$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/231eafeb-2232-3617-be40-e0d81bf921d2.roa File: 231eafeb-2232-3617-be40-e0d81bf921d2.roa (raw, json) Hash identifier: R30zwn2IZzqQp9982SAgB9uSStpW805CGObesx/+UHM= Subject key identifier: EA:62:62:9F:80:07:57:B2:99:AE:A8:A6:B2:8B:CA:03:70:25:F6:3B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE8913CCDB806FFEE350E7CE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/231eafeb-2232-3617-be40-e0d81bf921d2.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 16625 IP address blocks: 104.89.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:3c:cd:b8:06:ff:ee:35:0e:7c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=875c5096-a677-4074-92a0-7c0f77227d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:16:ee:2b:ef:cc:69:03:4c:96:19:f0:59:70: a2:64:1d:06:a8:70:9a:55:e9:d9:ef:77:ec:20:5b: 01:1b:cc:a7:0f:1c:e1:b4:05:f9:3c:c4:2b:76:40: 5b:a1:d4:c5:eb:bf:d9:5a:40:19:c6:fc:d7:3c:b1: cf:91:0b:a6:f4:c3:3b:1e:dd:6b:4c:51:ab:4d:1c: f5:08:88:01:d8:94:fe:70:bc:e5:20:ff:09:46:58: 2d:a7:5f:bc:cc:ce:cf:88:e9:90:e4:4f:f1:4b:45: 2a:58:4f:4c:68:34:22:62:48:c8:28:23:96:8f:24: 5a:41:fb:d0:f7:11:05:2b:9e:86:af:25:2e:28:92: c7:ce:32:26:d4:0b:8b:95:33:63:5a:f5:fa:b2:7a: ef:80:30:e9:40:3b:09:07:63:3b:e1:38:1e:e0:e4: f6:9d:b6:0c:5b:65:c6:05:c3:6f:e5:d0:fb:41:60: d9:ab:18:b7:93:7f:f8:c6:c5:0e:b6:66:07:86:dc: 7c:2f:d9:39:f3:ce:50:ba:89:9e:1f:8e:4c:5a:80: be:68:4c:be:eb:73:76:30:7a:79:48:5d:29:52:39: 44:b7:9c:a9:52:1b:d9:5e:7a:0c:4b:a2:3d:0d:2b: 46:71:6f:3d:09:01:64:fa:ce:9e:d4:af:8a:6a:a7: 75:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:62:62:9F:80:07:57:B2:99:AE:A8:A6:B2:8B:CA:03:70:25:F6:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/231eafeb-2232-3617-be40-e0d81bf921d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.89.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c2:d4:1e:90:06:72:e9:f5:24:8d:3a:be:8d:74:61:d6:3a: 02:0e:10:0d:05:5b:8e:f2:9a:a8:ee:4d:5e:c2:34:76:9d:c0: 36:ef:39:13:26:34:81:64:ea:4e:5d:c3:4a:83:3e:75:88:34: f6:9e:54:df:21:0a:61:db:53:a1:42:b1:2c:c6:ac:78:d0:4c: ec:88:e5:4d:1d:8c:aa:5f:50:1f:31:d6:2e:40:0c:a7:30:d7: d1:b6:a2:0a:95:5b:84:ab:61:25:d9:f4:a7:ea:7e:b8:37:0b: 5b:a4:fe:72:8a:3a:3f:e5:24:2e:e2:9f:18:05:d1:85:2d:23: 17:cb:64:9e:7e:9f:1e:68:3e:86:e8:f9:2c:21:67:b0:1c:55: 4e:4d:e2:f6:aa:22:25:98:00:47:37:4a:70:27:15:78:95:72: 4a:e0:8c:bc:e8:34:de:f1:3e:31:13:81:de:f1:c8:3c:6a:41: 12:23:30:86:24:2d:e5:67:09:b4:5c:30:f9:92:af:e9:2b:e1: 5a:01:a1:37:6f:8b:97:bf:29:a1:ef:63:9a:25:a4:8d:44:58: 03:0d:97:05:5c:c5:3e:1a:35:4d:22:0d:87:63:93:fa:e1:8b: 73:e6:60:46:21:9b:03:0e:0c:ee:db:2a:3a:ce:e0:c4:51:97: 83:22:da:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTzNuAb/7jUOfOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk ODc1YzUwOTYtYTY3Ny00MDc0LTkyYTAtN2MwZjc3MjI3ZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBbuK+/MaQNMlhnwWXCiZB0GqHCaVenZ73fs IFsBG8ynDxzhtAX5PMQrdkBbodTF67/ZWkAZxvzXPLHPkQum9MM7Ht1rTFGrTRz1 CIgB2JT+cLzlIP8JRlgtp1+8zM7PiOmQ5E/xS0UqWE9MaDQiYkjIKCOWjyRaQfvQ 9xEFK56GryUuKJLHzjIm1AuLlTNjWvX6snrvgDDpQDsJB2M74Tge4OT2nbYMW2XG BcNv5dD7QWDZqxi3k3/4xsUOtmYHhtx8L9k5885QuomeH45MWoC+aEy+63N2MHp5 SF0pUjlEt5ypUhvZXnoMS6I9DStGcW89CQFk+s6e1K+Kaqd1rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpiYp+AB1eyma6oprKLygNwJfY7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjMxZWFmZWItMjIzMi0z NjE3LWJlNDAtZTBkODFiZjkyMWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaFngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrC1B6QBnLp9SSNOr6NdGHWOgIOEA0FW47ymqjuTV7CNHadwDbvORMm NIFk6k5dw0qDPnWINPaeVN8hCmHbU6FCsSzGrHjQTOyI5U0djKpfUB8x1i5ADKcw 19G2ogqVW4SrYSXZ9Kfqfrg3C1uk/nKKOj/lJC7inxgF0YUtIxfLZJ5+nx5oPobo +SwhZ7AcVU5N4vaqIiWYAEc3SnAnFXiVckrgjLzoNN7xPjETgd7xyDxqQRIjMIYk LeVnCbRcMPmSr+kr4VoBoTdvi5e/KaHvY5olpI1EWAMNlwVcxT4aNU0iDYdjk/rh i3PmYEYhmwMODO7bKjrO4MRRl4Mi2p8= -----END CERTIFICATE-----Generated at Sat Aug 23 13:10:33 2025 by rpki-client