$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cb68b7f-1335-3cf0-b863-8b9cd99fdb6e.roa File: 2cb68b7f-1335-3cf0-b863-8b9cd99fdb6e.roa (raw, json) Hash identifier: EBIhE4YybQovYWuC8U79+rLXvP7tXEMddEFbfQuuiRE= Subject key identifier: 9B:DE:30:7A:D3:E1:41:E3:70:B8:50:4C:FC:09:27:90:75:6D:68:BC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE89139CC7C7FF1CE42D71140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cb68b7f-1335-3cf0-b863-8b9cd99fdb6e.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 20940 IP address blocks: 104.70.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:39:cc:7c:7f:f1:ce:42:d7:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=678b180a-afe4-49d5-a41d-0b9430a01d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:df:3f:e5:d4:cd:27:d6:e1:46:d4:a6:54:a1: cf:9e:a6:6c:b2:35:4f:ec:50:9b:c9:76:69:88:e6: 04:41:16:06:e8:47:87:ff:53:d2:98:66:9b:53:40: 15:8a:ca:a8:e1:d0:85:7a:60:9a:84:61:e7:6a:b1: 31:26:4f:57:4c:14:f8:ca:1e:b1:9c:40:80:ae:53: d3:79:bf:83:c5:0b:25:88:52:f6:bc:90:25:68:41: 7e:7f:7c:1e:6a:1a:5f:26:78:a0:27:7f:1b:32:a9: 40:6e:d7:29:27:38:a4:90:fc:c0:b4:cf:89:c3:b1: 19:70:39:17:a4:e1:37:fb:ff:06:f7:65:57:48:07: 86:b4:65:ed:34:a9:3d:74:20:cc:e5:68:b5:bb:93: 9f:22:0f:3a:66:7f:d4:c6:fe:6e:b0:9a:77:e2:4c: 72:5e:b0:ea:4e:6b:ef:2e:8c:14:3a:65:52:92:77: e4:e9:26:4d:5b:e6:a7:17:fc:dd:c1:c2:b7:74:a2: 5b:cd:cc:79:98:23:0f:da:00:a0:5c:45:e4:eb:7d: 6b:ac:10:9d:a4:ed:f3:61:66:f5:9a:ec:49:67:53: 79:02:a6:25:ec:33:74:22:db:b9:27:82:54:51:a6: 6d:f3:56:ad:93:8e:91:79:79:b0:f2:97:5a:a5:33: 7f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DE:30:7A:D3:E1:41:E3:70:B8:50:4C:FC:09:27:90:75:6D:68:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cb68b7f-1335-3cf0-b863-8b9cd99fdb6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.70.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:f7:d4:db:9c:c2:17:7a:22:27:37:8e:e1:f7:09:fa:03:9d: 0b:56:01:9c:52:05:7d:d6:88:9f:2a:29:9b:7e:39:a2:2a:c4: 5f:06:7c:0b:1a:05:d4:4a:d9:49:dd:ef:dc:80:f3:45:2c:e4: 9a:c3:c2:eb:10:21:72:cf:d7:e4:0a:c6:04:a0:7b:60:5f:7e: 19:50:e9:14:a2:3c:16:05:9a:a5:62:4c:fd:35:f8:73:38:eb: 70:f4:3f:fe:6e:19:25:6a:83:99:21:57:67:84:3e:65:75:e5: b5:bc:2b:8b:44:9a:be:60:56:20:66:1d:95:0b:6e:f4:fb:b7: cf:42:e2:dc:ca:83:3e:86:4e:52:ee:fd:2e:e7:7b:e6:71:36: e0:a4:48:e0:96:47:f1:66:f2:be:e7:70:b7:ca:92:e5:45:1b: 07:e1:98:b3:99:ff:58:83:b9:a3:f0:55:55:7c:57:33:6c:c7: c2:de:35:1a:12:78:41:2d:d0:5c:aa:27:41:e0:25:49:d2:55: 12:ae:42:ea:d8:99:f1:04:d9:81:98:ff:49:2d:2c:25:86:85: f1:cc:c5:7d:c5:50:7e:0d:30:39:69:99:61:68:19:c4:91:ce: 8f:36:5d:68:ff:33:93:cf:3f:b8:9f:6c:c3:65:34:99:df:17: 6f:35:93:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTnMfH/xzkLXEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk Njc4YjE4MGEtYWZlNC00OWQ1LWE0MWQtMGI5NDMwYTAxZDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN8/5dTNJ9bhRtSmVKHPnqZssjVP7FCbyXZp iOYEQRYG6EeH/1PSmGabU0AVisqo4dCFemCahGHnarExJk9XTBT4yh6xnECArlPT eb+DxQsliFL2vJAlaEF+f3weahpfJnigJ38bMqlAbtcpJzikkPzAtM+Jw7EZcDkX pOE3+/8G92VXSAeGtGXtNKk9dCDM5Wi1u5OfIg86Zn/Uxv5usJp34kxyXrDqTmvv LowUOmVSknfk6SZNW+anF/zdwcK3dKJbzcx5mCMP2gCgXEXk631rrBCdpO3zYWb1 muxJZ1N5AqYl7DN0Itu5J4JUUaZt81atk46ReXmw8pdapTN/SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJveMHrT4UHjcLhQTPwJJ5B1bWi8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmNiNjhiN2YtMTMzNS0z Y2YwLWI4NjMtOGI5Y2Q5OWZkYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEZ3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG331Nucwhd6Iic3juH3CfoDnQtWAZxSBX3WiJ8qKZt+OaIqxF8GfAsa BdRK2Und79yA80Us5JrDwusQIXLP1+QKxgSge2BffhlQ6RSiPBYFmqViTP01+HM4 63D0P/5uGSVqg5khV2eEPmV15bW8K4tEmr5gViBmHZULbvT7t89C4tzKgz6GTlLu /S7ne+ZxNuCkSOCWR/Fm8r7ncLfKkuVFGwfhmLOZ/1iDuaPwVVV8VzNsx8LeNRoS eEEt0FyqJ0HgJUnSVRKuQurYmfEE2YGY/0ktLCWGhfHMxX3FUH4NMDlpmWFoGcSR zo82XWj/M5PPP7ifbMNlNJnfF281k44= -----END CERTIFICATE-----Generated at Sat Aug 23 12:58:21 2025 by rpki-client