$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42a67435-af03-32d7-8451-08fc43b35fc0.roa File: 42a67435-af03-32d7-8451-08fc43b35fc0.roa (raw, json) Hash identifier: ViDxCO4Ndq6FhExTmT4484F0ijpm0gvVX80VNjnaUlQ= Subject key identifier: B9:E6:B5:3E:0E:0C:EB:68:4B:C9:C1:93:CB:5C:19:02:35:62:D4:83 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE8913D036724D7D719BBAAC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42a67435-af03-32d7-8451-08fc43b35fc0.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 16625 IP address blocks: 104.98.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:3d:03:67:24:d7:d7:19:bb:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=97a6674d-ed6e-4cc0-a561-e226684e85ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3f:6d:10:02:9b:b9:99:4e:57:99:10:6d:95: e8:86:c9:a0:c4:e9:d9:62:df:66:c2:3a:23:34:6a: a1:d9:35:39:8f:b5:05:36:24:a8:b9:10:5b:6c:dd: 65:14:62:56:3a:61:f2:06:db:c1:a8:86:42:2b:3d: 2c:e6:32:96:aa:d4:e9:2b:70:d4:31:a0:83:95:0b: b9:20:eb:4b:0d:18:e6:5d:c7:be:0a:b2:28:27:15: 06:d0:62:ce:c1:3d:77:f4:ef:d0:62:33:ce:e9:84: 85:9c:fb:0e:45:54:01:af:7d:c6:84:05:6a:55:00: 4e:89:5e:41:1c:c5:55:dc:da:19:d2:bb:e7:9a:e9: 29:f9:58:d4:a5:8d:ba:eb:45:91:bf:d0:e0:d1:68: 8e:68:ac:7a:b1:5f:31:a4:7c:53:12:1d:8b:c4:66: c4:97:0a:c8:1e:41:de:d5:d4:23:aa:14:cc:e0:2c: 03:a9:09:92:03:93:08:78:a8:8b:2e:a9:5b:00:82: 64:1d:5a:45:f5:9b:1f:83:7b:75:ae:57:da:6a:7f: 1b:7f:59:b4:ac:0f:80:86:da:52:47:67:53:3d:23: 36:bc:30:fb:a6:38:71:f0:c0:dc:92:55:55:79:53: 8d:76:19:09:3b:70:61:e1:71:3e:18:37:d8:69:5c: e4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E6:B5:3E:0E:0C:EB:68:4B:C9:C1:93:CB:5C:19:02:35:62:D4:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42a67435-af03-32d7-8451-08fc43b35fc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.98.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f4:d3:1b:be:a7:7f:c9:7c:01:56:bf:bb:11:02:90:53:26: 9c:b4:03:0b:50:f3:2e:50:4b:04:63:d9:06:a9:88:00:d4:74: 26:00:78:6f:8c:02:7e:75:34:fc:11:00:4e:d2:01:88:cb:83: 6e:22:d0:aa:e2:ce:61:50:00:26:3e:73:42:d3:45:46:c1:3b: 43:af:84:42:49:f6:9e:80:79:32:53:f4:e4:24:c6:34:cb:a9: 15:49:d9:e2:5e:f6:69:9d:18:45:0a:da:5b:cc:06:5c:d4:4c: 51:35:ed:56:e7:71:5d:9d:c8:88:e7:96:cc:48:90:73:5c:d1: 14:0b:0d:ed:84:42:fd:07:3e:74:ad:3e:45:dd:d3:7a:16:92: 17:3d:54:47:60:54:6c:12:78:8f:0b:fb:4e:02:a3:cf:5b:17: cb:39:5b:49:88:e2:a0:64:09:28:c5:a2:57:57:d3:1a:5d:65: 47:6e:4d:0e:4e:f8:7f:3d:47:20:d2:5a:cc:6e:fa:89:50:82: 31:fc:5e:23:4a:61:fa:99:17:60:fa:35:50:0c:ef:e1:2b:55: df:c0:54:01:17:cb:6a:93:48:b1:58:68:77:46:cf:9e:e7:66: dc:35:eb:fc:c8:08:78:31:ea:04:d1:d4:cc:a0:ff:3b:e8:e1: 48:ce:50:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokT0DZyTX1xm7qsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk OTdhNjY3NGQtZWQ2ZS00Y2MwLWE1NjEtZTIyNjY4NGU4NWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD9tEAKbuZlOV5kQbZXohsmgxOnZYt9mwjoj NGqh2TU5j7UFNiSouRBbbN1lFGJWOmHyBtvBqIZCKz0s5jKWqtTpK3DUMaCDlQu5 IOtLDRjmXce+CrIoJxUG0GLOwT139O/QYjPO6YSFnPsORVQBr33GhAVqVQBOiV5B HMVV3NoZ0rvnmukp+VjUpY2660WRv9Dg0WiOaKx6sV8xpHxTEh2LxGbElwrIHkHe 1dQjqhTM4CwDqQmSA5MIeKiLLqlbAIJkHVpF9Zsfg3t1rlfaan8bf1m0rA+AhtpS R2dTPSM2vDD7pjhx8MDcklVVeVONdhkJO3Bh4XE+GDfYaVzkCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnmtT4ODOtoS8nBk8tcGQI1YtSDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDJhNjc0MzUtYWYwMy0z MmQ3LTg0NTEtMDhmYzQzYjM1ZmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaGLMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIj00xu+p3/JfAFWv7sRApBTJpy0AwtQ8y5QSwRj2QapiADUdCYAeG+M An51NPwRAE7SAYjLg24i0KrizmFQACY+c0LTRUbBO0OvhEJJ9p6AeTJT9OQkxjTL qRVJ2eJe9mmdGEUK2lvMBlzUTFE17VbncV2dyIjnlsxIkHNc0RQLDe2EQv0HPnSt PkXd03oWkhc9VEdgVGwSeI8L+04Co89bF8s5W0mI4qBkCSjFoldX0xpdZUduTQ5O +H89RyDSWsxu+olQgjH8XiNKYfqZF2D6NVAM7+ErVd/AVAEXy2qTSLFYaHdGz57n Ztw16/zICHgx6gTR1Myg/zvo4UjOUKU= -----END CERTIFICATE-----Generated at Sat Aug 23 20:53:32 2025 by rpki-client