$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36412cda-a28b-3ed0-a2d6-ed06cff4ec05.roa File: 36412cda-a28b-3ed0-a2d6-ed06cff4ec05.roa (raw, json) Hash identifier: xTbaD8+8/fY5QZ+OnqJKdzqT7+Xq/MMyXxWmtKY4hc8= Subject key identifier: 3C:70:15:43:DC:74:7A:1A:30:1C:B7:46:DF:D9:0B:47:A3:95:9B:D1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF95157A411F4748DD92079C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36412cda-a28b-3ed0-a2d6-ed06cff4ec05.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 16625 IP address blocks: 104.119.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:57:a4:11:f4:74:8d:d9:20:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=79afb559-242d-4dc0-896d-beeaa3a42b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b7:f3:33:d4:82:32:96:3d:df:40:f3:8b:92: 78:2c:ba:0c:0f:4e:c0:3e:bf:59:95:36:93:5d:4d: 96:b9:49:8c:fd:3f:19:4b:4e:33:a3:16:8f:9a:b0: 68:4b:fe:81:ec:f4:50:50:aa:a9:ca:cb:a5:7e:c0: 54:40:1b:df:1f:5f:96:9a:87:3f:43:bf:62:19:18: 74:72:de:29:b0:17:2b:ed:6f:82:ab:93:18:50:31: c7:8e:63:38:00:61:70:59:06:8c:7d:79:2d:01:88: 61:26:70:55:39:08:19:72:cb:d2:25:ad:5d:c2:a1: d9:a6:89:4a:43:4e:65:9f:e1:fb:d9:0c:48:d0:74: 50:43:47:bf:e4:ac:84:b6:93:14:49:8e:32:07:77: b7:e8:c9:dd:50:77:26:39:bd:14:51:64:64:d0:93: ed:a2:f3:97:f8:21:f7:32:73:17:f0:19:28:a0:3a: f2:6b:d4:4e:f9:4e:b6:16:a8:3d:48:00:95:82:7b: a8:89:42:6b:23:00:66:33:5c:d1:19:a5:53:99:06: b7:18:5b:f2:e9:b7:a9:d2:24:c3:a4:5a:84:aa:f1: fa:0b:94:3d:70:6c:a6:35:7c:81:d4:a0:3e:c0:6e: 02:66:59:f2:33:f1:21:ae:e3:15:25:2c:9d:a3:7b: e3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:70:15:43:DC:74:7A:1A:30:1C:B7:46:DF:D9:0B:47:A3:95:9B:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36412cda-a28b-3ed0-a2d6-ed06cff4ec05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.119.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:53:48:ae:c4:9b:7b:e5:ed:31:85:fd:4e:e0:cf:1a:7d:f3: 9a:eb:5d:aa:0c:74:08:f7:70:4d:60:4d:71:7b:36:69:87:a1: bb:d1:6a:13:d4:ed:b5:e0:dd:8c:6d:a1:df:b5:aa:3e:cb:6d: 3d:24:d8:1f:32:30:01:15:60:ad:8e:4e:61:cb:9c:ea:07:dd: 47:ec:8c:81:a4:3e:76:53:27:7a:88:a7:b5:64:93:d8:53:6d: b7:87:c0:5f:1f:73:23:44:2f:5f:2d:28:8a:2a:2b:40:2c:88: be:9d:30:60:40:95:ab:47:09:d6:27:dd:df:59:f1:38:14:66: be:83:d9:2f:20:d9:1e:34:54:0b:a7:d2:30:05:38:ca:cc:e6: 73:17:f1:44:1b:b6:d7:e9:7a:9f:6e:ac:77:6c:b2:2b:c0:9d: d9:32:7a:6e:46:2f:15:46:ae:cf:1d:5c:91:27:77:24:a4:ec: 57:4b:8a:65:c0:ae:e5:27:1f:f5:6a:19:8f:fb:86:17:0b:e9: 36:22:bd:3d:30:69:ca:79:19:a2:38:3d:64:16:0a:95:a6:d2: f0:ea:77:5d:cb:c7:a1:f3:a1:42:6d:e1:6f:23:ff:fe:7d:54: 5c:01:e4:f6:d4:d1:53:b6:48:5a:7f:4f:20:ed:2d:4e:28:3f: 58:a6:6b:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVekEfR0jdkgecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NzlhZmI1NTktMjQyZC00ZGMwLTg5NmQtYmVlYWEzYTQyYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLfzM9SCMpY930Dzi5J4LLoMD07APr9ZlTaT XU2WuUmM/T8ZS04zoxaPmrBoS/6B7PRQUKqpysulfsBUQBvfH1+Wmoc/Q79iGRh0 ct4psBcr7W+Cq5MYUDHHjmM4AGFwWQaMfXktAYhhJnBVOQgZcsvSJa1dwqHZpolK Q05ln+H72QxI0HRQQ0e/5KyEtpMUSY4yB3e36MndUHcmOb0UUWRk0JPtovOX+CH3 MnMX8BkooDrya9RO+U62Fqg9SACVgnuoiUJrIwBmM1zRGaVTmQa3GFvy6bep0iTD pFqEqvH6C5Q9cGymNXyB1KA+wG4CZlnyM/EhruMVJSydo3vjzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxwFUPcdHoaMBy3Rt/ZC0ejlZvRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzY0MTJjZGEtYTI4Yi0z ZWQwLWEyZDYtZWQwNmNmZjRlYzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaHfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFTSK7Em3vl7TGF/U7gzxp985rrXaoMdAj3cE1gTXF7NmmHobvRahPU 7bXg3Yxtod+1qj7LbT0k2B8yMAEVYK2OTmHLnOoH3UfsjIGkPnZTJ3qIp7Vkk9hT bbeHwF8fcyNEL18tKIoqK0AsiL6dMGBAlatHCdYn3d9Z8TgUZr6D2S8g2R40VAun 0jAFOMrM5nMX8UQbttfpep9urHdssivAndkyem5GLxVGrs8dXJEndySk7FdLimXA ruUnH/VqGY/7hhcL6TYivT0wacp5GaI4PWQWCpWm0vDqd13Lx6HzoUJt4W8j//59 VFwB5PbU0VO2SFp/TyDtLU4oP1ima64= -----END CERTIFICATE-----Generated at Mon Oct 20 04:57:44 2025 by rpki-client