$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47f6e568-69dc-343f-b596-bf5bc2189e57.roa File: 47f6e568-69dc-343f-b596-bf5bc2189e57.roa (raw, json) Hash identifier: GSq7hIZTr6cme57Zlrs+BnkK86eOp6eZmTtc+OikB3Y= Subject key identifier: 76:C2:7C:61:AA:4E:8D:B5:9E:61:6E:59:8F:B1:79:C9:BC:02:CD:ED Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE8913CDD781BB1EC771D3800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47f6e568-69dc-343f-b596-bf5bc2189e57.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 16625 IP address blocks: 104.89.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:3c:dd:78:1b:b1:ec:77:1d:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=047445ce-58b4-40ff-9365-e9d12c146e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:8a:54:a0:cf:52:85:82:bb:ed:08:43:0e: 6d:57:ae:f6:48:ef:13:02:ce:81:20:38:aa:92:13: 00:9b:00:c9:22:f7:1e:4f:07:78:9f:cf:28:4d:3e: 4a:22:f8:58:c6:91:c7:90:89:68:05:92:d2:ec:4c: 62:99:84:4c:e3:a8:32:54:0d:39:e6:d4:19:cc:12: d2:94:52:71:32:a9:67:c2:9c:48:26:14:4b:b8:6a: 1e:0b:4e:eb:4d:da:1a:5f:e2:ad:8f:4e:4e:2b:a8: 9c:a6:47:e9:27:df:47:35:ee:ad:72:4f:65:b4:97: c6:57:cb:58:82:80:ba:25:c5:74:e8:15:cc:2a:78: 89:de:c6:73:8f:49:ca:b6:4e:37:ba:26:23:68:77: 68:b5:2a:70:2b:18:8b:bb:01:8f:30:37:59:ff:7d: 93:96:a4:61:82:18:55:36:31:11:a6:94:6c:8d:83: c8:03:ea:18:c9:2a:e5:35:d9:47:bb:42:37:62:41: 6c:96:42:81:fe:89:a5:e5:af:c9:89:6f:39:3e:10: 37:a9:5a:51:93:32:f0:5f:c6:75:83:06:84:c8:fc: 63:3e:38:bc:85:bb:58:42:84:96:7a:78:54:19:38: 94:a4:04:f1:13:12:f0:44:29:51:18:2c:d6:ea:8f: 66:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C2:7C:61:AA:4E:8D:B5:9E:61:6E:59:8F:B1:79:C9:BC:02:CD:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/47f6e568-69dc-343f-b596-bf5bc2189e57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.89.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c4:3e:b3:d2:cd:34:4d:39:2f:3b:fc:9f:2b:be:3f:c0:1b: c2:7c:01:6f:74:5e:9e:0b:1c:ad:d6:6b:b5:a6:56:4b:c0:45: be:a4:06:22:47:5b:c7:6e:e7:ec:ec:46:c8:2c:cd:23:a6:0e: 81:2e:bf:1f:a4:da:0d:56:49:13:e1:f9:06:e0:6d:82:b7:99: 10:03:c9:e1:6d:cd:4b:d7:d6:e2:69:d2:85:de:c3:68:5a:e0: 10:1c:bf:62:93:35:8c:10:3b:0b:3d:94:20:93:fe:29:fc:8b: 02:4f:de:59:2e:66:8e:b3:c7:7c:1b:ef:32:61:a2:42:db:fa: 99:90:f4:85:3d:d0:1f:05:a0:7b:f2:6e:fb:bc:18:5f:9e:76: 9c:36:75:a7:68:c3:f9:2b:4b:2f:12:82:59:77:25:f9:54:06: 46:4a:d5:a4:0b:55:a4:60:11:15:5c:a7:3e:b7:3d:97:1b:e9: bf:f3:6d:4b:d7:c6:c7:e3:ce:92:13:fd:3d:7d:b5:7c:73:ee: f1:f9:b5:68:f3:d0:ac:b9:97:70:ee:c3:47:ed:3b:ee:c3:fe: 26:58:1c:92:dd:d3:ac:ab:c0:95:b7:fb:dc:70:d9:bf:12:9c: bf:f8:41:4a:50:15:50:46:88:cb:e5:8f:2d:26:96:b1:e6:1c: d0:d4:0e:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTzdeBux7HcdOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk MDQ3NDQ1Y2UtNThiNC00MGZmLTkzNjUtZTlkMTJjMTQ2ZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLiKVKDPUoWCu+0IQw5tV672SO8TAs6BIDiq khMAmwDJIvceTwd4n88oTT5KIvhYxpHHkIloBZLS7EximYRM46gyVA055tQZzBLS lFJxMqlnwpxIJhRLuGoeC07rTdoaX+Ktj05OK6icpkfpJ99HNe6tck9ltJfGV8tY goC6JcV06BXMKniJ3sZzj0nKtk43uiYjaHdotSpwKxiLuwGPMDdZ/32TlqRhghhV NjERppRsjYPIA+oYySrlNdlHu0I3YkFslkKB/oml5a/JiW85PhA3qVpRkzLwX8Z1 gwaEyPxjPji8hbtYQoSWenhUGTiUpATxExLwRClRGCzW6o9mywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbCfGGqTo21nmFuWY+xecm8As3tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDdmNmU1NjgtNjlkYy0z NDNmLWI1OTYtYmY1YmMyMTg5ZTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaFlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbEPrPSzTRNOS87/J8rvj/AG8J8AW90Xp4LHK3Wa7WmVkvARb6kBiJH W8du5+zsRsgszSOmDoEuvx+k2g1WSRPh+QbgbYK3mRADyeFtzUvX1uJp0oXew2ha 4BAcv2KTNYwQOws9lCCT/in8iwJP3lkuZo6zx3wb7zJhokLb+pmQ9IU90B8FoHvy bvu8GF+edpw2dadow/krSy8Sgll3JflUBkZK1aQLVaRgERVcpz63PZcb6b/zbUvX xsfjzpIT/T19tXxz7vH5tWjz0Ky5l3Duw0ftO+7D/iZYHJLd06yrwJW3+9xw2b8S nL/4QUpQFVBGiMvljy0mlrHmHNDUDvs= -----END CERTIFICATE-----Generated at Sat Aug 23 15:01:33 2025 by rpki-client