$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2bd5d8ba-97da-3b44-a6fb-55687b8a0741.roa File: 2bd5d8ba-97da-3b44-a6fb-55687b8a0741.roa (raw, json) Hash identifier: KuLhTD1+f49qUejnPThpvfG6mEvSPs94uHxUJT3Fxjs= Subject key identifier: 85:D1:B0:AD:77:6F:42:D4:A7:6A:EC:8A:C7:43:56:15:1F:BA:3B:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF2569DF8DA6AA618CBEA2B20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2bd5d8ba-97da-3b44-a6fb-55687b8a0741.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.76.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:9d:f8:da:6a:a6:18:cb:ea:2b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=53605860-a1c5-494f-bf80-83aff74f8c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1a:51:aa:c0:52:e5:4b:a7:e1:f6:28:29:f5: 40:77:00:a0:e9:bc:c0:fd:d1:47:40:4f:14:74:4c: 12:4e:18:1f:2e:f7:2f:7a:da:56:32:f6:60:5b:a0: c6:ff:21:e4:03:c4:3d:74:f4:37:ff:78:f1:98:b8: 9e:c8:0e:98:05:3e:1d:34:f3:13:2b:47:84:23:01: ff:63:41:50:63:ff:8d:a8:3e:22:25:ac:65:53:84: 52:15:4f:63:7a:79:70:2d:6b:51:07:32:f8:bc:71: 69:f5:9d:30:3c:96:22:5c:c1:f9:63:88:2f:cc:43: 79:ab:8b:2c:2e:ec:e0:55:28:87:ed:dd:4c:1a:e5: fb:18:85:63:22:95:2b:3e:20:aa:91:92:43:d5:15: 40:e1:2a:ff:c8:30:97:0e:0c:78:fc:f7:2f:08:b2: 3e:84:9f:0e:b2:10:df:e7:2f:1e:52:ed:5b:5d:99: 90:d0:b6:ce:eb:c0:6b:d7:06:43:56:d9:f3:aa:c3: 22:c3:ab:22:a0:6e:94:fe:6f:26:ab:a3:5c:cf:ff: 0c:1a:eb:b2:9b:23:67:7b:47:38:b2:c5:6d:51:0d: e3:4c:a6:e3:dd:9a:56:08:8f:17:6d:e2:ca:eb:46: 04:72:1a:ae:15:88:a8:6a:7c:77:57:c7:39:3c:5d: 2b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D1:B0:AD:77:6F:42:D4:A7:6A:EC:8A:C7:43:56:15:1F:BA:3B:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2bd5d8ba-97da-3b44-a6fb-55687b8a0741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.76.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:09:c7:e8:02:bb:e5:34:dc:18:f1:7a:d6:85:26:79:fb:27: 7a:2c:b9:03:49:fc:bf:c6:2f:d9:41:0a:7f:58:89:46:84:aa: 6b:30:b8:02:e7:c3:df:54:e4:c8:b1:b5:fb:ad:5b:09:ea:fc: 90:80:bc:b3:5a:8b:20:21:e1:5d:45:eb:c5:f5:ca:89:64:11: 94:0b:13:2b:da:e4:1c:e2:05:7a:d4:38:f7:95:40:4a:7b:63: 78:82:fe:a4:7f:69:cc:f4:e3:ea:76:95:7a:cb:31:fb:18:be: 99:0d:67:eb:b6:c8:d6:9b:dd:8c:5e:5e:c9:ed:b1:62:d4:a8: cf:00:af:1b:f6:40:0b:3a:30:7f:1f:46:a4:10:a7:a1:32:d0: 3f:64:60:49:83:b5:76:70:27:18:15:d9:d1:e2:d5:f7:6f:4e: d0:d9:3e:1a:a4:51:98:a6:69:5f:74:62:dd:d3:e2:7b:b6:99: 54:94:47:b7:0a:d1:fd:2f:35:cc:0f:0c:2a:0f:5e:c6:66:2d: 78:80:3d:d4:e4:ee:1f:7b:0e:79:69:9e:7d:ed:94:13:65:1b: 98:51:55:bb:64:af:f1:69:de:07:c9:e1:1a:69:fa:3b:d4:34: 30:71:42:c7:e8:0e:66:84:61:5a:d3:7d:14:7f:c4:86:a4:9c: b9:24:11:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVp342mqmGMvqKyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NTM2MDU4NjAtYTFjNS00OTRmLWJmODAtODNhZmY3NGY4YzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxpRqsBS5Uun4fYoKfVAdwCg6bzA/dFHQE8U dEwSThgfLvcvetpWMvZgW6DG/yHkA8Q9dPQ3/3jxmLieyA6YBT4dNPMTK0eEIwH/ Y0FQY/+NqD4iJaxlU4RSFU9jenlwLWtRBzL4vHFp9Z0wPJYiXMH5Y4gvzEN5q4ss LuzgVSiH7d1MGuX7GIVjIpUrPiCqkZJD1RVA4Sr/yDCXDgx4/PcvCLI+hJ8OshDf 5y8eUu1bXZmQ0LbO68Br1wZDVtnzqsMiw6sioG6U/m8mq6Ncz/8MGuuymyNne0c4 ssVtUQ3jTKbj3ZpWCI8XbeLK60YEchquFYioanx3V8c5PF0r9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXRsK13b0LUp2rsisdDVhUfujtVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmJkNWQ4YmEtOTdkYS0z YjQ0LWE2ZmItNTU2ODdiOGEwNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkJx+gCu+U03BjxetaFJnn7J3osuQNJ/L/GL9lBCn9YiUaEqmswuALn w99U5MixtfutWwnq/JCAvLNaiyAh4V1F68X1yolkEZQLEyva5BziBXrUOPeVQEp7 Y3iC/qR/acz04+p2lXrLMfsYvpkNZ+u2yNab3YxeXsntsWLUqM8Arxv2QAs6MH8f RqQQp6Ey0D9kYEmDtXZwJxgV2dHi1fdvTtDZPhqkUZimaV90Yt3T4nu2mVSUR7cK 0f0vNcwPDCoPXsZmLXiAPdTk7h97Dnlpnn3tlBNlG5hRVbtkr/Fp3gfJ4Rpp+jvU NDBxQsfoDmaEYVrTfRR/xIaknLkkEZ8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:54:19 2025 by rpki-client