$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a14ceb3-528a-3e21-bc6f-b0166fbc59bc.roa File: 4a14ceb3-528a-3e21-bc6f-b0166fbc59bc.roa (raw, json) Hash identifier: kb5iFexTmp/RcL3eAZDkeySCermea6VSd3eGp0Bdc5c= Subject key identifier: 25:8A:28:E4:85:4F:36:E2:66:53:99:F9:40:0F:16:C0:38:74:32:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF2568902A19E1C0340BDF380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a14ceb3-528a-3e21-bc6f-b0166fbc59bc.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 104.66.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:89:02:a1:9e:1c:03:40:bd:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=31d56a38-e721-4f74-b325-30f290628c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:25:36:75:e7:fb:d1:ba:16:c6:f9:37:4f:35: 58:12:65:97:73:58:da:d8:c7:2a:71:94:b9:8a:11: 57:92:18:1c:db:49:2e:41:b5:61:e6:68:0a:0e:51: 88:5f:a0:3b:e4:24:f4:05:f3:45:ba:10:4b:8a:47: 22:6a:1a:75:67:8e:1d:86:b4:97:17:c0:c5:03:f5: 75:9d:c3:2f:05:57:18:1c:09:c1:d3:f3:b4:60:ca: 87:18:61:3f:50:d4:f4:98:d2:94:a7:b9:c3:86:42: b9:5a:72:2f:5b:44:5c:0a:e5:43:47:f6:f7:1b:f9: 9e:ee:6b:ef:d9:b3:1e:68:b3:2c:17:2e:9c:db:54: c0:e0:6f:65:00:02:38:25:46:37:f6:45:71:9e:b9: 5b:b4:90:60:a5:e1:7b:b9:f0:26:a5:24:d9:b1:c4: 1e:73:fb:1d:ca:e6:2f:de:04:3e:9f:dc:56:c1:c6: fd:08:ce:28:a0:63:84:2b:04:87:b2:21:e4:14:31: e9:b0:56:18:34:0c:4b:ab:36:56:c1:69:ee:a8:c9: ef:e8:7e:3f:8f:32:b7:7b:3c:19:67:ec:4c:15:dc: 4e:0a:48:ad:dc:87:58:98:a8:01:f2:8a:8f:40:8c: 29:ce:22:16:41:f3:ef:23:b0:c2:35:2c:4f:4d:ad: dd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8A:28:E4:85:4F:36:E2:66:53:99:F9:40:0F:16:C0:38:74:32:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a14ceb3-528a-3e21-bc6f-b0166fbc59bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.66.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:09:09:63:eb:c1:23:80:0f:9b:a1:a8:72:18:8b:45:02:a4: ba:6e:e6:d0:2c:09:48:5a:a9:32:b4:74:6b:2f:20:82:e1:3e: 21:84:ff:bc:34:ec:f8:cb:fb:8b:1f:d1:93:13:35:d6:81:ac: b8:b9:33:78:20:96:27:dd:e2:c8:99:32:59:50:11:21:38:d7: 56:5b:01:37:fe:ef:92:90:7b:a6:86:30:25:ea:d4:b8:71:aa: cd:bf:ad:d4:8a:a3:23:8d:50:ba:6c:5a:f3:77:98:15:02:ab: 03:c3:b3:ca:46:a8:b9:34:4d:18:d9:d5:46:1b:61:86:bb:7a: 4e:d9:1d:20:e7:48:19:04:bf:a6:ce:af:3a:36:bd:ec:43:36: 74:32:1b:bb:d5:a1:a2:72:61:fb:7c:32:ac:37:b9:ca:d4:fe: de:86:a7:b3:19:65:e2:30:80:65:77:42:1e:48:32:3a:ac:b4: c2:bc:19:63:a2:4b:8f:35:63:c1:5d:cf:f4:39:73:f8:75:0f: 2b:b2:53:87:2a:26:00:41:3a:95:a2:50:c2:3b:f8:18:4b:cb: da:40:c7:05:26:43:57:3b:e4:11:36:f1:14:6e:39:a9:9f:1c: 5b:8e:f6:9c:87:5d:aa:fd:a2:dc:cf:32:78:aa:b2:ee:95:af: 61:15:83:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVokCoZ4cA0C984AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MzFkNTZhMzgtZTcyMS00Zjc0LWIzMjUtMzBmMjkwNjI4YzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyU2def70boWxvk3TzVYEmWXc1ja2McqcZS5 ihFXkhgc20kuQbVh5mgKDlGIX6A75CT0BfNFuhBLikciahp1Z44dhrSXF8DFA/V1 ncMvBVcYHAnB0/O0YMqHGGE/UNT0mNKUp7nDhkK5WnIvW0RcCuVDR/b3G/me7mvv 2bMeaLMsFy6c21TA4G9lAAI4JUY39kVxnrlbtJBgpeF7ufAmpSTZscQec/sdyuYv 3gQ+n9xWwcb9CM4ooGOEKwSHsiHkFDHpsFYYNAxLqzZWwWnuqMnv6H4/jzK3ezwZ Z+xMFdxOCkit3IdYmKgB8oqPQIwpziIWQfPvI7DCNSxPTa3dgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWKKOSFTzbiZlOZ+UAPFsA4dDLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGExNGNlYjMtNTI4YS0z ZTIxLWJjNmYtYjAxNjZmYmM1OWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaEJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAJCWPrwSOAD5uhqHIYi0UCpLpu5tAsCUhaqTK0dGsvIILhPiGE/7w0 7PjL+4sf0ZMTNdaBrLi5M3gglifd4siZMllQESE411ZbATf+75KQe6aGMCXq1Lhx qs2/rdSKoyONULpsWvN3mBUCqwPDs8pGqLk0TRjZ1UYbYYa7ek7ZHSDnSBkEv6bO rzo2vexDNnQyG7vVoaJyYft8Mqw3ucrU/t6Gp7MZZeIwgGV3Qh5IMjqstMK8GWOi S481Y8Fdz/Q5c/h1DyuyU4cqJgBBOpWiUMI7+BhLy9pAxwUmQ1c75BE28RRuOamf HFuO9pyHXar9otzPMniqsu6Vr2EVg58= -----END CERTIFICATE-----Generated at Sat Aug 23 16:51:20 2025 by rpki-client