$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34d84d99-9ea0-3cdd-8a20-5280734a79d0.roa File: 34d84d99-9ea0-3cdd-8a20-5280734a79d0.roa (raw, json) Hash identifier: 9qZ8fJyGXBVpaS7ZP0ddb9BU6TXgTd5pIUTWQHQvSPU= Subject key identifier: E7:16:C3:82:D7:77:F2:CC:1B:38:E9:1B:70:AD:03:D6:86:2E:D0:66 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF25699DDBE040222FF269400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34d84d99-9ea0-3cdd-8a20-5280734a79d0.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 104.67.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:99:dd:be:04:02:22:ff:26:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=8b03e5d3-9f89-4e88-bb41-aef030d8496e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4b:10:78:64:07:9f:ff:77:3b:09:32:75:c6: 40:a4:1d:c2:49:9c:e2:3d:c1:6a:fa:8f:b1:ec:f3: 36:24:5c:aa:5d:4f:1a:41:f6:07:35:ce:de:3e:56: ba:63:d4:3a:64:04:4f:d8:2a:bb:0b:99:23:d3:0e: 27:48:6b:c5:45:46:38:98:cc:88:39:09:10:b6:73: fc:d9:23:67:fe:45:b6:8b:14:d0:69:3c:3d:c4:c6: c4:51:d0:89:b5:7b:72:2d:b7:fc:97:d7:33:b4:ff: d2:cb:af:28:da:b7:07:75:3c:49:c8:12:2b:30:1f: cc:4b:47:87:e0:1c:47:82:2c:2d:3f:bb:c8:d1:62: fb:e0:41:7c:13:cd:a0:96:15:b0:93:42:cc:95:70: f1:f9:43:8d:15:51:e1:0f:ab:e8:d1:56:b8:3e:64: 52:9e:e1:03:1e:8e:fa:28:78:67:71:00:22:c4:3b: b2:26:5b:6e:c1:a6:2b:d1:31:86:15:66:0c:5f:f8: 92:43:22:f0:99:25:72:04:72:28:4f:83:a6:9c:bc: e7:4a:fb:a8:0e:12:9b:6a:69:40:d2:18:88:92:78: 10:a2:e3:10:fd:28:63:03:38:ec:87:76:fb:13:1a: 44:3b:cb:c2:32:0e:dd:94:ac:6f:fb:4b:3d:8e:22: 27:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:16:C3:82:D7:77:F2:CC:1B:38:E9:1B:70:AD:03:D6:86:2E:D0:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34d84d99-9ea0-3cdd-8a20-5280734a79d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.67.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ae:51:85:08:08:b7:1b:eb:8c:d5:23:8e:57:84:eb:34:7d: 39:23:38:7a:fa:d8:ff:09:1d:73:4a:e3:9d:7a:4d:4d:33:ad: de:52:6e:f1:cf:54:65:01:d5:de:33:a2:28:d2:10:bc:0b:e9: 9f:5f:02:08:9e:34:6e:37:30:ef:eb:99:cb:06:1e:ab:df:22: 6a:11:85:b1:d4:66:28:ab:9b:7e:84:f7:2c:53:f6:33:af:2a: b4:1c:b7:ac:f9:e7:d9:fc:27:ba:4c:14:4a:69:b4:3f:92:e3: 07:7e:81:3e:97:c4:36:83:aa:af:76:69:38:03:02:aa:77:49: c9:9a:37:59:4c:2f:b0:95:27:00:70:b7:40:c3:ea:4a:1a:3d: 64:29:a2:20:b9:58:79:dc:84:9c:7e:bc:34:50:77:58:e6:aa: bf:fc:ef:7f:4f:ab:0f:b0:8e:13:6e:20:e3:a9:43:ee:cf:f3: 06:17:97:c1:43:13:c2:9b:b9:bc:47:36:b4:57:8c:8a:76:dc: c2:12:39:c6:a4:f2:e6:64:aa:81:b7:a0:26:e3:b6:93:95:1b: 54:37:75:b1:cb:2f:85:16:9d:78:de:8c:29:42:81:5f:a9:6f: 7f:06:ae:91:5d:c2:f0:38:9d:f1:1d:4a:37:7c:0c:9d:4f:31: aa:2a:bd:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVpndvgQCIv8mlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk OGIwM2U1ZDMtOWY4OS00ZTg4LWJiNDEtYWVmMDMwZDg0OTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUsQeGQHn/93OwkydcZApB3CSZziPcFq+o+x 7PM2JFyqXU8aQfYHNc7ePla6Y9Q6ZARP2Cq7C5kj0w4nSGvFRUY4mMyIOQkQtnP8 2SNn/kW2ixTQaTw9xMbEUdCJtXtyLbf8l9cztP/Sy68o2rcHdTxJyBIrMB/MS0eH 4BxHgiwtP7vI0WL74EF8E82glhWwk0LMlXDx+UONFVHhD6vo0Va4PmRSnuEDHo76 KHhncQAixDuyJltuwaYr0TGGFWYMX/iSQyLwmSVyBHIoT4OmnLznSvuoDhKbamlA 0hiIkngQouMQ/ShjAzjsh3b7ExpEO8vCMg7dlKxv+0s9jiIn0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcWw4LXd/LMGzjpG3CtA9aGLtBmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzRkODRkOTktOWVhMC0z Y2RkLThhMjAtNTI4MDczNGE3OWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaEPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6uUYUICLcb64zVI45XhOs0fTkjOHr62P8JHXNK4516TU0zrd5SbvHP VGUB1d4zoijSELwL6Z9fAgieNG43MO/rmcsGHqvfImoRhbHUZiirm36E9yxT9jOv KrQct6z559n8J7pMFEpptD+S4wd+gT6XxDaDqq92aTgDAqp3ScmaN1lML7CVJwBw t0DD6koaPWQpoiC5WHnchJx+vDRQd1jmqr/8739Pqw+wjhNuIOOpQ+7P8wYXl8FD E8KbubxHNrRXjIp23MISOcak8uZkqoG3oCbjtpOVG1Q3dbHLL4UWnXjejClCgV+p b38GrpFdwvA4nfEdSjd8DJ1PMaoqvSY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:51:00 2025 by rpki-client