:db:f2:c3:8b:11: aa:aa:f3:64:8a:24:aa:37:bb:bd:53:b5:f1:3f:7a: 7a:3e:b5:e1:9c:07:21:7b:42:f3:d1:6e:1c:49:bc: c1:48:5d:ea:93:1c:fd:fd:fb:a7:ff:0f:2d:d4:30: a5:b5:5a:8a:3d:4a:8c:87:c5:00:dc:3f:70:ac:79: 45:d3:c5:e6:a8:e9:9c:ea:3c:c2:07:24:58:db:9c: df:49:8d:39:bb:15:df:a2:31:ca:d0:48:82:21:7d: ee:e5:21:02:39:13:07:71:6b:eb:67:c0:21:68:ce: 96:b3:4c:b4:5c:fb:03:92:e6:9c:06:30:b0:12:b8: ff:b8:7c:48:07:0a:0a:e3:b0:6b:f9:a4:f0:ca:e1: 72:b1:3a:dc:5e:e2:e8:62:5c:f4:56:72:7c:c7:d6: d4:09:73:3b:6e:b6:cd:10:96:ec:42:3d:3f:9c:38: f6:6f:5a:1b:a4:df:be:da:2c:cd:3e:10:3d:1a:dc: 7f:c2:0d:90:e9:73:94:50:f8:4a:6f:8a:e8:2e:e7: c1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8E:89:47:2C:1B:FC:03:E9:4D:DA:2E:2B:48:EF:A2:5B:9A:BD:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0abb02bb-a987-3937-9466-1c918e8033f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.71.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:10:f3:04:3c:24:5d:1d:a1:99:54:56:40:d6:c5:21:41:38: 0f:c7:70:5a:45:60:83:74:e8:ec:ff:4f:ea:9f:74:7b:ee:35: 61:41:b5:ee:f3:96:4f:b8:1f:fc:17:c2:46:3a:1a:0b:87:d3: 01:8c:7d:2b:37:4d:f0:f8:fc:38:48:6e:53:ac:ba:a2:eb:92: 45:73:31:9b:44:98:36:e5:b6:93:b1:f5:16:96:af:e0:fe:d1: 10:b7:ce:56:7e:09:88:9b:c5:7d:d9:c3:7f:5c:57:0d:0e:d9: da:72:55:9d:43:48:e9:9a:1a:fe:14:15:18:85:5a:87:40:29: a3:9b:02:06:0d:80:40:3b:19:de:42:0e:3b:b9:50:07:bd:ce: 1e:72:b2:37:32:96:3f:c1:52:64:91:d1:79:5d:fc:9f:5b:be: f9:b7:a0:16:3a:d9:a8:45:05:75:fd:a7:00:70:a6:0b:94:ec: d0:3f:e1:e5:7a:0f:bb:5d:c0:cc:21:03:24:50:82:92:9e:0f: 1d:7d:09:56:2c:8a:03:bf:f1:56:38:f7:a3:08:6d:71:29:9a: 76:61:89:6a:86:8e:b5:cb:63:ea:1a:d8:17:d7:bd:f6:5f:30: 1b:53:5e:28:61:a8:55:fe:11:f5:b5:a2:4b:4e:9d:20:90:d1: b8:b5:33:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTsUcz3iGfnx7mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk YjJiNDZjZTgtOWE2NC00Yzg2LTliYjMtMTQ3MDc4OTI0YmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvitUHVgHnNamrI22SFV1+pEuyZ4eqc2z33dy tKvqc2dbNtIMOgfsWcGQ55wwJ7H5PfWNLx2n2/LDixGqqvNkiiSqN7u9U7XxP3p6 PrXhnAche0Lz0W4cSbzBSF3qkxz9/fun/w8t1DCltVqKPUqMh8UA3D9wrHlF08Xm qOmc6jzCByRY25zfSY05uxXfojHK0EiCIX3u5SECORMHcWvrZ8AhaM6Ws0y0XPsD kuacBjCwErj/uHxIBwoK47Br+aTwyuFysTrcXuLoYlz0VnJ8x9bUCXM7brbNEJbs Qj0/nDj2b1obpN++2izNPhA9Gtx/wg2Q6XOUUPhKb4roLufBZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyOiUcsG/wD6U3aLitI76Jbmr0MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGFiYjAyYmItYTk4Ny0z OTM3LTk0NjYtMWM5MThlODAzM2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEc9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMQ8wQ8JF0doZlUVkDWxSFBOA/HcFpFYIN06Oz/T+qfdHvuNWFBte7z lk+4H/wXwkY6GguH0wGMfSs3TfD4/DhIblOsuqLrkkVzMZtEmDbltpOx9RaWr+D+ 0RC3zlZ+CYibxX3Zw39cVw0O2dpyVZ1DSOmaGv4UFRiFWodAKaObAgYNgEA7Gd5C Dju5UAe9zh5ysjcylj/BUmSR0Xld/J9bvvm3oBY62ahFBXX9pwBwpguU7NA/4eV6 D7tdwMwhAyRQgpKeDx19CVYsigO/8VY496MIbXEpmnZhiWqGjrXLY+oa2BfXvfZf MBtTXihhqFX+EfW1oktOnSCQ0bi1M9w= -----END CERTIFICATE-----Generated at Sat Aug 23 13:13:06 2025 by rpki-client