$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/475f8028-24da-3c36-8620-35a8d917a580.roa File: 475f8028-24da-3c36-8620-35a8d917a580.roa (raw, json) Hash identifier: 3G+swu041LojbOTCZopYtZtaLfdDVWaz++iBS9deDdU= Subject key identifier: D6:26:69:E0:CE:0B:4D:74:DF:8D:D3:2B:1A:E2:78:5D:1D:17:54:2F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF25689FAE7D8A1E53CB23000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/475f8028-24da-3c36-8620-35a8d917a580.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.70.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:89:fa:e7:d8:a1:e5:3c:b2:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=5da734f6-3359-43ec-842d-9660c78790ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:07:6a:1a:b4:59:51:0c:5e:cb:f8:46:a9:56: 6b:f5:d9:3d:da:8d:ee:bf:d3:0e:c5:ac:0f:55:f5: 7d:4f:96:7a:07:c9:b0:7a:23:49:4e:34:9b:73:41: 21:23:57:4b:34:36:3a:f1:c0:4a:61:c6:3a:e9:22: 3b:ab:12:86:86:94:45:34:09:d8:86:51:b4:38:eb: f8:ed:64:b1:db:e9:56:03:1b:47:af:e9:73:49:63: 48:8f:84:26:2d:2e:84:c0:a4:3f:2c:d3:2e:c5:38: 96:6c:76:a8:9f:f2:9b:cb:b0:cb:a1:3a:0c:5a:42: a5:65:59:39:3d:1a:7e:ec:b5:50:95:b2:4e:71:a3: 16:4e:ac:ee:a6:8c:04:00:1e:46:28:ea:2c:f7:81: 1f:f0:e1:a9:74:0c:6c:59:49:47:49:01:3c:c2:79: d9:3e:ea:05:e1:f9:79:ac:98:f7:0a:97:73:80:df: a2:24:4d:02:77:05:ca:7e:c0:10:9f:47:47:c0:bb: ec:01:3b:52:ff:6b:76:0b:23:bd:48:70:0d:aa:ba: 19:d9:e7:bf:5a:ec:56:61:1c:6d:0c:e3:15:9b:20: e5:e6:e4:11:9e:c1:ca:fe:4d:6c:5b:37:1c:41:c4: 97:7b:b4:4d:e5:e8:56:eb:ec:65:9f:4b:26:4e:35: 1a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:26:69:E0:CE:0B:4D:74:DF:8D:D3:2B:1A:E2:78:5D:1D:17:54:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/475f8028-24da-3c36-8620-35a8d917a580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.70.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:26:7d:33:52:e7:3e:44:92:25:4b:b4:73:55:62:0e:68:85: bf:64:81:51:dc:36:da:09:b5:2d:69:63:7a:28:93:e1:47:d5: 85:91:f0:78:d6:7c:ce:04:8a:88:3c:5e:88:df:f7:78:cb:f0: fd:8d:12:47:9a:7c:44:9f:3a:dd:51:08:d2:73:75:44:1b:20: 92:e1:56:df:31:e7:15:91:83:0d:ed:18:8a:e2:e9:d9:bc:da: 5c:a7:31:e1:3c:6a:d2:37:fc:de:d3:78:99:41:7f:18:80:df: eb:7a:f7:67:fc:d5:76:d0:11:e7:ce:c8:0d:b8:ce:4e:53:b0: 47:a6:5f:08:be:cf:0a:eb:3c:5d:bb:06:33:3f:d3:90:6e:c2: e3:de:cc:db:0e:f1:a7:04:e4:fc:4d:90:b4:48:6b:ce:65:c4: d8:e4:94:67:2c:f1:f3:c8:cd:4a:c4:61:bc:70:a5:9e:b6:e6: 79:4f:8e:bc:73:ac:ea:c0:ce:34:18:51:75:a6:b1:f5:84:d5: 21:01:f0:e3:5b:53:51:8e:27:9f:18:fb:ba:9f:6b:fc:fd:ae: 96:e8:fc:0e:ec:c6:48:65:57:4f:13:34:17:e6:53:2b:b1:b4: eb:48:4b:ff:92:57:7f:f2:5d:e3:f4:13:5a:63:f9:16:5e:11: c1:49:31:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVon659ih5TyyMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NWRhNzM0ZjYtMzM1OS00M2VjLTg0MmQtOTY2MGM3ODc5MGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwdqGrRZUQxey/hGqVZr9dk92o3uv9MOxawP VfV9T5Z6B8mweiNJTjSbc0EhI1dLNDY68cBKYcY66SI7qxKGhpRFNAnYhlG0OOv4 7WSx2+lWAxtHr+lzSWNIj4QmLS6EwKQ/LNMuxTiWbHaon/Kby7DLoToMWkKlZVk5 PRp+7LVQlbJOcaMWTqzupowEAB5GKOos94Ef8OGpdAxsWUlHSQE8wnnZPuoF4fl5 rJj3CpdzgN+iJE0CdwXKfsAQn0dHwLvsATtS/2t2CyO9SHANqroZ2ee/WuxWYRxt DOMVmyDl5uQRnsHK/k1sWzccQcSXe7RN5ehW6+xln0smTjUa4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYmaeDOC010343TKxrieF0dF1QvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDc1ZjgwMjgtMjRkYS0z YzM2LTg2MjAtMzVhOGQ5MTdhNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEa0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQmfTNS5z5EkiVLtHNVYg5ohb9kgVHcNtoJtS1pY3ook+FH1YWR8HjW fM4Eiog8Xojf93jL8P2NEkeafESfOt1RCNJzdUQbIJLhVt8x5xWRgw3tGIri6dm8 2lynMeE8atI3/N7TeJlBfxiA3+t692f81XbQEefOyA24zk5TsEemXwi+zwrrPF27 BjM/05BuwuPezNsO8acE5PxNkLRIa85lxNjklGcs8fPIzUrEYbxwpZ625nlPjrxz rOrAzjQYUXWmsfWE1SEB8ONbU1GOJ58Y+7qfa/z9rpbo/A7sxkhlV08TNBfmUyux tOtIS/+SV3/yXeP0E1pj+RZeEcFJMag= -----END CERTIFICATE-----Generated at Sat Aug 23 13:48:57 2025 by rpki-client