$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a6f7492-3753-3752-9bf2-1da09926c930.roa File: 3a6f7492-3753-3752-9bf2-1da09926c930.roa (raw, json) Hash identifier: 5BVMnwr4v4FLmfjDBaX+/k3NyeVz9eO9Ea1ddwflstA= Subject key identifier: A9:80:C4:D8:5F:8D:C1:FF:7A:31:91:C5:BF:90:F9:FC:7C:ED:0D:65 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE8913BF006F9C9DF8B259980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a6f7492-3753-3752-9bf2-1da09926c930.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 16625 IP address blocks: 104.80.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:3b:f0:06:f9:c9:df:8b:25:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=5ac2c11c-49ac-4fc3-8de6-d360f1f34f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7a:92:3b:00:15:54:40:fa:78:a8:3d:d0:6c: e0:da:72:04:fa:36:c7:d8:14:39:f0:26:42:49:68: cd:db:ad:f9:3b:1e:7c:56:eb:07:f0:2c:12:72:0c: d7:31:be:58:10:5d:17:c4:82:fe:15:56:2c:3a:d5: e6:a4:e2:1f:84:df:aa:f6:0d:e6:e2:ae:41:4c:f4: 73:6c:0b:99:5d:05:80:a2:7e:74:92:83:cd:12:fc: 78:f8:66:53:eb:54:dd:84:40:7b:bf:02:9e:2a:76: e4:05:4e:3d:5b:55:05:78:11:e2:d8:65:49:ad:15: ac:6b:6c:71:71:a8:da:9f:f9:57:1f:70:1d:1f:f9: e7:db:af:b9:a9:d3:10:f9:5d:d0:72:25:7d:82:18: eb:5f:18:e7:7c:2c:f3:69:81:1a:eb:1e:d3:ac:92: 6d:67:21:2e:e1:39:8a:a4:27:95:35:f6:af:f3:4d: f7:de:cc:6a:db:66:f9:1e:72:37:63:10:7b:49:b8: e4:2b:6e:11:83:b7:48:94:83:96:b0:9a:cb:72:76: 62:60:4f:d4:26:f5:96:b9:1e:54:89:ae:9e:7f:67: cb:55:47:0c:e5:5e:63:0c:85:d2:ce:f0:91:2c:7c: 92:22:42:17:28:67:38:06:57:d7:07:97:f4:17:65: 33:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:80:C4:D8:5F:8D:C1:FF:7A:31:91:C5:BF:90:F9:FC:7C:ED:0D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a6f7492-3753-3752-9bf2-1da09926c930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.80.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:10:fa:6b:4a:5b:fa:50:47:21:47:5d:77:5f:e2:dc:b2:9c: 61:ff:09:48:0a:cf:65:1a:03:b3:60:15:2f:0f:a7:da:24:db: d3:54:f2:fa:07:68:87:0c:c2:24:a4:df:c3:14:1a:f8:c4:55: 74:d6:d1:00:a0:dd:d3:aa:a3:1e:10:18:02:bd:79:3b:18:d5: 8a:8d:e6:83:77:fc:6d:1b:12:09:0c:29:d0:17:31:50:04:47: 63:54:ca:67:8d:7b:7e:61:3c:ab:79:8c:41:55:97:89:0a:69: 0a:26:88:c1:9b:7c:6a:a5:27:ab:4a:6c:81:8f:23:0b:48:36: 41:6f:81:ff:28:b0:0e:51:a4:e7:8a:72:3a:40:e1:1d:ea:0f: 44:46:bc:50:2d:e5:92:37:09:0c:e7:23:fd:66:1b:76:60:ad: 21:81:42:cd:4d:ee:92:19:ed:b8:be:91:55:58:9c:7e:31:7a: 22:56:c2:5f:a6:d9:84:1f:98:3e:01:fc:59:e5:b3:f0:1c:d8: 12:0c:d7:b4:95:fc:07:a0:34:c2:24:9b:e5:be:8e:8d:88:52: 3c:39:df:89:88:54:fd:06:48:57:6b:70:d3:53:eb:5a:b1:d8: af:6c:7e:6f:3b:3d:40:a1:4c:e5:63:e5:e0:16:a5:65:9e:37: ac:d0:3f:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTvwBvnJ34slmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NWFjMmMxMWMtNDlhYy00ZmMzLThkZTYtZDM2MGYxZjM0ZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHqSOwAVVED6eKg90Gzg2nIE+jbH2BQ58CZC SWjN2635Ox58VusH8CwScgzXMb5YEF0XxIL+FVYsOtXmpOIfhN+q9g3m4q5BTPRz bAuZXQWAon50koPNEvx4+GZT61TdhEB7vwKeKnbkBU49W1UFeBHi2GVJrRWsa2xx cajan/lXH3AdH/nn26+5qdMQ+V3QciV9ghjrXxjnfCzzaYEa6x7TrJJtZyEu4TmK pCeVNfav80333sxq22b5HnI3YxB7SbjkK24Rg7dIlIOWsJrLcnZiYE/UJvWWuR5U ia6ef2fLVUcM5V5jDIXSzvCRLHySIkIXKGc4BlfXB5f0F2Uz5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmAxNhfjcH/ejGRxb+Q+fx87Q1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2E2Zjc0OTItMzc1My0z NzUyLTliZjItMWRhMDk5MjZjOTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaFDUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcQ+mtKW/pQRyFHXXdf4tyynGH/CUgKz2UaA7NgFS8Pp9ok29NU8voH aIcMwiSk38MUGvjEVXTW0QCg3dOqox4QGAK9eTsY1YqN5oN3/G0bEgkMKdAXMVAE R2NUymeNe35hPKt5jEFVl4kKaQomiMGbfGqlJ6tKbIGPIwtINkFvgf8osA5RpOeK cjpA4R3qD0RGvFAt5ZI3CQznI/1mG3ZgrSGBQs1N7pIZ7bi+kVVYnH4xeiJWwl+m 2YQfmD4B/Fnls/Ac2BIM17SV/AegNMIkm+W+jo2IUjw534mIVP0GSFdrcNNT61qx 2K9sfm87PUChTOVj5eAWpWWeN6zQP74= -----END CERTIFICATE-----Generated at Sat Aug 23 14:34:16 2025 by rpki-client