$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c6acf81-6e3e-361d-8347-9da9ce0981b8.roa File: 0c6acf81-6e3e-361d-8347-9da9ce0981b8.roa (raw, json) Hash identifier: DN5fBUeS7Iav6cp1s46YP32+XAqzKDtjsbQ73hfnaZc= Subject key identifier: AD:CE:55:D3:71:6B:AC:38:7C:B1:E3:21:8C:A3:DF:3F:D1:1B:44:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE8913FE5B97198C29A9D99A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c6acf81-6e3e-361d-8347-9da9ce0981b8.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 7713 IP address blocks: 104.118.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:3f:e5:b9:71:98:c2:9a:9d:99:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=c424d3e9-1c16-4178-a2e1-57b79a037e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:55:59:fd:6b:b3:1c:c8:24:a4:6a:85:e5:4e: f6:2c:53:b5:49:eb:89:38:a1:d6:b2:93:55:2a:1d: a4:98:4f:ce:e9:a5:32:ef:a4:d5:c1:00:11:92:37: d5:10:a8:00:04:77:b9:48:7e:fd:57:55:77:88:13: 85:f2:24:70:9a:f5:b7:ef:8c:5f:6a:75:f4:a6:54: a7:d2:88:6d:0f:22:20:d4:c0:5b:3c:3f:60:23:76: 98:44:cf:a9:37:5d:22:b6:ba:23:85:a0:f5:b0:c7: bf:a6:1e:86:10:94:4f:d0:57:a1:ba:d2:fe:74:21: 48:59:11:fd:d0:88:b8:e7:78:0a:e7:e3:f6:57:b8: 04:ad:b8:26:97:30:d2:19:e0:84:a7:8b:c2:97:98: f4:43:47:c5:c0:d8:27:0f:af:f6:db:d0:0b:b1:81: a2:ca:54:4a:e2:2a:69:44:b3:50:57:b5:d4:43:5b: ec:a9:e7:ea:38:2b:c4:30:f8:4d:c3:e6:a5:5a:e7: 9a:d2:ea:f8:d2:d7:6d:58:db:38:70:06:7e:ca:9d: 14:d8:4d:5f:d5:bc:4f:27:be:5a:06:fe:7e:0e:6c: a3:15:be:d3:73:5d:0f:df:a6:60:a1:f2:f0:8c:5e: 27:2a:71:7d:37:49:03:dc:b5:34:92:46:1d:b3:41: 8e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CE:55:D3:71:6B:AC:38:7C:B1:E3:21:8C:A3:DF:3F:D1:1B:44:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c6acf81-6e3e-361d-8347-9da9ce0981b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.118.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:cc:a9:df:03:40:91:13:bd:e6:7a:36:12:b9:85:51:4d:e0: b1:99:7f:aa:d5:0a:b4:c1:71:8d:de:de:41:14:f1:0c:e4:0c: ee:a1:2a:a0:6d:a6:e2:8e:f9:1f:a2:40:b5:c4:ac:a9:b9:02: bc:bf:e7:0a:0c:7d:88:ed:31:bc:ab:d6:ce:41:26:77:0e:7e: d6:e6:90:15:6e:81:cc:cd:3f:98:bc:53:dc:a9:91:7d:0f:26: 0b:5f:77:bb:d6:ed:52:c1:cc:9f:34:29:f5:9c:21:6d:22:5c: 51:9a:06:c3:d6:2e:29:f4:05:10:8c:90:37:98:69:a7:83:af: a7:d7:7e:f0:25:7d:21:56:a4:c1:05:f7:0f:fb:48:eb:01:21: 31:07:d5:9e:fd:9d:d2:8d:41:2b:11:ff:e9:da:36:26:78:d4: 13:7b:db:6d:21:20:18:56:9e:b7:82:de:dc:dc:39:dd:90:d0: de:c7:15:f5:63:5a:b7:77:02:10:0b:1a:7c:da:89:4d:a6:f0: d4:c9:35:9d:7c:6e:b3:7e:c3:98:86:38:28:88:b5:cd:de:ae: 18:e9:b1:9e:ea:d6:3c:1e:56:6d:8e:11:98:74:db:ce:f4:c5: 75:d3:60:90:fd:f4:ab:dd:1b:1e:89:c3:4f:9b:ad:8a:45:f4: da:fc:1a:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokT/luXGYwpqdmaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk YzQyNGQzZTktMWMxNi00MTc4LWEyZTEtNTdiNzlhMDM3ZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1VZ/WuzHMgkpGqF5U72LFO1SeuJOKHWspNV Kh2kmE/O6aUy76TVwQARkjfVEKgABHe5SH79V1V3iBOF8iRwmvW374xfanX0plSn 0ohtDyIg1MBbPD9gI3aYRM+pN10itrojhaD1sMe/ph6GEJRP0FehutL+dCFIWRH9 0Ii453gK5+P2V7gErbgmlzDSGeCEp4vCl5j0Q0fFwNgnD6/229ALsYGiylRK4ipp RLNQV7XUQ1vsqefqOCvEMPhNw+alWuea0ur40tdtWNs4cAZ+yp0U2E1f1bxPJ75a Bv5+DmyjFb7Tc10P36ZgofLwjF4nKnF9N0kD3LU0kkYds0GOVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3OVdNxa6w4fLHjIYyj3z/RG0RAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGM2YWNmODEtNmUzZS0z NjFkLTgzNDctOWRhOWNlMDk4MWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaHaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHMqd8DQJETveZ6NhK5hVFN4LGZf6rVCrTBcY3e3kEU8QzkDO6hKqBt puKO+R+iQLXErKm5Ary/5woMfYjtMbyr1s5BJncOftbmkBVugczNP5i8U9ypkX0P Jgtfd7vW7VLBzJ80KfWcIW0iXFGaBsPWLin0BRCMkDeYaaeDr6fXfvAlfSFWpMEF 9w/7SOsBITEH1Z79ndKNQSsR/+naNiZ41BN7220hIBhWnreC3tzcOd2Q0N7HFfVj Wrd3AhALGnzaiU2m8NTJNZ18brN+w5iGOCiItc3erhjpsZ7q1jweVm2OEZh02870 xXXTYJD99KvdGx6Jw0+brYpF9Nr8Gpc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:55:50 2025 by rpki-client