$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28fbccee-59c5-33c8-ab8b-078639aacca4.roa File: 28fbccee-59c5-33c8-ab8b-078639aacca4.roa (raw, json) Hash identifier: cJnEnvmFaCz52YPKEdHvK09eefU98dmNMvA47BM4n+Q= Subject key identifier: C5:E4:01:C9:FD:5B:EF:72:62:01:83:0F:5B:E5:65:C8:D6:36:E4:A8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF0F14E25B658A383399D1300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28fbccee-59c5-33c8-ab8b-078639aacca4.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 104.74.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:4e:25:b6:58:a3:83:39:9d:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=c1d08df0-b1b0-4d00-886a-6728f16110d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0e:78:ad:5c:77:c2:bf:38:27:f7:13:0a:04: 85:ae:d9:13:38:cc:a3:f9:fb:60:ad:e7:1b:e5:9e: 5d:d2:83:5b:80:44:9c:f9:19:2d:30:ae:00:f5:b3: c9:df:01:2b:af:63:e2:4d:e0:22:cb:dd:fb:f3:ec: c8:3e:97:c3:07:49:24:70:3b:66:b5:f0:5e:58:19: 64:43:f2:e4:3e:57:87:7d:b2:f9:6c:bd:4c:e7:ad: 0a:7b:d3:1a:fc:c4:e3:99:5f:56:70:da:20:70:dd: ae:99:e1:75:5a:b8:58:a2:41:06:28:15:87:7f:4b: ba:88:7e:44:0c:d5:84:87:25:bb:0e:66:e5:9a:83: a2:54:fe:68:5f:2b:95:dc:9b:eb:16:aa:14:20:bf: 10:4c:97:64:4c:1d:15:ad:08:3a:e9:c9:67:f0:63: 94:b2:0a:89:6d:64:50:a2:d9:97:29:a6:9d:dc:66: 99:d3:20:95:90:bc:28:1d:5b:c2:80:24:3f:ff:9c: 7f:90:16:74:a1:ce:88:eb:c1:95:fb:23:58:3d:b0: 0c:8e:70:d4:60:79:66:20:cb:7a:69:e6:29:63:85: 61:4d:da:c1:26:be:37:37:3b:0d:bc:7f:e8:74:dc: 4b:4f:35:73:e2:bc:3a:94:11:0e:92:8a:2d:49:c7: 09:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E4:01:C9:FD:5B:EF:72:62:01:83:0F:5B:E5:65:C8:D6:36:E4:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28fbccee-59c5-33c8-ab8b-078639aacca4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.74.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:05:ed:d8:e5:fe:58:e1:b1:42:44:1f:d2:01:0e:30:54:dd: d9:8e:50:9d:e7:06:88:cb:95:a6:ea:30:2d:38:fe:a5:77:f2: d2:63:09:72:17:c4:53:dc:5a:87:86:4c:d4:df:4c:8a:6e:45: 08:9d:18:22:ff:e6:bd:ab:ff:fa:fd:00:30:95:6a:cf:18:be: d5:23:25:3b:66:93:bb:e6:b4:3d:3f:53:a0:77:f8:57:76:82: a2:d7:75:7c:6a:5f:a4:96:56:bc:34:8c:72:2d:d2:b4:cc:23: d3:1f:6f:93:e8:d0:3a:a5:c6:22:e3:66:b7:54:c4:2b:18:76: 63:f6:35:84:f7:71:8c:58:8e:44:02:04:86:c3:d5:b6:77:6b: 60:ce:84:e3:98:ac:33:0c:ec:7e:c0:34:82:5f:21:f2:57:41: 1a:56:91:71:48:56:80:1b:63:d5:5d:5d:55:66:35:86:36:bb: 9e:ee:c6:de:2d:2d:8a:97:4e:07:ae:86:f4:be:bf:1a:65:84: 8e:4b:47:78:d5:be:ce:b5:a3:0a:c3:99:29:47:85:77:a7:62: f7:64:da:a7:38:3b:5c:ac:16:ca:c2:20:73:76:03:78:47:6b: fa:43:71:c9:a5:ec:84:a9:66:21:d9:d6:75:91:18:d9:0b:fc: 85:c5:31:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8U4ltlijgzmdEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YzFkMDhkZjAtYjFiMC00ZDAwLTg4NmEtNjcyOGYxNjExMGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA54rVx3wr84J/cTCgSFrtkTOMyj+ftgrecb 5Z5d0oNbgESc+RktMK4A9bPJ3wErr2PiTeAiy9378+zIPpfDB0kkcDtmtfBeWBlk Q/LkPleHfbL5bL1M560Ke9Ma/MTjmV9WcNogcN2umeF1WrhYokEGKBWHf0u6iH5E DNWEhyW7DmblmoOiVP5oXyuV3JvrFqoUIL8QTJdkTB0VrQg66cln8GOUsgqJbWRQ otmXKaad3GaZ0yCVkLwoHVvCgCQ//5x/kBZ0oc6I68GV+yNYPbAMjnDUYHlmIMt6 aeYpY4VhTdrBJr43NzsNvH/odNxLTzVz4rw6lBEOkootSccJTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXkAcn9W+9yYgGDD1vlZcjWNuSoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjhmYmNjZWUtNTljNS0z M2M4LWFiOGItMDc4NjM5YWFjY2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaEqUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4F7djl/ljhsUJEH9IBDjBU3dmOUJ3nBojLlabqMC04/qV38tJjCXIX xFPcWoeGTNTfTIpuRQidGCL/5r2r//r9ADCVas8YvtUjJTtmk7vmtD0/U6B3+Fd2 gqLXdXxqX6SWVrw0jHIt0rTMI9Mfb5Po0DqlxiLjZrdUxCsYdmP2NYT3cYxYjkQC BIbD1bZ3a2DOhOOYrDMM7H7ANIJfIfJXQRpWkXFIVoAbY9VdXVVmNYY2u57uxt4t LYqXTgeuhvS+vxplhI5LR3jVvs61owrDmSlHhXenYvdk2qc4O1ysFsrCIHN2A3hH a/pDccml7ISpZiHZ1nWRGNkL/IXFMTg= -----END CERTIFICATE-----Generated at Sun Aug 24 05:30:11 2025 by rpki-client