$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19ce2770-74df-3520-80dc-efc4b42b36e1.roa File: 19ce2770-74df-3520-80dc-efc4b42b36e1.roa (raw, json) Hash identifier: 4aNh5y2egHmqhqqL/VeW8NqCQkfvTUF/jG05DN0K1OA= Subject key identifier: 4A:FC:1A:10:A3:DF:2F:A0:9F:DE:67:4F:B4:32:EF:9D:5E:FB:B1:EB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF2569DE66B1B85B55F791360 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19ce2770-74df-3520-80dc-efc4b42b36e1.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.76.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:9d:e6:6b:1b:85:b5:5f:79:13:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=397da8d2-7360-4f2e-b6be-114d25ba6a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:29:20:b1:c2:4c:ac:cb:ef:b4:62:ba:04:34: ff:75:43:ae:e6:72:8d:29:13:ad:b4:5f:29:69:de: bf:66:d9:0a:eb:37:4f:af:92:db:80:c0:d6:db:4a: 07:a5:30:63:6e:e7:08:e8:0f:00:18:42:1f:8a:52: a3:7b:a9:25:a6:e6:22:c1:4c:cb:74:0b:3c:46:3c: ab:df:cd:fc:7c:b7:5d:35:6e:94:b1:38:e5:fa:dd: fb:27:8d:3b:c2:f0:96:d3:1d:af:38:b0:3a:8a:4b: c9:95:bc:21:e1:81:d2:a0:7d:df:31:b1:44:bd:c6: 9c:d0:72:c2:1f:a9:4f:a8:1f:6c:b0:e8:79:c1:52: 9e:7f:5c:2e:14:da:85:5e:45:f3:b8:3a:9b:c8:bb: c4:27:ee:1b:35:3d:4b:4b:5b:e2:39:5a:ea:85:dd: 57:8c:ec:b7:dd:0e:6e:89:19:94:c7:e7:ff:86:33: 76:b6:85:64:f6:e9:d9:98:a1:21:23:fa:c4:96:2a: c7:57:96:e6:1a:f3:42:fc:4d:06:89:7d:b0:17:ce: 20:b2:fc:9d:a6:61:f9:a6:09:aa:eb:1d:98:4e:55: 75:79:d4:8d:c5:63:f9:8d:f2:36:4b:45:17:f7:b7: 8e:55:d0:f3:cb:08:d5:2a:05:6e:cd:03:a4:bc:e4: a3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FC:1A:10:A3:DF:2F:A0:9F:DE:67:4F:B4:32:EF:9D:5E:FB:B1:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19ce2770-74df-3520-80dc-efc4b42b36e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.76.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:2d:4d:04:30:b2:64:65:0a:70:9d:44:fa:81:4e:5a:a8:03: ed:93:60:a0:98:26:d1:b1:1f:00:c6:1f:40:01:49:32:5b:d9: 51:76:89:c7:91:e5:fa:63:43:2c:1f:37:aa:2b:79:65:cf:7e: 2f:31:da:93:7e:e5:33:3a:1d:e1:a2:d9:00:1d:ce:17:4c:bd: 00:37:c5:be:98:f7:fe:d8:4a:e5:56:27:e0:2f:7e:23:1a:09: 18:e6:59:14:00:d6:3e:18:1e:c6:8f:cd:1d:b2:b9:4d:cc:bc: 93:92:1c:37:cd:32:2f:bf:b5:0b:5d:ea:db:a9:08:58:e4:02: af:8b:93:66:c5:a0:2e:52:f1:f2:a8:22:0d:07:b5:24:be:37: 0e:46:08:32:eb:37:e4:13:70:6e:33:95:26:10:ad:15:6e:02: 20:b3:4b:f9:89:e2:ef:2c:94:26:30:05:0a:7b:b1:ef:a1:84: e4:bb:e8:05:97:09:7a:20:7b:d9:85:92:9c:31:24:ca:30:4e: ff:b7:80:b7:14:66:56:43:e0:8d:e7:76:e9:fd:0b:34:64:ae: 20:85:93:cd:d4:01:0e:55:06:4c:64:06:64:25:bf:4b:b6:8e: 12:5c:cc:25:5c:fe:23:5a:48:e9:09:d7:36:58:28:46:64:f5: b1:24:d7:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVp3maxuFtV95E2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk Mzk3ZGE4ZDItNzM2MC00ZjJlLWI2YmUtMTE0ZDI1YmE2YTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArykgscJMrMvvtGK6BDT/dUOu5nKNKROttF8p ad6/ZtkK6zdPr5LbgMDW20oHpTBjbucI6A8AGEIfilKje6klpuYiwUzLdAs8Rjyr 3838fLddNW6UsTjl+t37J407wvCW0x2vOLA6ikvJlbwh4YHSoH3fMbFEvcac0HLC H6lPqB9ssOh5wVKef1wuFNqFXkXzuDqbyLvEJ+4bNT1LS1viOVrqhd1XjOy33Q5u iRmUx+f/hjN2toVk9unZmKEhI/rElirHV5bmGvNC/E0GiX2wF84gsvydpmH5pgmq 6x2YTlV1edSNxWP5jfI2S0UX97eOVdDzywjVKgVuzQOkvOSj5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEr8GhCj3y+gn95nT7Qy751e+7HrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTljZTI3NzAtNzRkZi0z NTIwLTgwZGMtZWZjNGI0MmIzNmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEzWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4tTQQwsmRlCnCdRPqBTlqoA+2TYKCYJtGxHwDGH0ABSTJb2VF2iceR 5fpjQywfN6oreWXPfi8x2pN+5TM6HeGi2QAdzhdMvQA3xb6Y9/7YSuVWJ+AvfiMa CRjmWRQA1j4YHsaPzR2yuU3MvJOSHDfNMi+/tQtd6tupCFjkAq+Lk2bFoC5S8fKo Ig0HtSS+Nw5GCDLrN+QTcG4zlSYQrRVuAiCzS/mJ4u8slCYwBQp7se+hhOS76AWX CXoge9mFkpwxJMowTv+3gLcUZlZD4I3ndun9CzRkriCFk83UAQ5VBkxkBmQlv0u2 jhJczCVc/iNaSOkJ1zZYKEZk9bEk1+0= -----END CERTIFICATE-----Generated at Sat Aug 23 13:15:38 2025 by rpki-client